$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer File: E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer (raw, json) Hash identifier: gv0ucDu2lEKzEgYP3/vgU2497vpT/NxQKkw/YkqKkPE= Subject key identifier: E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 33E70ADE8D763AB32703DB1DD13B4ADA964DAF51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft caRepository: rsync://rpkica.twnic.tw/rpki/IONET/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:06 +0000 Certificate not after: Mon 10 May 2027 15:52:06 +0000 Subordinate resources: AS: 9679 IP: 211.73.96.0/19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e7:0a:de:8d:76:3a:b3:27:03:db:1d:d1:3b:4a:da:96:4d:af:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:06 2026 GMT Not After : May 10 15:52:06 2027 GMT Subject: CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:99:51:59:bf:ef:57:92:d9:21:53:2d:fa: f5:b2:0f:95:3d:84:89:4a:73:0e:fe:cb:c2:12:d4: fa:e5:16:63:3c:39:f3:1d:20:99:ec:b5:8f:1e:a6: e2:a5:31:18:b0:1a:d1:09:f8:a3:07:b1:59:79:a8: 2b:b2:4e:2b:d4:aa:54:36:c2:ce:c7:85:55:d6:3e: 51:19:7b:69:ea:d5:02:f8:c2:51:29:3b:06:8f:35: 42:b1:52:84:b2:5e:02:c8:34:79:9d:bb:88:f8:0d: 54:aa:d7:02:63:30:93:6d:82:74:70:89:03:fa:d7: f5:cd:8c:9d:af:ea:2c:b1:62:74:a2:75:47:b0:0c: b3:f5:b0:95:ea:77:ee:6c:d8:80:95:e8:d2:86:ec: ed:a9:44:b9:78:03:61:08:ea:24:0a:cd:bf:90:3a: ed:d2:59:78:39:74:5d:5f:50:45:53:5d:23:2f:e5: 81:82:0f:1b:b0:57:11:49:da:c9:cc:75:a9:01:0f: 79:62:98:4c:ed:6c:4c:a5:bb:26:b6:cb:72:2d:58: 5f:06:73:0e:ad:cb:48:f1:c0:c8:19:ed:d1:a5:18: 5e:8b:ee:73:e4:bb:e8:4d:f7:26:06:89:f1:49:2f: 46:60:a6:52:ee:59:7d:d5:96:11:b6:c9:77:db:fc: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/IONET/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.73.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9679 Signature Algorithm: sha256WithRSAEncryption 76:da:12:86:93:2d:3b:df:a0:9b:fc:3f:31:d8:6b:6f:be:ee: e2:94:73:44:81:8e:c8:52:b6:75:87:59:8d:27:d7:9c:21:21: c8:28:9d:b2:df:69:02:c1:0a:5a:9d:f8:00:f9:ea:69:cc:6f: 2c:d2:b1:4f:de:bd:21:7b:c2:15:b1:76:be:2f:65:f1:8a:a2: 1a:d0:2c:85:30:ec:e5:98:e3:0c:7e:1c:62:5d:c4:41:07:d2: 30:66:03:a9:b1:19:ae:05:0e:94:a5:1c:38:89:13:22:56:8e: 0f:e1:39:26:ad:68:f1:ca:0f:c1:e6:6e:a1:36:7d:0a:77:b4: c5:18:dd:e0:51:22:7c:0f:b1:3f:b4:78:ad:71:8a:9a:1d:69: 5f:c6:ab:ce:ed:2f:2b:90:34:9d:27:95:ec:80:5d:a8:76:4c: 28:d3:31:e9:e1:66:28:0e:fe:88:c7:6a:d5:41:9a:12:a6:8e: 62:91:61:ab:86:8b:37:cd:08:eb:fd:1b:88:4d:f1:a1:2f:c4: 57:b6:b2:2d:95:1d:57:c0:81:ac:a6:ec:17:2b:f1:a6:ab:89: fe:d7:cf:6a:a2:b4:d5:f2:21:ce:65:ce:af:17:ab:b7:26:c2: d8:a2:26:bd:05:78:59:61:53:4c:0b:b8:c5:02:9b:ae:5d:0a: e9:bc:7e:bd -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIUM+cK3o12OrMnA9sd0TtK2pZNr1EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDcwNloX DTI3MDUxMDE1NTIwNlowMzExMC8GA1UEAxMoRTk2NTNEN0FDN0RDN0Q1MkFCMkEx OEQ3QTFFNTM0NzgzODIzQzNFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALakmVFZv+9XktkhUy369bIPlT2EiUpzDv7LwhLU+uUWYzw58x0gmey1jx6m 4qUxGLAa0Qn4owexWXmoK7JOK9SqVDbCzseFVdY+URl7aerVAvjCUSk7Bo81QrFS hLJeAsg0eZ27iPgNVKrXAmMwk22CdHCJA/rX9c2Mna/qLLFidKJ1R7AMs/Wwlep3 7mzYgJXo0obs7alEuXgDYQjqJArNv5A67dJZeDl0XV9QRVNdIy/lgYIPG7BXEUna ycx1qQEPeWKYTO1sTKW7JrbLci1YXwZzDq3LSPHAyBnt0aUYXovuc+S76E33JgaJ 8UkvRmCmUu5ZfdWWEbbJd9v8wHECAwEAAaOCAn8wggJ7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOllPXrH3H1SqyoY16HlNHg4I8PoMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JT05FVC8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JT05FVC8w L0U5NjUzRDdBQzdEQzdENTJBQjJBMThEN0ExRTUzNDc4MzgyM0MzRTgubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAXTSWAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICJc8wDQYJ KoZIhvcNAQELBQADggEBAHbaEoaTLTvfoJv8PzHYa2++7uKUc0SBjshStnWHWY0n 15whIcgonbLfaQLBClqd+AD56mnMbyzSsU/evSF7whWxdr4vZfGKohrQLIUw7OWY 4wx+HGJdxEEH0jBmA6mxGa4FDpSlHDiJEyJWjg/hOSataPHKD8HmbqE2fQp3tMUY 3eBRInwPsT+0eK1xipodaV/Gq87tLyuQNJ0nleyAXah2TCjTMenhZigO/ojHatVB mhKmjmKRYauGizfNCOv9G4hN8aEvxFe2si2VHVfAgaym7Bcr8aarif7Xz2qitNXy Ic5lzq8Xq7cmwtiiJr0FeFlhU0wLuMUCm65dCum8fr0= -----END CERTIFICATE-----Generated at Wed May 13 19:57:36 2026 by rpki-client