$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer File: 385249635956536ABAE4461A37AC4824F9DC8FD6.cer (raw, json) Hash identifier: sNL7AXDaNkqcNWLZbhKBupLgOWYmizpX4KxGD4tyXEc= Subject key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 26462951DDA9130D0C16B3D7971B766DE7D2CE8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft caRepository: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:20 +0000 Certificate not after: Mon 10 May 2027 15:49:20 +0000 Subordinate resources: IP: 165.101.28.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:46:29:51:dd:a9:13:0d:0c:16:b3:d7:97:1b:76:6d:e7:d2:ce:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:44:20 2026 GMT Not After : May 10 15:49:20 2027 GMT Subject: CN=385249635956536ABAE4461A37AC4824F9DC8FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:5b:f4:c7:6e:1c:72:96:42:1d:cf:09:99: 1e:e7:d5:2a:c2:9b:56:4e:46:c9:77:2d:43:4b:27: b0:bd:52:88:33:cc:c2:fb:06:b0:30:a3:fe:e0:e3: 03:41:fb:0e:ea:c5:ab:f9:13:ab:01:b8:18:7a:5e: 98:50:03:f6:b4:5f:00:b2:95:ef:19:8c:ad:6e:1f: 75:d0:67:13:f6:e7:e5:c8:51:17:a4:d3:48:90:7e: 5a:fc:1f:f5:f2:1b:a7:72:d9:45:ac:28:07:81:5d: 98:29:8a:c4:c0:35:08:69:66:af:d4:cf:8d:14:f8: b6:bb:17:f8:b2:34:5a:00:86:5e:ce:0d:1f:77:7a: ee:19:79:1f:98:aa:6f:98:03:0c:d6:d9:3f:82:d4: 3b:fe:7c:e4:c6:c8:13:97:75:4d:c7:de:6c:41:6b: 16:e3:d8:22:e6:cf:48:8d:a0:be:de:ce:22:58:5c: 88:50:f1:b3:a5:b6:af:fd:35:d3:55:41:55:bd:20: 39:32:d0:c1:f0:a8:ca:de:2c:23:07:fd:8a:0f:f7: bc:e5:06:4d:0b:e6:20:39:0a:5c:f5:2c:3d:b5:28: f3:01:27:7d:6e:eb:19:d7:8b:86:65:69:41:73:8e: 29:41:77:dd:2a:2f:bf:d0:09:e9:fa:a8:74:66:4a: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.28.0/23 Signature Algorithm: sha256WithRSAEncryption 26:69:c5:09:1f:b5:83:50:0d:ec:1e:9a:49:ca:2b:30:1f:f0: 4c:1c:54:e4:d2:24:07:8e:3d:b5:71:4b:4f:14:d5:2e:42:19: b1:8c:14:14:b3:62:c4:ba:47:11:43:87:46:75:b7:d5:b2:e1: 49:5d:16:25:62:0a:cb:94:c2:35:6b:ab:96:f3:e6:9e:14:cf: 2b:5d:e6:cc:c7:94:25:d1:ea:a3:f2:b6:a7:79:d2:a4:c4:1a: 17:52:ef:fb:db:2b:83:53:8c:66:b9:0b:aa:62:5d:fa:c1:b2: ae:d5:a1:a8:86:a1:dc:3d:8f:85:33:be:99:6f:3c:41:6b:f2: 2f:04:a5:62:31:11:b1:50:6e:fe:e8:1d:7f:66:ed:07:ae:62: c3:fd:14:51:f5:dc:6b:8d:81:a6:25:ac:7e:de:2e:06:bd:89: b5:b6:ca:8b:8a:4a:3c:9f:aa:e7:a4:42:e1:70:d4:b8:95:74: 10:5c:cd:b1:22:8b:f5:b7:90:e9:12:e0:f0:cb:af:92:0d:74: 87:a4:f5:15:9a:d3:ca:aa:48:c9:3a:f9:f7:bf:09:28:11:30: 6b:45:2d:3b:f4:35:04:69:41:4c:2f:72:75:85:b8:85:ec:64: 60:93:3f:1e:b5:38:85:06:cc:8e:3b:25:f7:17:9f:86:4e:8f: 93:35:8a:b4 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUJkYpUd2pEw0MFrPXlxt2befSzowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDQyMFoX DTI3MDUxMDE1NDkyMFowMzExMC8GA1UEAxMoMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0 NjFBMzdBQzQ4MjRGOURDOEZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4YW/THbhxylkIdzwmZHufVKsKbVk5GyXctQ0snsL1SiDPMwvsGsDCj/uDj A0H7DurFq/kTqwG4GHpemFAD9rRfALKV7xmMrW4fddBnE/bn5chRF6TTSJB+Wvwf 9fIbp3LZRawoB4FdmCmKxMA1CGlmr9TPjRT4trsX+LI0WgCGXs4NH3d67hl5H5iq b5gDDNbZP4LUO/585MbIE5d1TcfebEFrFuPYIubPSI2gvt7OIlhciFDxs6W2r/01 01VBVb0gOTLQwfCoyt4sIwf9ig/3vOUGTQvmIDkKXPUsPbUo8wEnfW7rGdeLhmVp QXOOKUF33Sovv9AJ6fqodGZKyIECAwEAAaOCAmwwggJoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDhSSWNZVlNquuRGGjesSCT53I/WMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DTE9VREJBU0Uv MS8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xP VURCQVNFLzEvMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRGOURDOEZE Ni5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaVlHDANBgkqhkiG9w0BAQsFAAOCAQEAJmnF CR+1g1AN7B6aScorMB/wTBxU5NIkB449tXFLTxTVLkIZsYwUFLNixLpHEUOHRnW3 1bLhSV0WJWIKy5TCNWurlvPmnhTPK13mzMeUJdHqo/K2p3nSpMQaF1Lv+9srg1OM ZrkLqmJd+sGyrtWhqIah3D2PhTO+mW88QWvyLwSlYjERsVBu/ugdf2btB65iw/0U UfXca42BpiWsft4uBr2JtbbKi4pKPJ+q56RC4XDUuJV0EFzNsSKL9beQ6RLg8Muv kg10h6T1FZrTyqpIyTr5978JKBEwa0UtO/Q1BGlBTC9ydYW4hexkYJM/HrU4hQbM jjsl9xefhk6PkzWKtA== -----END CERTIFICATE-----Generated at Tue May 12 22:03:21 2026 by rpki-client