$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer File: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer (raw, json) Hash identifier: +hVTD4YTqbeOVQ4yA8FJyQFUEKzIU00J/8cipXed61o= Subject key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 51D4557E1A51D8C3C16E016F74B5EBE5AD261618 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft caRepository: rsync://rpkica.twnic.tw/rpki/GTBC/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:19 +0000 Certificate not after: Mon 10 May 2027 15:51:19 +0000 Subordinate resources: AS: 18413 IP: 61.65.192.0/19 IP: 61.67.0.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d4:55:7e:1a:51:d8:c3:c1:6e:01:6f:74:b5:eb:e5:ad:26:16:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:19 2026 GMT Not After : May 10 15:51:19 2027 GMT Subject: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:1f:2f:81:fd:6d:06:5f:cc:79:5c:20:fb: 59:50:f2:7a:b1:f7:15:4a:83:ed:75:9f:c0:5d:cb: a0:8b:8c:14:42:a5:bb:e9:6c:18:d0:5a:9d:13:3d: 48:7b:6d:0d:99:35:42:80:9e:01:b4:51:6c:52:33: 54:1e:05:32:ec:87:58:c6:18:f5:91:ac:50:6c:83: cd:d6:19:b6:c3:92:03:7a:17:48:5a:8b:1d:c8:79: cb:e4:ff:de:7a:83:cf:cb:63:d4:53:48:65:7d:4f: f7:66:57:3b:ce:db:1e:fe:f2:51:cb:91:00:c8:93: e9:12:6f:cd:b9:dc:fe:85:74:cf:77:88:d8:4c:a6: 7d:dd:66:ab:30:cf:b9:7f:75:35:4e:c6:fd:21:1a: a4:67:bc:c1:dd:f1:ed:0e:77:f0:0e:f5:cc:ed:7e: b9:ea:d4:36:d7:f1:41:6a:38:bf:93:11:2e:58:c3: 39:df:f2:12:7d:98:d3:a3:da:75:5c:53:d2:02:98: 0d:dd:56:ec:5b:9f:5b:54:24:7e:99:fe:df:2f:82: 6a:ae:59:c6:77:44:d3:f1:5d:90:4e:ad:20:31:ec: c4:ea:a7:c7:76:9c:e0:2b:e8:00:02:fa:88:1c:0e: 9a:3e:1d:9e:58:1e:6f:a8:32:8c:38:93:91:66:4b: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.65.192.0/19 61.67.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18413 Signature Algorithm: sha256WithRSAEncryption b6:ef:2e:4f:fa:85:20:52:86:18:77:7c:fa:22:e5:bb:b3:ab: ef:f7:66:20:cf:d7:ac:8a:8f:06:9c:47:7e:99:83:02:42:84: 8b:4a:f3:2c:e8:fe:da:c8:ef:b6:be:64:14:c2:bc:ea:34:29: 0b:a8:68:46:06:74:cf:7c:58:c4:18:e5:45:fd:a2:4a:7a:d1: 30:c9:06:87:70:25:4f:ef:f8:c3:28:4b:a5:9d:60:91:7a:e9: b7:56:a9:9a:35:64:16:07:04:f4:d3:b7:f0:92:fa:4d:24:38: a8:12:4d:29:33:d2:e2:66:4d:7f:d0:45:81:30:5f:12:65:8b: c9:7b:73:83:85:89:b5:bf:c4:d7:5f:2d:6a:77:39:d2:b3:3d: 99:32:35:31:cf:c0:77:db:e5:df:4b:8e:20:79:31:52:5f:8b: 46:c9:f5:92:f8:9a:d9:5c:87:53:30:d1:72:6d:c2:c3:4b:c8: 99:65:d0:52:37:af:a3:b9:49:84:bd:cc:a8:01:01:ca:b1:55: e0:7c:df:2d:8d:d4:8a:99:89:a4:ce:6b:20:60:b9:6b:11:22: 96:4b:54:fd:28:97:10:13:84:ad:ba:02:30:1b:c9:4f:0a:a6: cc:a9:6b:b2:9d:e7:81:68:bf:6c:67:01:a6:2a:ab:90:78:a3: e3:41:ba:44 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUUdRVfhpR2MPBbgFvdLXr5a0mFhgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDYxOVoX DTI3MDUxMDE1NTExOVowMzExMC8GA1UEAxMoOUZDOTlCMUY0ODEyQ0NBMkU4RDFE NTZBMDY5RjlEMThERTdEMTE4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSgHy+B/W0GX8x5XCD7WVDyerH3FUqD7XWfwF3LoIuMFEKlu+lsGNBanRM9 SHttDZk1QoCeAbRRbFIzVB4FMuyHWMYY9ZGsUGyDzdYZtsOSA3oXSFqLHch5y+T/ 3nqDz8tj1FNIZX1P92ZXO87bHv7yUcuRAMiT6RJvzbnc/oV0z3eI2Eymfd1mqzDP uX91NU7G/SEapGe8wd3x7Q538A71zO1+uerUNtfxQWo4v5MRLljDOd/yEn2Y06Pa dVxT0gKYDd1W7FufW1Qkfpn+3y+Caq5ZxndE0/FdkE6tIDHsxOqnx3ac4CvoAAL6 iBwOmj4dnlgeb6gyjDiTkWZLdzcCAwEAAaOCAoMwggJ/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/Jmx9IEsyi6NHVagafnRjefRGNMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HVEJDLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dUQkMvMC85 RkM5OUIxRjQ4MTJDQ0EyRThEMUQ1NkEwNjlGOUQxOERFN0QxMThELm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYw FDASBAIAATAMAwQFPUHAAwQEPUMAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAkft MA0GCSqGSIb3DQEBCwUAA4IBAQC27y5P+oUgUoYYd3z6IuW7s6vv92Ygz9esio8G nEd+mYMCQoSLSvMs6P7ayO+2vmQUwrzqNCkLqGhGBnTPfFjEGOVF/aJKetEwyQaH cCVP7/jDKEulnWCReum3VqmaNWQWBwT007fwkvpNJDioEk0pM9LiZk1/0EWBMF8S ZYvJe3ODhYm1v8TXXy1qdznSsz2ZMjUxz8B32+XfS44geTFSX4tGyfWS+JrZXIdT MNFybcLDS8iZZdBSN6+juUmEvcyoAQHKsVXgfN8tjdSKmYmkzmsgYLlrESKWS1T9 KJcQE4StugIwG8lPCqbMqWuyneeBaL9sZwGmKquQeKPjQbpE -----END CERTIFICATE-----Generated at Wed May 13 19:58:13 2026 by rpki-client