$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer File: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer (raw, json) Hash identifier: PEnEopnLTAKGpruMWJ0BLjDgSKWtVzrc7SONjQ2FTgs= Subject key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 5B07F2BFCC80ADC42491F828EE3000DB51E1C1CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft caRepository: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 16:00:40 +0000 Certificate not after: Mon 10 May 2027 16:05:40 +0000 Subordinate resources: IP: 161.248.144.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:07:f2:bf:cc:80:ad:c4:24:91:f8:28:ee:30:00:db:51:e1:c1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 16:00:40 2026 GMT Not After : May 10 16:05:40 2027 GMT Subject: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:fa:44:7c:f3:fd:6f:ef:cb:19:34:0e:86: 59:a4:9d:3a:5b:7a:b1:f4:5d:96:80:34:f4:78:da: 90:13:05:12:51:54:c3:50:8f:ad:65:03:9c:66:7c: 47:2a:38:f0:28:1a:ee:11:7e:6a:e4:ab:30:84:ef: e3:2d:d5:a8:05:d9:e6:3f:c7:ee:9c:13:65:da:7e: 01:3b:cd:ea:8f:23:87:9c:a4:9e:6b:41:f8:bc:e6: 5e:f2:eb:81:cf:41:a9:7a:3c:e8:65:9d:45:08:db: 68:bc:64:be:18:6e:d9:e0:2e:1e:65:93:e8:db:c8: 0a:98:2e:20:38:df:83:a5:5a:81:d4:33:1d:a3:90: 45:5a:5f:65:21:9a:d2:37:fd:ad:19:4d:05:c4:08: 8f:d4:47:44:c0:9a:2b:0a:20:2f:6a:75:0d:af:56: 34:01:b0:e3:3d:cd:39:3f:76:e4:22:47:ea:46:ac: ad:07:b8:cb:52:24:84:23:1d:f1:49:15:0e:b0:59: a8:32:ab:ef:2b:d1:dd:2b:49:0e:19:36:d2:46:20: 9a:af:b6:cf:84:32:ae:b8:c1:fd:a8:d7:b1:05:5b: 5d:1f:08:21:ba:9a:77:2b:f1:74:26:77:de:a3:86: 33:ba:f0:bb:b3:d4:78:2c:af:f6:7e:19:31:bb:73: cb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.144.0/23 Signature Algorithm: sha256WithRSAEncryption 55:9c:63:49:47:d6:3e:09:67:48:04:74:aa:a9:d6:1b:c5:8c: c4:ea:54:67:b4:b3:fd:57:8e:76:88:ba:75:a6:ac:c6:be:8a: a8:14:d4:55:d0:a1:04:c8:8e:f8:49:79:ae:78:ff:8f:5f:d5: f4:86:6f:2b:72:22:57:f5:59:1e:88:85:98:ba:0f:02:59:82: 0a:01:85:ed:4f:28:69:3a:92:6e:12:a1:fd:26:09:94:0d:eb: 8b:c9:6a:b3:6c:60:d2:88:54:7e:0f:34:26:4e:63:c1:d8:78: a4:92:64:f7:17:b6:c3:79:b2:7c:d6:46:11:2a:5e:cd:a0:64: ac:bb:86:68:cb:9a:db:37:e3:f2:dd:6a:07:7e:31:ca:be:cf: 9f:b6:c1:ff:fb:bb:d4:d7:77:2d:d2:1a:4f:9b:84:b8:69:f5: b5:a6:58:45:5a:12:39:26:37:bb:d7:15:29:c2:38:f1:d8:7b: f9:26:c6:80:32:f9:69:c0:d4:fe:dc:3a:c2:6a:7d:2b:6a:64: b6:4f:e0:20:23:71:94:b1:ea:52:c8:68:e7:c8:d9:a0:b7:78: b1:62:97:ee:54:ea:42:b0:3e:bb:14:c8:93:e8:ce:7d:29:1f: 11:0c:60:16:12:31:2b:bb:f6:d6:2a:d6:75:66:e6:eb:9d:f1: 57:32:ac:9f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUWwfyv8yArcQkkfgo7jAA21HhwcwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE2MDA0MFoX DTI3MDUxMDE2MDU0MFowMzExMC8GA1UEAxMoMTM3RENGM0ZFMThFM0M5REIzM0FD NkM1MEU4QkUzNTdEMDcyOTk5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhh+kR88/1v78sZNA6GWaSdOlt6sfRdloA09HjakBMFElFUw1CPrWUDnGZ8 Ryo48Cga7hF+auSrMITv4y3VqAXZ5j/H7pwTZdp+ATvN6o8jh5yknmtB+LzmXvLr gc9BqXo86GWdRQjbaLxkvhhu2eAuHmWT6NvICpguIDjfg6VagdQzHaOQRVpfZSGa 0jf9rRlNBcQIj9RHRMCaKwogL2p1Da9WNAGw4z3NOT925CJH6kasrQe4y1IkhCMd 8UkVDrBZqDKr7yvR3StJDhk20kYgmq+2z4QyrrjB/ajXsQVbXR8IIbqadyvxdCZ3 3qOGM7rwu7PUeCyv9n4ZMbtzy3MCAwEAAaOCAmowggJmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBN9zz/hjjydszrGxQ6L41fQcpmRMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5HVElBTi8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5H VElBTi8wLzEzN0RDRjNGRTE4RTNDOURCMzNBQzZDNTBFOEJFMzU3RDA3Mjk5OTEu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGh+JAwDQYJKoZIhvcNAQELBQADggEBAFWcY0lH 1j4JZ0gEdKqp1hvFjMTqVGe0s/1XjnaIunWmrMa+iqgU1FXQoQTIjvhJea54/49f 1fSGbytyIlf1WR6IhZi6DwJZggoBhe1PKGk6km4Sof0mCZQN64vJarNsYNKIVH4P NCZOY8HYeKSSZPcXtsN5snzWRhEqXs2gZKy7hmjLmts34/Ldagd+Mcq+z5+2wf/7 u9TXdy3SGk+bhLhp9bWmWEVaEjkmN7vXFSnCOPHYe/kmxoAy+WnA1P7cOsJqfStq ZLZP4CAjcZSx6lLIaOfI2aC3eLFil+5U6kKwPrsUyJPozn0pHxEMYBYSMSu79tYq 1nVm5uud8VcyrJ8= -----END CERTIFICATE-----Generated at Tue May 12 22:03:57 2026 by rpki-client