$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer File: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer (raw, json) Hash identifier: Xg/ucBPGklYytlRYzgCphjTVKPu9ZmJbXfzMEH7klGw= Subject key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 7CCFBA918F8A3DAE5A75273B95240BDE31F1FE82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft caRepository: rsync://rpkica.twnic.tw/rpki/MCK/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:20 +0000 Certificate not after: Mon 10 May 2027 15:53:20 +0000 Subordinate resources: IP: 103.148.68.0/23 IP: 2405:ccc0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cf:ba:91:8f:8a:3d:ae:5a:75:27:3b:95:24:0b:de:31:f1:fe:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:20 2026 GMT Not After : May 10 15:53:20 2027 GMT Subject: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:ee:3c:fa:ec:e0:4d:5c:43:bb:ec:1e:3d: 21:17:07:de:bf:de:5d:73:6b:d3:3a:67:ce:bf:66: 12:1a:51:46:13:47:41:a7:75:4a:a3:2a:f4:be:6e: 44:5d:54:bd:53:00:72:48:e4:fb:86:6f:94:f2:06: a3:3c:75:07:f7:b7:99:6d:43:7a:ee:77:b2:ea:b7: 96:bb:fb:15:8e:b8:06:ce:50:0b:6c:26:2c:db:74: 69:7a:6a:90:59:54:ba:2d:dc:32:a9:d5:2a:56:52: 23:e4:5e:bb:07:3e:b6:bc:de:27:cd:77:7a:eb:aa: d3:9a:cb:fd:48:af:4a:ca:64:8b:fa:b1:d3:d6:9e: 30:61:63:05:29:0b:4a:4e:08:84:85:00:6b:96:83: a8:c7:71:d1:d6:99:b0:3e:48:10:8a:d0:f3:0a:3f: 65:b7:fc:11:8a:d2:d3:53:fd:40:a5:99:91:bb:ae: 64:be:a3:a4:41:d3:34:e5:62:42:da:b7:29:f9:ee: e0:ab:07:e3:e1:8b:35:4e:69:83:36:20:e3:33:bb: a3:45:60:35:ef:ce:8c:f8:d1:b0:b4:18:c9:ea:3b: 21:c1:c3:cf:cf:49:e0:07:69:c3:66:a1:b9:42:41: 50:18:3a:63:a2:67:c0:98:fc:06:8a:4f:0a:c3:a6: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.68.0/23 IPv6: 2405:ccc0::/32 Signature Algorithm: sha256WithRSAEncryption 47:3f:1c:65:1d:87:21:94:d0:1b:21:4b:cc:fe:bd:69:d8:9e: dc:93:b6:04:df:cb:ad:42:c5:fc:cc:9f:d6:6f:52:de:65:a9: 10:c1:13:92:e6:23:04:bc:77:78:8f:f9:20:86:fa:b1:8a:f5: 06:32:7a:86:98:97:80:e5:17:94:8f:f8:70:df:c8:f0:6e:bb: a1:6b:5d:de:e6:fd:99:d0:9a:8b:8b:32:99:cf:ea:31:f7:b2: 7a:ed:a6:87:7c:2e:7b:1a:59:b3:91:35:05:22:85:c6:03:6a: be:6d:a0:98:90:2e:f4:55:85:86:3e:1a:4a:cf:e8:2a:8f:e3: 51:76:01:c9:d7:69:48:11:95:87:69:d8:7d:50:32:4e:69:f7: c2:ee:dc:c3:f1:ce:e6:df:a0:2d:5b:fa:5a:22:6b:20:4e:b4: 03:2d:3c:e2:a1:c5:74:49:6a:7d:98:67:ec:6c:26:5c:ec:a7: 12:f3:e5:0f:f1:e7:c0:00:35:cb:98:2c:ac:3b:3e:4c:5d:4b: 6e:69:e0:3e:0e:7e:b8:98:85:11:71:3a:c4:22:c0:d4:e6:c8: df:4e:8a:b6:49:cf:b1:9f:e8:05:e1:6f:01:61:95:96:e9:2d: af:b4:44:db:61:aa:7e:45:31:6b:5c:5d:11:53:91:4b:9a:6b: 39:2a:3e:fc -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUfM+6kY+KPa5adSc7lSQL3jHx/oIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDgyMFoX DTI3MDUxMDE1NTMyMFowMzExMC8GA1UEAxMoOUM2QzQwNEQ5NkJCMTEyOTg0RUIx NEM0NkJFMDUyNjUxNEI2QkZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMiv7jz67OBNXEO77B49IRcH3r/eXXNr0zpnzr9mEhpRRhNHQad1SqMq9L5u RF1UvVMAckjk+4ZvlPIGozx1B/e3mW1Deu53suq3lrv7FY64Bs5QC2wmLNt0aXpq kFlUui3cMqnVKlZSI+Reuwc+trzeJ813euuq05rL/UivSspki/qx09aeMGFjBSkL Sk4IhIUAa5aDqMdx0daZsD5IEIrQ8wo/Zbf8EYrS01P9QKWZkbuuZL6jpEHTNOVi Qtq3Kfnu4KsH4+GLNU5pgzYg4zO7o0VgNe/OjPjRsLQYyeo7IcHDz89J4Adpw2ah uUJBUBg6Y6JnwJj8BopPCsOm3j8CAwEAAaOCAm8wggJrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJxsQE2WuxEphOsUxGvgUmUUtr+/MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHXBggrBgEFBQcBCwSByjCBxzAvBggr BgEFBQcwBYYjcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NQ0svMC8wWwYI KwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUNLLzAvOUM2 QzQwNEQ5NkJCMTEyOTg0RUIxNEM0NkJFMDUyNjUxNEI2QkZCRi5tZnQwNwYIKwYB BQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNhdGlvbi54 bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeURDANBAIAAjAHAwUAJAXMwDANBgkqhkiG9w0BAQsFAAOCAQEA Rz8cZR2HIZTQGyFLzP69adie3JO2BN/LrULF/Myf1m9S3mWpEMETkuYjBLx3eI/5 IIb6sYr1BjJ6hpiXgOUXlI/4cN/I8G67oWtd3ub9mdCai4symc/qMfeyeu2mh3wu expZs5E1BSKFxgNqvm2gmJAu9FWFhj4aSs/oKo/jUXYByddpSBGVh2nYfVAyTmn3 wu7cw/HO5t+gLVv6WiJrIE60Ay084qHFdElqfZhn7GwmXOynEvPlD/HnwAA1y5gs rDs+TF1LbmngPg5+uJiFEXE6xCLA1ObI306KtknPsZ/oBeFvAWGVluktr7RE22Gq fkUxa1xdEVORS5prOSo+/A== -----END CERTIFICATE-----Generated at Wed May 13 19:57:30 2026 by rpki-client