$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/2076FD1E205EAAA79648391917551245C47976BF.cer File: 2076FD1E205EAAA79648391917551245C47976BF.cer (raw, json) Hash identifier: qxEoKirJFwSyk3AmobCvAypXyoXDBve2CvZTTvaTyaA= Subject key identifier: 20:76:FD:1E:20:5E:AA:A7:96:48:39:19:17:55:12:45:C4:79:76:BF Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 7B51473A85EEAB8398B06937F3F871E1894F65D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.mft caRepository: rsync://rpkica.twnic.tw/rpki/TISNET/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:51 +0000 Certificate not after: Mon 10 May 2027 16:02:51 +0000 Subordinate resources: IP: 139.223.0.0/16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:51:47:3a:85:ee:ab:83:98:b0:69:37:f3:f8:71:e1:89:4f:65:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:57:51 2026 GMT Not After : May 10 16:02:51 2027 GMT Subject: CN=2076FD1E205EAAA79648391917551245C47976BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:73:9d:90:3a:b3:29:1d:96:77:64:dc:d4: 78:4b:13:1b:50:16:83:50:ad:33:b7:1c:b9:86:91: d2:0a:57:f2:63:55:c6:a2:e2:49:94:d6:36:27:8a: 4d:68:59:1c:01:b0:b6:e4:0a:ff:c5:17:bb:3e:51: 15:af:05:ac:38:db:8e:b5:92:e1:f0:37:b2:84:3e: 92:5c:cf:e1:39:a9:7c:58:60:61:d8:53:fd:a0:cc: a1:ee:87:6d:34:6b:97:f0:e5:34:d9:91:4e:b6:1e: 3f:79:df:e8:53:49:92:09:6d:ac:bb:ac:63:46:7c: 80:8d:1d:45:c2:ac:5b:60:7f:8d:54:1a:1f:85:a2: 9b:33:d6:3f:95:0e:93:b0:ba:2b:4e:c0:e5:1c:64: e0:7e:40:3d:df:77:5f:31:b8:b2:30:59:a4:b1:39: 54:91:b5:50:3f:33:57:27:c9:8d:e1:2e:e7:ad:3a: 4f:e1:a8:7c:06:ab:56:0f:b6:0a:77:89:47:37:75: 60:ac:9f:af:0c:e3:ca:67:95:1e:9c:79:e8:32:93: 12:e3:2d:48:51:2c:a5:82:b0:9d:f1:d1:8b:fc:c5: 8f:c4:e2:be:e4:40:14:8b:1d:ef:d7:0b:d5:e8:11: f0:cf:0e:a5:d7:d7:88:ef:ed:77:1d:e0:37:22:3e: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:76:FD:1E:20:5E:AA:A7:96:48:39:19:17:55:12:45:C4:79:76:BF X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TISNET/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:fc:29:ae:e6:cf:1e:66:e0:e7:10:ca:b9:8a:c4:c8:df:0b: ee:25:44:88:3c:f9:97:3e:09:bb:95:aa:42:04:70:0a:d6:df: 70:dd:0e:77:51:b7:e9:8e:5b:77:9e:25:a8:82:35:96:f7:99: 1a:36:b6:67:8d:3d:75:01:d3:98:1d:59:7d:ba:b4:6c:f9:e9: 3c:a5:47:92:59:28:d6:2b:65:08:9b:2d:e0:25:ea:81:e6:93: f2:28:cb:5d:3d:75:7c:c8:73:6a:72:c6:98:50:b5:72:50:df: 69:95:11:28:e6:84:ea:58:d5:15:5b:fb:e1:1d:0a:ba:aa:bc: 78:95:f8:49:13:41:15:60:f4:ed:78:69:65:06:bd:27:cb:8d: 8d:a0:b8:bb:9a:ee:28:cc:60:cd:71:ff:ea:4e:9c:1f:1c:e3: d0:c5:d4:2a:21:03:db:85:56:54:2e:ed:65:a3:7b:1c:22:48: 23:06:76:57:c0:f1:6c:38:6a:69:a7:74:4a:7b:3e:65:51:8e: 39:cf:ff:b2:0d:43:20:04:86:1e:c7:7a:5e:21:23:19:93:d9: fd:ab:ab:9f:82:64:a8:03:9b:35:01:2a:2d:3f:55:6d:a9:8f: 84:ca:c0:50:bc:1f:f5:3a:1d:fb:32:67:8a:2e:4c:5c:7e:d4: fd:2d:25:de -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUe1FHOoXuq4OYsGk38/hx4YlPZdYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NTc1MVoX DTI3MDUxMDE2MDI1MVowMzExMC8GA1UEAxMoMjA3NkZEMUUyMDVFQUFBNzk2NDgz OTE5MTc1NTEyNDVDNDc5NzZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcIc52QOrMpHZZ3ZNzUeEsTG1AWg1CtM7ccuYaR0gpX8mNVxqLiSZTWNieK TWhZHAGwtuQK/8UXuz5RFa8FrDjbjrWS4fA3soQ+klzP4TmpfFhgYdhT/aDMoe6H bTRrl/DlNNmRTrYeP3nf6FNJkgltrLusY0Z8gI0dRcKsW2B/jVQaH4WimzPWP5UO k7C6K07A5Rxk4H5APd93XzG4sjBZpLE5VJG1UD8zVyfJjeEu5606T+GofAarVg+2 CneJRzd1YKyfrwzjymeVHpx56DKTEuMtSFEspYKwnfHRi/zFj8TivuRAFIsd79cL 1egR8M8OpdfXiO/tdx3gNyI+OUkCAwEAAaOCAmUwggJhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCB2/R4gXqqnlkg5GRdVEkXEeXa/MB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9USVNORVQvMS8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElTTkVU LzEvMjA3NkZEMUUyMDVFQUFBNzk2NDgzOTE5MTc1NTEyNDVDNDc5NzZCRi5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB /wQPMA0wCwQCAAEwBQMDAIvfMA0GCSqGSIb3DQEBCwUAA4IBAQBB/Cmu5s8eZuDn EMq5isTI3wvuJUSIPPmXPgm7lapCBHAK1t9w3Q53Ubfpjlt3niWogjWW95kaNrZn jT11AdOYHVl9urRs+ek8pUeSWSjWK2UImy3gJeqB5pPyKMtdPXV8yHNqcsaYULVy UN9plREo5oTqWNUVW/vhHQq6qrx4lfhJE0EVYPTteGllBr0ny42NoLi7mu4ozGDN cf/qTpwfHOPQxdQqIQPbhVZULu1lo3scIkgjBnZXwPFsOGppp3RKez5lUY45z/+y DUMgBIYex3peISMZk9n9q6ufgmSoA5s1ASotP1VtqY+EysBQvB/1Oh37MmeKLkxc ftT9LSXe -----END CERTIFICATE-----Generated at Wed May 13 00:33:57 2026 by rpki-client