$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer File: D2F622A04A47823AB003C84A0427E20441C8BE5E.cer (raw, json) Hash identifier: NfSALB7lSZ2ZUPG0v/gDD41NFgUFhsVl0Pq2WdzGNbM= Subject key identifier: D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 643711F069566402B762804AABC160FA189CA09A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft caRepository: rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Fri 04 Sep 2026 07:19:08 +0000 Certificate not after: Fri 03 Sep 2027 07:24:08 +0000 Subordinate resources: AS: 154030 IP: 103.99.142.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:37:11:f0:69:56:64:02:b7:62:80:4a:ab:c1:60:fa:18:9c:a0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 4 07:19:08 2026 GMT Not After : Sep 3 07:24:08 2027 GMT Subject: CN=D2F622A04A47823AB003C84A0427E20441C8BE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:58:c4:6e:2b:fe:06:9e:e0:7c:af:37:b2: 44:c7:d5:be:a7:82:6a:07:c0:ae:23:87:13:b7:f1: 09:40:4a:be:a7:7d:34:28:9a:cd:e1:b3:d7:c0:62: 36:a1:3e:8d:0f:c2:60:61:56:46:94:15:2f:df:58: bc:a8:55:da:20:06:e3:06:8a:3a:2e:05:fb:e2:b1: 72:6f:a9:43:86:db:a7:99:89:75:bd:25:5b:57:93: 06:7e:1f:41:f0:2d:21:da:fd:01:33:2d:5c:b8:fa: 34:02:94:c9:80:46:f1:c6:04:50:3e:dd:48:e8:c6: a4:b7:85:3d:6c:0e:be:9b:a0:d2:62:42:ca:1d:9a: fe:c9:65:67:6d:80:d4:c9:e9:5c:40:bc:35:88:54: 9e:9d:de:87:ef:4d:af:10:be:84:cf:d9:58:53:85: a5:26:44:64:13:d6:53:e4:95:49:9b:a3:3a:0b:ff: 91:0d:4a:95:b9:c0:23:9b:78:11:07:e5:05:31:a4: 99:82:40:6c:b4:10:78:81:b3:8f:6e:6c:5f:95:d0: 63:88:7d:f6:69:c4:71:6e:83:6e:e2:a7:7a:a4:0b: 2d:f0:f2:69:6c:b3:f4:1d:5c:f1:1d:e8:f3:40:6a: b6:f2:ac:73:ab:55:de:72:b6:0e:d2:d0:fe:69:2e: e2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.99.142.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154030 Signature Algorithm: sha256WithRSAEncryption 7e:f5:03:ae:3d:60:59:d2:5f:81:0b:b6:38:05:db:26:96:41: 6f:f6:2d:19:bd:1f:96:5e:2a:16:a0:f4:2b:70:a9:54:0c:ff: 66:61:67:f5:0a:52:b8:a7:df:c2:5d:6c:ae:e4:f4:ea:09:ce: a3:b6:e8:1d:6c:c0:15:b8:6b:44:5c:c5:bc:4d:ca:7c:98:c0: b3:ab:07:2c:1a:14:39:2d:24:48:c6:32:48:07:a9:6f:be:c1: 20:11:26:f6:6b:06:cf:56:c3:9b:31:68:13:13:b7:0f:de:57: 4b:85:15:3a:2c:ef:9a:bd:2a:bf:ae:bb:07:eb:d4:b8:c4:15: 66:60:f2:87:ad:a1:dc:26:52:91:81:c1:21:75:5f:9a:6e:f5: 31:05:d2:8b:fd:5e:49:03:9d:87:6a:93:d9:dc:d1:24:fc:32: 7c:85:6f:63:39:07:b1:d0:49:9e:4c:90:03:f5:50:67:b7:09: 3d:bd:6b:b5:f3:dd:4a:22:8b:fc:2b:80:1b:5d:95:ba:e5:48: 6e:e7:84:39:ad:70:10:ba:ae:f5:82:dc:96:79:ff:29:d6:8a: 9d:00:06:4c:ee:af:06:d5:9c:b2:9c:54:29:fc:76:be:07:83: b5:30:a9:a7:c1:11:4b:e4:ba:e1:31:62:d0:fa:8b:21:bd:57: 0c:ca:b9:24 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUZDcR8GlWZAK3YoBKq8Fg+hicoJowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwNDA3MTkwOFoX DTI3MDkwMzA3MjQwOFowMzExMC8GA1UEAxMoRDJGNjIyQTA0QTQ3ODIzQUIwMDND ODRBMDQyN0UyMDQ0MUM4QkU1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwnWMRuK/4GnuB8rzeyRMfVvqeCagfAriOHE7fxCUBKvqd9NCiazeGz18Bi NqE+jQ/CYGFWRpQVL99YvKhV2iAG4waKOi4F++Kxcm+pQ4bbp5mJdb0lW1eTBn4f QfAtIdr9ATMtXLj6NAKUyYBG8cYEUD7dSOjGpLeFPWwOvpug0mJCyh2a/sllZ22A 1MnpXEC8NYhUnp3eh+9NrxC+hM/ZWFOFpSZEZBPWU+SVSZujOgv/kQ1KlbnAI5t4 EQflBTGkmYJAbLQQeIGzj25sX5XQY4h99mnEcW6DbuKneqQLLfDyaWyz9B1c8R3o 80BqtvKsc6tV3nK2DtLQ/mku4gMCAwEAAaOCAoowggKGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNL2IqBKR4I6sAPISgQn4gRByL5eMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IVUFOR0RFWElB LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hV QU5HREVYSUEvMC9EMkY2MjJBMDRBNDc4MjNBQjAwM0M4NEEwNDI3RTIwNDQxQzhC RTVFLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2OOMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwJZrjANBgkqhkiG9w0BAQsFAAOCAQEAfvUDrj1gWdJfgQu2OAXbJpZBb/Yt Gb0fll4qFqD0K3CpVAz/ZmFn9QpSuKffwl1sruT06gnOo7boHWzAFbhrRFzFvE3K fJjAs6sHLBoUOS0kSMYySAepb77BIBEm9msGz1bDmzFoExO3D95XS4UVOizvmr0q v667B+vUuMQVZmDyh62h3CZSkYHBIXVfmm71MQXSi/1eSQOdh2qT2dzRJPwyfIVv YzkHsdBJnkyQA/VQZ7cJPb1rtfPdSiKL/CuAG12VuuVIbueEOa1wELqu9YLclnn/ KdaKnQAGTO6vBtWcspxUKfx2vgeDtTCpp8ERS+S64TFi0PqLIb1XDMq5JA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:29:34 2026 by rpki-client