$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer File: AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer (raw, json) Hash identifier: +5K1ABRN8/8B3hK67Ts+hU9CByyKWVdxaW0voJUvZMw= Subject key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 02AA55D8607E76D1D33377B0E42792881F3450EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft caRepository: rsync://rpkica.twnic.tw/rpki/XINAN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 07 Sep 2026 11:39:00 +0000 Certificate not after: Mon 06 Sep 2027 11:44:00 +0000 Subordinate resources: AS: 154885 IP: 103.64.20.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:aa:55:d8:60:7e:76:d1:d3:33:77:b0:e4:27:92:88:1f:34:50:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 7 11:39:00 2026 GMT Not After : Sep 6 11:44:00 2027 GMT Subject: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:aa:2b:55:cc:27:9e:8d:ad:48:fa:2d:3d: 18:96:36:49:f9:8e:1d:e9:16:e4:27:31:8e:f1:da: 27:97:a8:5c:9b:55:c4:f0:83:cb:17:ba:1e:ee:cc: 77:d8:ed:85:91:06:2f:ed:59:cb:d9:4f:d2:b8:ee: 86:23:4a:32:96:30:a1:cc:e5:92:7e:6d:bb:21:b9: 9b:3d:bb:19:83:72:13:4f:4c:a2:a3:99:ac:3f:d1: 6d:ff:bc:22:c1:53:3f:54:c3:9c:4d:e0:7a:b5:b6: de:72:21:2c:0c:72:73:81:12:23:7f:08:41:1c:55: 00:c0:3f:05:70:20:ba:f1:07:0a:46:23:d5:fc:c6: 8f:1f:29:6f:35:c5:4a:bb:a3:e9:42:46:ff:53:64: 3a:13:d7:9b:8f:13:df:85:f3:48:61:f4:f7:67:a3: 21:ee:a3:af:c1:b1:11:86:65:ef:87:06:96:db:15: 85:1f:46:af:66:20:16:09:93:f1:f8:51:4b:4d:f1: 4e:4d:e3:e8:9e:04:cd:0e:e5:a2:f5:84:04:f0:2d: 2c:b3:1d:77:7d:a7:2a:44:e8:32:c3:9e:78:be:b1: 27:3c:27:1e:26:53:da:71:ab:c7:c7:fd:5f:4f:87: 0e:f7:78:40:0c:64:ef:6f:c6:a3:97:fd:c7:97:5c: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.64.20.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154885 Signature Algorithm: sha256WithRSAEncryption b5:2e:bf:a6:29:4a:b7:78:6e:06:94:15:b1:1e:a2:b2:eb:00: 8f:d5:28:38:d0:34:39:4d:18:a6:81:64:2d:4a:80:09:ce:7d: 97:72:8c:11:9e:ff:ef:83:f3:53:74:38:68:24:92:27:e1:8a: c9:4b:f6:7b:f4:a3:df:c9:64:64:b0:ff:c1:83:39:65:e4:2c: 3c:9e:49:07:44:02:aa:59:03:e6:1e:44:02:82:21:97:bc:3f: 64:5c:bc:12:ae:be:3e:84:c1:c1:1f:8b:1e:e0:38:d0:cd:45: 88:bf:55:dd:07:bd:83:d7:6e:92:2c:43:b3:d7:6f:60:90:cb: 99:19:79:88:a7:e8:94:09:55:24:bd:d8:38:23:cb:01:da:e4: cb:29:58:20:54:da:bf:12:e0:77:89:02:1d:de:c5:3a:ba:de: 28:54:a9:0c:ab:ff:b8:54:6e:8d:67:7a:0c:59:7d:ee:a6:51: fe:3d:bd:0e:2d:93:c5:70:ea:5d:df:72:df:30:5e:55:78:1c: cd:45:b3:71:f3:51:bb:aa:ec:ab:ce:5a:2c:21:42:2f:5c:f2: f7:b9:6b:b1:83:c2:0c:e7:89:fd:84:10:1d:4c:d2:68:fb:80: cd:85:6d:56:6f:61:f3:42:2a:b2:56:81:a7:21:7c:b9:9c:65: 08:db:bb:25 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIUAqpV2GB+dtHTM3ew5CeSiB80UOowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwNzExMzkwMFoX DTI3MDkwNjExNDQwMFowMzExMC8GA1UEAxMoQUVFNjNBQThCN0ExMDkyRTE4NThD RTI4REZDN0ZCMDdFQ0QwRDAyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsmqitVzCeeja1I+i09GJY2SfmOHekW5CcxjvHaJ5eoXJtVxPCDyxe6Hu7M d9jthZEGL+1Zy9lP0rjuhiNKMpYwoczlkn5tuyG5mz27GYNyE09MoqOZrD/Rbf+8 IsFTP1TDnE3gerW23nIhLAxyc4ESI38IQRxVAMA/BXAguvEHCkYj1fzGjx8pbzXF Sruj6UJG/1NkOhPXm48T34XzSGH092ejIe6jr8GxEYZl74cGltsVhR9Gr2YgFgmT 8fhRS03xTk3j6J4EzQ7lovWEBPAtLLMdd32nKkToMsOeeL6xJzwnHiZT2nGrx8f9 X0+HDvd4QAxk72/Go5f9x5dcixsCAwEAAaOCAoAwggJ8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7mOqi3oQkuGFjOKN/H+wfs0NAvMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9YSU5BTi8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9YSU5BTi8w L0FFRTYzQUE4QjdBMTA5MkUxODU4Q0UyOERGQzdGQjA3RUNEMEQwMkYubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQBQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAl0FMA0G CSqGSIb3DQEBCwUAA4IBAQC1Lr+mKUq3eG4GlBWxHqKy6wCP1Sg40DQ5TRimgWQt SoAJzn2XcowRnv/vg/NTdDhoJJIn4YrJS/Z79KPfyWRksP/Bgzll5Cw8nkkHRAKq WQPmHkQCgiGXvD9kXLwSrr4+hMHBH4se4DjQzUWIv1XdB72D126SLEOz129gkMuZ GXmIp+iUCVUkvdg4I8sB2uTLKVggVNq/EuB3iQId3sU6ut4oVKkMq/+4VG6NZ3oM WX3uplH+Pb0OLZPFcOpd33LfMF5VeBzNRbNx81G7quyrzlosIUIvXPL3uWuxg8IM 54n9hBAdTNJo+4DNhW1Wb2HzQiqyVoGnIXy5nGUI27sl -----END CERTIFICATE-----Generated at Mon Sep 21 15:47:17 2026 by rpki-client