$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer File: A67F7A72FC031B1A33774C937883F79C7342B848.cer (raw, json) Hash identifier: Zabh/HdfzB6IhDpMICm08o1EM9EANq54V6DHAABOcaQ= Subject key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 6DA45AB74B5BA473D911DAE404B88682B83ACD61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft caRepository: rsync://rpkica.twnic.tw/rpki/GSNET/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:16 +0000 Certificate not after: Mon 10 May 2027 15:51:16 +0000 Subordinate resources: AS: 38837 IP: 211.78.64.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a4:5a:b7:4b:5b:a4:73:d9:11:da:e4:04:b8:86:82:b8:3a:cd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:16 2026 GMT Not After : May 10 15:51:16 2027 GMT Subject: CN=A67F7A72FC031B1A33774C937883F79C7342B848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:21:4b:75:3e:b2:b8:3f:e2:f6:47:5e:80: df:88:79:01:98:5c:a6:b7:3c:82:09:c7:82:68:4e: ae:cb:23:20:c0:90:b0:1c:1d:e8:0f:e9:b0:78:ed: 1f:d5:ee:b6:f3:42:3e:fa:de:75:ac:8f:40:8f:3d: ad:3b:e2:15:49:51:58:5a:b3:46:b7:64:d6:31:22: 51:9b:90:b2:cb:3a:18:ce:10:3a:43:0f:27:09:42: e8:5a:c0:0b:0d:c0:73:e3:e2:78:9f:ef:69:39:cf: 05:19:b7:31:77:63:43:8e:56:f2:df:5e:95:4c:a1: 1a:64:6d:68:a7:00:bc:ee:2c:08:b0:4d:25:1d:78: 38:d3:2d:02:08:14:7f:ec:37:c8:01:33:9f:42:5a: 0b:0c:f5:65:fb:0f:92:9d:3f:c0:7b:e5:ce:b9:a5: 78:6a:ff:68:81:4c:0c:3c:66:f8:77:68:49:4f:b0: 6f:20:96:74:9b:3a:75:f9:51:34:74:28:36:ec:55: 36:cd:d4:ab:9f:ac:2a:39:f9:49:fd:de:c5:df:44: 8e:50:03:77:59:33:c7:49:a7:2a:48:e2:5d:90:c8: 15:4a:ae:48:86:6f:56:c6:37:5d:c1:f2:bc:38:af: bd:90:f6:25:46:b5:70:b2:3b:cf:e2:d1:a1:31:1a: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.78.64.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38837 Signature Algorithm: sha256WithRSAEncryption 4f:b1:5f:2e:63:c0:57:bd:85:75:11:78:c6:21:00:8f:bf:b0: c5:b6:a8:db:3c:a7:c1:3d:ad:79:d4:c2:9e:d8:c7:b7:db:a9: 09:5d:bb:70:6c:09:a0:d8:f7:fa:66:2a:0c:a9:c9:d0:93:81: 31:27:be:d3:86:a0:06:95:0d:7b:59:87:e9:86:d4:fb:76:c3: 58:76:59:79:5e:21:d8:8e:ef:91:27:90:0c:5a:a4:4a:43:00: a0:9b:bb:09:4b:28:78:fa:3c:a6:21:5d:0a:89:e0:a3:bf:99: 5b:f8:9a:e8:11:a1:9f:2f:80:36:3c:8d:ae:89:d2:99:55:b0: fa:ef:5b:9d:3b:bb:2a:24:f9:29:92:33:29:cb:29:82:63:e8: 85:ef:5e:8c:e0:25:3d:5e:8b:81:e7:43:2c:6b:8f:6a:6a:0a: 3c:23:7e:62:82:11:a9:7a:1f:b9:f3:81:1b:92:1e:c0:ea:9b: 13:c9:be:99:54:9f:5a:11:95:e1:fa:98:0a:9d:8e:42:3f:d2: 88:8b:e8:02:b5:6e:62:f7:c7:9e:0b:4d:f0:01:b1:f7:00:f0: e0:cb:76:83:55:bc:36:be:26:e0:67:37:94:3b:37:f8:91:d9: e5:8e:d3:a4:f1:fb:45:d5:ce:11:17:a7:28:b5:b2:fe:da:47: 5f:99:fa:43 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIUbaRat0tbpHPZEdrkBLiGgrg6zWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDYxNloX DTI3MDUxMDE1NTExNlowMzExMC8GA1UEAxMoQTY3RjdBNzJGQzAzMUIxQTMzNzc0 QzkzNzg4M0Y3OUM3MzQyQjg0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVAIUt1PrK4P+L2R16A34h5AZhcprc8ggnHgmhOrssjIMCQsBwd6A/psHjt H9XutvNCPvredayPQI89rTviFUlRWFqzRrdk1jEiUZuQsss6GM4QOkMPJwlC6FrA Cw3Ac+PieJ/vaTnPBRm3MXdjQ45W8t9elUyhGmRtaKcAvO4sCLBNJR14ONMtAggU f+w3yAEzn0JaCwz1ZfsPkp0/wHvlzrmleGr/aIFMDDxm+HdoSU+wbyCWdJs6dflR NHQoNuxVNs3Uq5+sKjn5Sf3exd9EjlADd1kzx0mnKkjiXZDIFUquSIZvVsY3XcHy vDivvZD2JUa1cLI7z+LRoTEaaF0CAwEAAaOCAoAwggJ8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKZ/enL8AxsaM3dMk3iD95xzQrhIMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HU05FVC8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HU05FVC8w L0E2N0Y3QTcyRkMwMzFCMUEzMzc3NEM5Mzc4ODNGNzlDNzM0MkI4NDgubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATTTkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJe1MA0G CSqGSIb3DQEBCwUAA4IBAQBPsV8uY8BXvYV1EXjGIQCPv7DFtqjbPKfBPa151MKe 2Me326kJXbtwbAmg2Pf6ZioMqcnQk4ExJ77ThqAGlQ17WYfphtT7dsNYdll5XiHY ju+RJ5AMWqRKQwCgm7sJSyh4+jymIV0KieCjv5lb+JroEaGfL4A2PI2uidKZVbD6 71udO7sqJPkpkjMpyymCY+iF716M4CU9XouB50Msa49qago8I35ighGpeh+584Eb kh7A6psTyb6ZVJ9aEZXh+pgKnY5CP9KIi+gCtW5i98eeC03wAbH3APDgy3aDVbw2 vibgZzeUOzf4kdnljtOk8ftF1c4RF6cotbL+2kdfmfpD -----END CERTIFICATE-----Generated at Wed May 13 19:57:46 2026 by rpki-client