$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/579DB7F99C0F92F57813DEBC9232FFA4BD33F9F7.cer File: 579DB7F99C0F92F57813DEBC9232FFA4BD33F9F7.cer (raw, json) Hash identifier: mu4Ht9ez7vbAA15OLEgR33oP+2DQUTovKKPfiJRSCBc= Subject key identifier: 57:9D:B7:F9:9C:0F:92:F5:78:13:DE:BC:92:32:FF:A4:BD:33:F9:F7 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 0BEC855B2C4BB83BDD5D4F4B93D02E17DC167C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/ASGARDAI/0/579DB7F99C0F92F57813DEBC9232FFA4BD33F9F7.mft caRepository: rsync://rpkica.twnic.tw/rpki/ASGARDAI/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 12 Oct 2026 16:59:05 +0000 Certificate not after: Mon 11 Oct 2027 17:04:05 +0000 Subordinate resources: IP: 45.248.118.0/23 IP: 2402:7de0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 15:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ec:85:5b:2c:4b:b8:3b:dd:5d:4f:4b:93:d0:2e:17:dc:16:7c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Oct 12 16:59:05 2026 GMT Not After : Oct 11 17:04:05 2027 GMT Subject: CN=579DB7F99C0F92F57813DEBC9232FFA4BD33F9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:19:44:52:97:08:b8:8f:e7:c6:73:40:62: 34:51:29:b8:33:34:e2:14:ac:41:7e:40:82:48:0e: 72:a5:18:fc:12:83:fc:c1:94:5a:41:5a:1c:ea:3e: d0:42:8e:28:e1:07:17:f5:bd:a5:33:58:aa:51:aa: c9:1b:a5:3c:22:93:05:12:62:57:e8:7f:97:32:19: 54:e4:5e:43:bb:14:95:35:4d:da:16:12:5c:ed:ad: fe:5f:fb:41:64:37:f4:57:7e:2d:d8:f0:bc:0b:24: 36:1f:50:eb:45:f0:f8:af:89:e7:3f:f6:ba:f3:ad: ef:21:6a:ce:9e:e6:50:95:87:d8:8c:a7:8f:be:76: 28:9e:57:fd:c1:b8:09:9e:0d:e7:f7:37:02:9b:c6: a5:f7:af:c7:57:e8:f9:2e:bf:06:08:8f:14:e7:e8: 1e:5f:3d:01:cd:19:86:0b:0d:40:eb:93:37:8f:ae: a7:d6:a7:06:6b:b1:a3:46:d2:b0:e9:34:66:0a:f2: e6:f6:64:0e:15:23:82:fd:6f:b6:fb:95:43:4a:5a: 5d:54:3a:3a:65:ec:3f:44:0e:35:0a:ea:be:79:0e: 36:03:51:8c:ce:fa:8f:3f:0e:f3:b3:9a:b7:2a:a7: 15:3f:ea:57:48:45:8c:95:78:21:e9:de:91:61:a1: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:9D:B7:F9:9C:0F:92:F5:78:13:DE:BC:92:32:FF:A4:BD:33:F9:F7 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ASGARDAI/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ASGARDAI/0/579DB7F99C0F92F57813DEBC9232FFA4BD33F9F7.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.118.0/23 IPv6: 2402:7de0::/32 Signature Algorithm: sha256WithRSAEncryption ac:c3:3f:bc:59:27:5c:68:a1:84:35:eb:ad:1e:d4:28:c3:d1: 99:d3:b0:24:3d:a7:2a:07:6e:10:66:8c:d8:6e:d1:9b:3d:7f: 24:19:8e:45:f4:61:25:49:68:f9:8b:64:85:48:fa:6e:00:90: 62:3b:aa:b4:b2:f3:75:9b:d0:ac:64:47:0d:23:8b:89:4d:46: 16:6a:5a:d6:de:55:06:68:f6:06:6c:31:b0:9e:f6:bc:7f:3b: 56:a8:c2:ec:fe:8f:cf:5c:f5:86:91:fa:ec:5e:8e:02:a4:0c: 45:29:d9:35:62:f4:15:3f:b7:c9:62:29:8c:84:e3:3c:86:22: 2f:7c:e7:e9:8b:0f:1b:02:64:4d:01:16:e2:0e:99:91:56:d8: 5c:a2:e1:f1:36:84:a8:1d:53:ab:50:82:65:b8:f8:fa:39:d5: d6:04:8f:62:67:33:c1:21:dd:80:c2:80:16:a4:fa:2b:22:b0: 88:7e:54:09:4d:98:b2:7f:6f:77:b7:d8:6e:10:56:55:6b:18: 0d:01:03:8b:4d:ca:49:b1:c1:39:94:76:87:cd:32:fd:02:40: 3e:81:9e:f7:d7:4c:e5:34:ba:57:1a:89:d0:8a:52:ef:53:8c: 76:ef:b8:74:1d:09:fd:c1:47:ba:b8:ee:03:f9:1e:b1:95:fa: 37:04:ac:90 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIUC+yFWyxLuDvdXU9Lk9AuF9wWfJgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MTAxMjE2NTkwNVoX DTI3MTAxMTE3MDQwNVowMzExMC8GA1UEAxMoNTc5REI3Rjk5QzBGOTJGNTc4MTNE RUJDOTIzMkZGQTRCRDMzRjlGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALouGURSlwi4j+fGc0BiNFEpuDM04hSsQX5AgkgOcqUY/BKD/MGUWkFaHOo+ 0EKOKOEHF/W9pTNYqlGqyRulPCKTBRJiV+h/lzIZVOReQ7sUlTVN2hYSXO2t/l/7 QWQ39Fd+LdjwvAskNh9Q60Xw+K+J5z/2uvOt7yFqzp7mUJWH2Iynj752KJ5X/cG4 CZ4N5/c3ApvGpfevx1fo+S6/BgiPFOfoHl89Ac0ZhgsNQOuTN4+up9anBmuxo0bS sOk0Zgry5vZkDhUjgv1vtvuVQ0paXVQ6OmXsP0QONQrqvnkONgNRjM76jz8O87Oa tyqnFT/qV0hFjJV4IenekWGhID8CAwEAAaOCAnkwggJ1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFedt/mcD5L1eBPevJIy/6S9M/n3MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BU0dBUkRBSS8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BU0dB UkRBSS8wLzU3OURCN0Y5OUMwRjkyRjU3ODEzREVCQzkyMzJGRkE0QkQzM0Y5Rjcu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAEt+HYwDQQCAAIwBwMFACQCfeAwDQYJKoZIhvcN AQELBQADggEBAKzDP7xZJ1xooYQ1660e1CjD0ZnTsCQ9pyoHbhBmjNhu0Zs9fyQZ jkX0YSVJaPmLZIVI+m4AkGI7qrSy83Wb0KxkRw0ji4lNRhZqWtbeVQZo9gZsMbCe 9rx/O1aowuz+j89c9YaR+uxejgKkDEUp2TVi9BU/t8liKYyE4zyGIi985+mLDxsC ZE0BFuIOmZFW2Fyi4fE2hKgdU6tQgmW4+Po51dYEj2JnM8Eh3YDCgBak+isisIh+ VAlNmLJ/b3e32G4QVlVrGA0BA4tNykmxwTmUdofNMv0CQD6BnvfXTOU0ulcaidCK Uu9TjHbvuHQdCf3BR7q47gP5HrGV+jcErJA= -----END CERTIFICATE-----Generated at Thu Nov 5 18:45:57 2026 by rpki-client