$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer File: BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer (raw, json) Hash identifier: zAnOlGKGSFKgBxlXzly3R5FBEQsKQwVXMAsHMtCDAQ0= Subject key identifier: BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 1CDEBC6E79F111853977B1A844DABBF3C01B9F9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft caRepository: rsync://rpkica.twnic.tw/rpki/CXT/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Tue 08 Sep 2026 07:29:57 +0000 Certificate not after: Tue 07 Sep 2027 07:34:57 +0000 Subordinate resources: IP: 103.129.180.0/22 IP: 202.5.8.0/23 IP: 2403:8340::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:de:bc:6e:79:f1:11:85:39:77:b1:a8:44:da:bb:f3:c0:1b:9f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 8 07:29:57 2026 GMT Not After : Sep 7 07:34:57 2027 GMT Subject: CN=BD2262C0D264051F4D27D9E92807D2B80A8CE136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:2a:12:5c:be:36:8e:b0:cf:f6:76:1f:9f: 46:13:2a:59:c4:4b:d2:fe:96:77:98:eb:c6:e7:41: 86:61:ce:50:2e:81:b5:b4:60:28:55:cb:dc:f9:a4: 88:d4:b9:ad:c6:a3:26:3e:6c:2e:7d:7d:72:9e:70: 40:b4:e6:0b:08:48:b0:f1:5b:9f:c2:fe:3e:5c:70: 60:87:4b:5b:26:de:10:4d:53:a8:6b:28:b0:f1:31: a8:20:3a:6f:71:64:3a:16:34:ae:a3:b6:bb:8b:cf: 8c:d7:d4:7a:be:a4:c5:2b:83:81:45:d7:bc:03:71: 40:08:7d:31:9e:55:da:5a:24:a0:dd:d9:f1:b8:bd: 82:71:7c:aa:ab:b5:ff:b3:01:0f:f5:67:47:4a:08: 01:4f:44:b8:52:21:39:c1:16:11:e5:9c:a5:da:f9: 04:08:63:be:2f:17:92:f0:91:4b:55:d2:f9:33:38: bb:8d:74:82:bb:ef:2d:44:d5:cd:b6:bd:a1:0d:cd: 98:45:6e:fd:b2:4b:d7:1c:f3:ce:b4:08:33:71:90: a8:c5:af:64:cc:12:cd:44:90:33:d6:70:6c:48:89: 77:06:da:29:6c:f0:80:b1:40:97:9b:f6:0b:29:c4: 2f:01:80:c4:05:e9:94:6a:b2:09:a9:8a:cb:3c:fd: 32:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.180.0/22 202.5.8.0/23 IPv6: 2403:8340::/32 Signature Algorithm: sha256WithRSAEncryption 3e:01:91:90:df:c8:fd:21:38:bb:4a:83:5b:b8:4c:3c:a0:af: b6:02:30:ac:2e:24:1a:c5:80:6a:0f:f9:aa:d6:be:ac:d9:ef: 59:8d:7d:02:7d:35:1f:8f:9b:92:22:d2:f4:35:bc:86:eb:02: 24:ac:24:6e:6b:18:81:f8:23:c8:af:f4:1b:1e:79:d6:5f:a1: b3:66:7a:ea:ef:b3:3f:df:9c:76:5b:c0:b3:1f:4b:be:b1:3d: c5:77:5a:38:65:25:87:be:d8:52:f6:a5:a8:a3:7f:95:92:28: 81:4b:e9:2e:22:37:c2:b5:2e:e0:aa:c9:bd:82:c5:ea:4b:81: 66:d7:63:d4:9f:04:dc:47:e2:e6:37:57:63:40:27:1e:ee:c3: 44:8c:ec:fc:53:bb:da:16:16:2c:48:a3:d6:f3:79:55:61:c4: 84:a4:c8:1e:9f:11:6e:bd:c5:7d:c5:ba:23:4c:3f:66:89:9a: 72:99:4a:c0:ed:fe:eb:d3:75:14:73:82:23:aa:9b:4d:28:ac: 77:b5:7c:dd:da:0c:cd:08:d7:32:c5:fb:cd:d9:33:ab:fb:9e: 9f:91:0c:93:33:14:22:b3:be:af:1e:60:43:2d:61:c7:bc:72: 0a:78:f6:f7:c9:e1:03:48:b3:b2:04:44:2c:f4:fc:06:6b:3f: d5:a1:00:2e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUHN68bnnxEYU5d7GoRNq788Abn50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwODA3Mjk1N1oX DTI3MDkwNzA3MzQ1N1owMzExMC8GA1UEAxMoQkQyMjYyQzBEMjY0MDUxRjREMjdE OUU5MjgwN0QyQjgwQThDRTEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMl6KhJcvjaOsM/2dh+fRhMqWcRL0v6Wd5jrxudBhmHOUC6BtbRgKFXL3Pmk iNS5rcajJj5sLn19cp5wQLTmCwhIsPFbn8L+PlxwYIdLWybeEE1TqGsosPExqCA6 b3FkOhY0rqO2u4vPjNfUer6kxSuDgUXXvANxQAh9MZ5V2lokoN3Z8bi9gnF8qqu1 /7MBD/VnR0oIAU9EuFIhOcEWEeWcpdr5BAhjvi8XkvCRS1XS+TM4u410grvvLUTV zba9oQ3NmEVu/bJL1xzzzrQIM3GQqMWvZMwSzUSQM9ZwbEiJdwbaKWzwgLFAl5v2 CynELwGAxAXplGqyCamKyzz9MpkCAwEAAaOCAnUwggJxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL0iYsDSZAUfTSfZ6SgH0rgKjOE2MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHXBggrBgEFBQcBCwSByjCBxzAvBggr BgEFBQcwBYYjcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DWFQvMC8wWwYI KwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAvQkQy MjYyQzBEMjY0MDUxRjREMjdEOUU5MjgwN0QyQjgwQThDRTEzNi5tZnQwNwYIKwYB BQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNhdGlvbi54 bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAmeBtAMEAcoFCDANBAIAAjAHAwUAJAODQDANBgkqhkiG9w0BAQsF AAOCAQEAPgGRkN/I/SE4u0qDW7hMPKCvtgIwrC4kGsWAag/5qta+rNnvWY19An01 H4+bkiLS9DW8husCJKwkbmsYgfgjyK/0Gx551l+hs2Z66u+zP9+cdlvAsx9LvrE9 xXdaOGUlh77YUvalqKN/lZIogUvpLiI3wrUu4KrJvYLF6kuBZtdj1J8E3Efi5jdX Y0AnHu7DRIzs/FO72hYWLEij1vN5VWHEhKTIHp8Rbr3FfcW6I0w/ZomacplKwO3+ 69N1FHOCI6qbTSisd7V83doMzQjXMsX7zdkzq/uen5EMkzMUIrO+rx5gQy1hx7xy Cnj298nhA0izsgRELPT8Bms/1aEALg== -----END CERTIFICATE-----Generated at Mon Sep 21 23:59:59 2026 by rpki-client