$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer (raw, json) Hash identifier: /MTZx8rJAtxtZORfO+Tk6etT5+Oy043HlwpkxpUVTCI= Subject key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 3DD1F951667DCC0AD5B1F9C8396DD25235E9573D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft caRepository: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:09 +0000 Certificate not after: Mon 10 May 2027 15:49:09 +0000 Subordinate resources: IP: 160.187.198.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d1:f9:51:66:7d:cc:0a:d5:b1:f9:c8:39:6d:d2:52:35:e9:57:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:44:09 2026 GMT Not After : May 10 15:49:09 2027 GMT Subject: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:b9:b2:47:75:c0:ec:99:43:d9:ce:63:48: 15:8d:b6:da:e0:00:3e:07:9e:61:8f:f1:2a:a9:f5: 23:0c:b3:c4:2b:89:7f:7b:3d:0d:90:72:23:8c:95: 32:62:9c:c3:c9:14:dc:62:8f:df:7a:6d:0e:c8:42: b4:fe:ea:b1:f2:c3:34:fc:cc:cd:d6:1d:65:c3:6e: d0:eb:51:1d:a4:df:2e:ae:04:be:98:35:ea:48:26: a7:6b:50:25:6d:f2:33:00:77:25:24:e3:c9:fb:c4: af:00:0d:95:65:a2:cb:fc:1f:5d:1b:f1:22:f8:51: e2:14:b4:fc:a5:c2:1d:29:ac:e9:e9:28:f4:7f:cf: ac:35:53:db:4b:76:da:81:8b:5b:31:f3:01:e8:fb: 5e:04:e2:9b:c6:e5:de:a5:a4:0e:ab:98:fe:96:6b: f3:32:f8:fc:92:58:ba:e2:87:05:96:80:9b:61:c9: 23:2a:d3:66:00:a8:38:4d:c3:8a:de:6d:2d:8c:15: eb:87:5a:e2:51:d7:79:f3:9a:c6:91:ad:32:1a:74: 03:d2:f7:d6:bb:7b:2c:bb:ad:00:04:3c:7c:f6:ca: 1d:65:ef:e4:53:a2:ad:2b:3a:90:3f:97:3b:8a:d9: e4:07:6c:b5:24:70:15:c2:8f:05:7a:81:c8:8f:b7: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.198.0/23 Signature Algorithm: sha256WithRSAEncryption 61:8c:4b:30:3a:fc:5b:1a:82:f0:1c:15:37:02:2a:76:cd:f7: 18:6b:b7:79:05:90:fb:9a:de:ee:00:e9:30:da:0a:33:e0:71: ea:ea:f4:8a:eb:33:4b:88:8d:0f:75:6f:0e:c6:4a:26:96:4c: 85:70:18:63:b8:3e:41:eb:3f:44:a4:52:8b:12:cc:33:01:1b: 50:56:a7:c1:64:24:71:95:d8:f9:85:be:8b:ff:9f:25:df:26: 95:11:5d:32:d2:d2:60:fd:f5:90:c8:71:92:9b:52:98:2c:e6: d2:20:27:76:e1:e9:ba:30:d2:69:c0:66:39:d3:06:5e:db:f9: 8e:8d:1f:dd:5e:7e:be:cb:ca:97:15:09:39:d0:30:3f:ac:fa: cb:82:21:a3:30:98:ba:ca:84:30:d1:ae:8f:d5:8a:54:f9:98: 90:66:47:98:e9:24:a4:0f:ec:9c:74:ea:17:48:b9:aa:e7:8b: 84:37:26:a6:38:3d:e8:37:59:48:8b:6f:1c:69:4f:b2:5e:7b: 79:cd:58:72:54:c6:4c:64:44:45:2a:20:03:8c:9e:05:57:7a: c4:dd:c0:d9:52:fa:cf:68:e2:d7:4e:77:c7:cf:ca:00:04:92: a6:08:92:bd:96:33:87:2b:1f:2e:ed:35:85:e2:78:aa:b5:77: 15:e2:67:77 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPdH5UWZ9zArVsfnIOW3SUjXpVz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDQwOVoX DTI3MDUxMDE1NDkwOVowMzExMC8GA1UEAxMoMjhFMUZEMDNDOEIwNDBBOTg3NEE5 MEQ0NjU0MzIyQUNERkNBMzQwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgEubJHdcDsmUPZzmNIFY222uAAPgeeYY/xKqn1IwyzxCuJf3s9DZByI4yV MmKcw8kU3GKP33ptDshCtP7qsfLDNPzMzdYdZcNu0OtRHaTfLq4Evpg16kgmp2tQ JW3yMwB3JSTjyfvErwANlWWiy/wfXRvxIvhR4hS0/KXCHSms6eko9H/PrDVT20t2 2oGLWzHzAej7XgTim8bl3qWkDquY/pZr8zL4/JJYuuKHBZaAm2HJIyrTZgCoOE3D it5tLYwV64da4lHXefOaxpGtMhp0A9L31rt7LLutAAQ8fPbKHWXv5FOirSs6kD+X O4rZ5AdstSRwFcKPBXqByI+391UCAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCjh/QPIsECph0qQ1GVDIqzfyjQHMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSFVNTVlURUNI LzEvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NI VU1NWVRFQ0gvMS8yOEUxRkQwM0M4QjA0MEE5ODc0QTkwRDQ2NTQzMjJBQ0RGQ0Ez NDA3Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoLvGMA0GCSqGSIb3DQEBCwUAA4IBAQBh jEswOvxbGoLwHBU3Aip2zfcYa7d5BZD7mt7uAOkw2goz4HHq6vSK6zNLiI0PdW8O xkomlkyFcBhjuD5B6z9EpFKLEswzARtQVqfBZCRxldj5hb6L/58l3yaVEV0y0tJg /fWQyHGSm1KYLObSICd24em6MNJpwGY50wZe2/mOjR/dXn6+y8qXFQk50DA/rPrL giGjMJi6yoQw0a6P1YpU+ZiQZkeY6SSkD+ycdOoXSLmq54uENyamOD3oN1lIi28c aU+yXnt5zVhyVMZMZERFKiADjJ4FV3rE3cDZUvrPaOLXTnfHz8oABJKmCJK9ljOH Kx8u7TWF4niqtXcV4md3 -----END CERTIFICATE-----Generated at Tue May 12 22:32:29 2026 by rpki-client