$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/A04D6B50563A841F0683BE522C8871E8D83AC51C.cer File: A04D6B50563A841F0683BE522C8871E8D83AC51C.cer (raw, json) Hash identifier: 1FVobTNCfAkyKThLGmamxHqnPTFToRC/0A9FCVzQ5Js= Subject key identifier: A0:4D:6B:50:56:3A:84:1F:06:83:BE:52:2C:88:71:E8:D8:3A:C5:1C Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 2D2C0896B8830DF92710C06EEF6F08C4F400431A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/GMICLOUD/0/A04D6B50563A841F0683BE522C8871E8D83AC51C.mft caRepository: rsync://rpkica.twnic.tw/rpki/GMICLOUD/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:03 +0000 Certificate not after: Mon 10 May 2027 15:51:03 +0000 Subordinate resources: AS: 131675 -- 131676 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2c:08:96:b8:83:0d:f9:27:10:c0:6e:ef:6f:08:c4:f4:00:43:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:03 2026 GMT Not After : May 10 15:51:03 2027 GMT Subject: CN=A04D6B50563A841F0683BE522C8871E8D83AC51C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:69:78:d4:3d:74:c6:bf:6e:ab:fa:90:69: 06:87:db:bd:44:53:3c:46:0f:37:db:d2:c4:0a:24: 90:f8:a2:52:1c:dd:23:06:4e:68:31:7e:c9:e7:cf: f8:15:4d:04:38:50:b7:b6:94:34:11:0f:e0:70:1e: 4d:2e:a9:1b:f6:f2:80:7d:57:4b:e2:94:d1:9c:f4: 0a:b8:ba:f2:64:22:69:34:b9:ce:3e:4e:f7:9c:45: 20:12:88:35:81:3e:6e:35:47:11:5a:dd:00:ec:36: f9:8f:dd:f1:a8:2b:4b:af:2b:a9:60:9c:7c:c0:a9: ce:4e:90:ed:bc:fa:b9:66:bc:92:fe:ba:d7:f2:7f: 81:d5:53:eb:ad:11:58:81:af:1d:e3:20:ba:7e:0c: 87:1f:be:e9:68:dd:33:6d:5e:9f:c5:32:fe:72:3d: 41:6c:25:0b:23:b7:43:79:68:c7:da:fd:cb:89:23: b0:8d:08:b4:4f:79:90:c0:58:3f:e7:a6:0a:90:ab: 17:51:06:ff:d4:9f:73:0b:0c:09:2a:b1:4e:c8:e6: 86:3e:a6:49:f0:c4:74:bb:f7:71:94:9e:37:bf:df: fe:74:ec:02:b3:67:c8:5c:83:b2:0a:23:48:7b:57: 20:6e:92:5e:82:ef:65:9b:ea:7a:a7:ed:e4:dc:b5: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:4D:6B:50:56:3A:84:1F:06:83:BE:52:2C:88:71:E8:D8:3A:C5:1C X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/0/A04D6B50563A841F0683BE522C8871E8D83AC51C.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 131675-131676 Signature Algorithm: sha256WithRSAEncryption 0c:6f:bc:63:37:09:43:4a:45:62:4c:bf:a6:95:a9:51:0d:0b: 70:a5:f6:b4:0c:f2:34:21:97:b4:33:21:c6:46:a0:10:a9:fe: 6f:95:9a:1a:84:f4:42:80:51:d2:1a:73:53:cb:08:81:80:51: b0:0b:49:c2:3f:e1:61:d0:2e:f1:5a:34:6a:99:73:02:40:4e: 6d:aa:2a:fb:d4:f8:9d:3a:5b:b1:ce:53:83:56:8d:37:7a:98: 9c:c6:e5:68:a6:aa:0f:50:af:54:4d:2f:f2:47:e3:c0:59:f5: 7c:53:3c:f1:43:a3:9b:a4:37:e7:3a:81:b9:a3:c1:5a:da:57: 5a:03:6f:e7:6b:5f:1d:54:2c:1e:ff:6d:ae:5a:9a:d5:5f:ae: bd:c7:db:08:28:f8:c5:12:b9:a9:1b:7d:d6:a8:50:cb:4f:15: 32:5d:96:88:c3:77:b3:84:92:2b:c3:51:21:95:82:36:b3:41: 30:fe:9c:a2:58:6c:92:8f:51:33:6c:9d:38:35:a2:e4:6c:c3: f8:7c:b4:1e:53:64:1f:01:11:48:0c:d8:ba:f6:b7:29:ae:10: c0:bc:ef:5b:99:13:5b:e4:8c:32:4a:0c:c3:e8:6d:60:eb:15: 71:8d:d4:cd:56:49:ce:74:07:b0:a4:40:b3:0f:4b:4e:9c:be: 21:9d:9c:4d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIULSwIlriDDfknEMBu728IxPQAQxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDYwM1oX DTI3MDUxMDE1NTEwM1owMzExMC8GA1UEAxMoQTA0RDZCNTA1NjNBODQxRjA2ODNC RTUyMkM4ODcxRThEODNBQzUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtiaXjUPXTGv26r+pBpBofbvURTPEYPN9vSxAokkPiiUhzdIwZOaDF+yefP +BVNBDhQt7aUNBEP4HAeTS6pG/bygH1XS+KU0Zz0Cri68mQiaTS5zj5O95xFIBKI NYE+bjVHEVrdAOw2+Y/d8agrS68rqWCcfMCpzk6Q7bz6uWa8kv661/J/gdVT660R WIGvHeMgun4Mhx++6WjdM21en8Uy/nI9QWwlCyO3Q3lox9r9y4kjsI0ItE95kMBY P+emCpCrF1EG/9SfcwsMCSqxTsjmhj6mSfDEdLv3cZSeN7/f/nTsArNnyFyDsgoj SHtXIG6SXoLvZZvqeqft5Ny1cYsCAwEAAaOCAmwwggJoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKBNa1BWOoQfBoO+UiyIcejYOsUcMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HTUlDTE9VRC8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HTUlD TE9VRC8wL0EwNEQ2QjUwNTYzQTg0MUYwNjgzQkU1MjJDODg3MUU4RDgzQUM1MUMu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQgBAf8EEjAQoA4wDDAKAgMCAlsCAwICXDANBgkqhkiG9w0BAQsFAAOCAQEADG+8 YzcJQ0pFYky/ppWpUQ0LcKX2tAzyNCGXtDMhxkagEKn+b5WaGoT0QoBR0hpzU8sI gYBRsAtJwj/hYdAu8Vo0aplzAkBObaoq+9T4nTpbsc5Tg1aNN3qYnMblaKaqD1Cv VE0v8kfjwFn1fFM88UOjm6Q35zqBuaPBWtpXWgNv52tfHVQsHv9trlqa1V+uvcfb CCj4xRK5qRt91qhQy08VMl2WiMN3s4SSK8NRIZWCNrNBMP6colhsko9RM2ydODWi 5GzD+Hy0HlNkHwERSAzYuva3Ka4QwLzvW5kTW+SMMkoMw+htYOsVcY3UzVZJznQH sKRAsw9LTpy+IZ2cTQ== -----END CERTIFICATE-----Generated at Wed May 13 19:58:00 2026 by rpki-client