$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B665897BCB13562048E484EBEDAA534EA4DF9876.cer File: B665897BCB13562048E484EBEDAA534EA4DF9876.cer (raw, json) Hash identifier: tB8twMbACdh0jfZmCHuM8dajR2+d0EsmaiKdfopXH/M= Subject key identifier: B6:65:89:7B:CB:13:56:20:48:E4:84:EB:ED:AA:53:4E:A4:DF:98:76 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 63CDB0F03DB978239287AA3C4406290BD4B7D509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft caRepository: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:49:15 +0000 Certificate not after: Mon 10 May 2027 15:54:15 +0000 Subordinate resources: AS: 152618 IP: 2401:c620::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cd:b0:f0:3d:b9:78:23:92:87:aa:3c:44:06:29:0b:d4:b7:d5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:49:15 2026 GMT Not After : May 10 15:54:15 2027 GMT Subject: CN=B665897BCB13562048E484EBEDAA534EA4DF9876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:82:38:30:9b:bb:1b:ac:55:61:8e:ea:81: 00:98:56:1a:3e:31:c6:dd:be:67:c0:b1:3a:e0:83: 84:5b:e2:4c:13:b1:a9:87:20:b6:f5:09:de:5f:f0: 20:c0:3b:6a:56:bc:99:94:a7:06:b3:92:a4:5e:72: aa:d1:e8:0f:27:c2:68:b8:b9:0d:7a:5f:d6:e8:bd: 2f:ef:ac:f4:99:4b:7e:67:0b:f9:ab:ee:78:5a:6f: d6:ab:08:ec:b5:fa:3a:45:0c:a5:ac:7f:0f:2c:29: 86:95:a9:b5:f5:0b:15:14:cb:30:2e:f0:83:f5:19: 0a:a4:fe:a3:4d:a9:f0:b7:d4:1c:75:7f:0b:03:0b: df:75:f0:f4:b3:26:59:69:6a:9b:61:b7:65:c7:5a: 59:a4:be:73:1a:ca:47:56:63:4f:41:bc:eb:98:97: 3d:75:57:31:83:cc:bc:ba:33:08:54:14:c2:63:cb: 68:a4:51:ce:91:c0:e0:bc:72:bc:b7:7a:29:82:52: 1d:5c:0c:ca:49:ac:45:81:11:21:0f:c8:12:38:7d: d9:f4:39:77:81:ea:ed:e2:15:3a:50:0c:4c:3f:af: 18:e4:4c:5f:13:59:57:37:f1:56:a6:7c:de:8d:f3: 60:a3:d3:02:ac:de:9f:ae:ad:77:db:30:1c:f7:71: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:65:89:7B:CB:13:56:20:48:E4:84:EB:ED:AA:53:4E:A4:DF:98:76 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/0/B665897BCB13562048E484EBEDAA534EA4DF9876.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:c620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 152618 Signature Algorithm: sha256WithRSAEncryption 17:50:ef:04:b0:5b:b5:8d:6d:c9:83:aa:49:21:75:d7:0c:3a: 5b:d3:97:ff:fb:f0:47:d9:ad:95:03:55:e1:67:18:8f:f0:fb: 52:73:fc:18:1a:21:91:79:ea:f0:3b:7c:ca:62:8e:02:47:e5: c7:2b:9e:fd:2b:4c:94:b1:2f:e2:0a:8f:90:db:56:c4:b3:91: 30:25:2a:47:e6:fe:fe:94:0f:dd:38:0e:e6:4d:38:0c:1f:0d: 6d:ff:38:c1:36:99:b6:00:60:f7:b2:22:1c:24:80:b5:bd:e9: f0:05:eb:82:c8:8e:08:15:68:8b:09:cd:c7:25:02:c9:d1:f7: bf:66:0d:82:d1:80:bb:76:cb:18:3e:54:09:ab:06:26:ba:2c: 84:b6:d2:62:9f:35:72:91:14:cd:5f:6a:92:2d:73:f3:b1:3b: 3c:32:62:97:b1:a7:27:60:b1:cb:99:9c:31:68:bd:a1:78:6b: a8:df:2e:4d:0f:45:05:90:b9:ed:bb:ce:59:c2:11:5f:a5:a0: 25:25:14:07:67:66:df:81:e6:68:20:3b:43:c0:87:e0:fa:83: 88:83:96:6d:df:2d:b7:77:64:a8:1c:ed:ac:59:84:09:dd:5a: 6e:a1:37:00:a7:5a:c5:84:d9:22:11:5c:30:49:1a:7f:d3:ad: d8:a8:9f:f6 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIUY82w8D25eCOSh6o8RAYpC9S31QkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDkxNVoX DTI3MDUxMDE1NTQxNVowMzExMC8GA1UEAxMoQjY2NTg5N0JDQjEzNTYyMDQ4RTQ4 NEVCRURBQTUzNEVBNERGOTg3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANvMgjgwm7sbrFVhjuqBAJhWGj4xxt2+Z8CxOuCDhFviTBOxqYcgtvUJ3l/w IMA7ala8mZSnBrOSpF5yqtHoDyfCaLi5DXpf1ui9L++s9JlLfmcL+avueFpv1qsI 7LX6OkUMpax/DywphpWptfULFRTLMC7wg/UZCqT+o02p8LfUHHV/CwML33Xw9LMm WWlqm2G3ZcdaWaS+cxrKR1ZjT0G865iXPXVXMYPMvLozCFQUwmPLaKRRzpHA4Lxy vLd6KYJSHVwMykmsRYERIQ/IEjh92fQ5d4Hq7eIVOlAMTD+vGORMXxNZVzfxVqZ8 3o3zYKPTAqzen66td9swHPdxIGMCAwEAAaOCAoswggKHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLZliXvLE1YgSOSE6+2qU06k35h2MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OT1RfVEZOX0NP LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05P VF9URk5fQ08vMC9CNjY1ODk3QkNCMTM1NjIwNDhFNDg0RUJFREFBNTM0RUE0REY5 ODc2Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsG AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHGIDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMCVCowDQYJKoZIhvcNAQELBQADggEBABdQ7wSwW7WNbcmDqkkhddcMOlvT l//78EfZrZUDVeFnGI/w+1Jz/BgaIZF56vA7fMpijgJH5ccrnv0rTJSxL+IKj5Db VsSzkTAlKkfm/v6UD904DuZNOAwfDW3/OME2mbYAYPeyIhwkgLW96fAF64LIjggV aIsJzcclAsnR979mDYLRgLt2yxg+VAmrBia6LIS20mKfNXKRFM1fapItc/OxOzwy YpexpydgscuZnDFovaF4a6jfLk0PRQWQue27zlnCEV+loCUlFAdnZt+B5mggO0PA h+D6g4iDlm3fLbd3ZKgc7axZhAndWm6hNwCnWsWE2SIRXDBJGn/Trdion/Y= -----END CERTIFICATE-----Generated at Wed May 13 19:57:22 2026 by rpki-client