$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer File: 3BFFB675B95FCD73A993F3228774251092970E7B.cer (raw, json) Hash identifier: scBZB2SyJ7ej7eExLmg6VBW6ZGWI4XLQL9eqLPoJviA= Subject key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 53AE9F70CEB7D42FE8A77B4C963D988BCF9BA65B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft caRepository: rsync://rpkica.twnic.tw/rpki/CCETECH/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:37 +0000 Certificate not after: Mon 10 May 2027 15:48:37 +0000 Subordinate resources: IP: 160.25.104.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ae:9f:70:ce:b7:d4:2f:e8:a7:7b:4c:96:3d:98:8b:cf:9b:a6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:43:37 2026 GMT Not After : May 10 15:48:37 2027 GMT Subject: CN=3BFFB675B95FCD73A993F3228774251092970E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:3d:84:a7:0e:73:60:d5:48:4d:2d:a3:9b: a2:40:70:7b:58:eb:67:d9:33:6f:19:12:16:5c:24: 09:d0:b3:3d:2a:2f:ec:ae:c6:cd:b6:60:a3:68:03: a0:d2:0b:f3:66:6a:0a:a4:44:a4:2c:57:d9:e4:34: bc:76:6e:3a:11:90:65:dd:fb:72:e7:33:9e:8a:24: 13:6f:05:f3:15:63:a0:56:24:5c:8f:0d:79:f3:7a: 0d:46:56:eb:cb:5e:f6:6e:70:0b:d9:6b:f4:74:93: 63:2d:5e:22:dc:0d:e3:75:de:2b:de:73:bc:a9:97: 0b:1e:24:d1:3f:e5:62:9b:31:90:94:4f:74:8c:b4: a6:e6:b4:10:38:2f:5a:91:00:2e:d0:30:b2:ee:7b: 19:54:dc:3f:44:8b:a6:e0:0c:be:d4:d1:e7:da:15: f3:d4:b7:ee:65:10:27:02:74:44:76:81:01:b3:59: 8e:04:10:e7:96:dd:7f:bb:a9:6a:d4:b1:b8:12:a6: 2d:b4:99:ef:ab:5d:70:3a:91:aa:64:e9:be:88:a9: cf:ae:58:9b:40:63:ac:76:a6:c1:9f:8e:a6:b2:89: 52:b9:b3:b2:1d:4e:0a:ed:4c:7c:6b:dc:e4:db:d7: 72:c6:52:97:fc:c4:88:1e:54:58:96:a5:ad:17:a6: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:54:a4:66:fe:ad:e7:66:86:5e:fd:e7:33:cc:c6:f9:4d:b8: e1:2c:f6:db:f2:b1:a0:c5:9b:99:14:f5:2b:98:7b:10:9e:b5: 56:0c:ca:bb:09:84:52:54:75:54:f1:e5:80:aa:9b:6f:53:9d: c4:5f:b5:89:5c:b7:ee:f8:f1:93:3c:bc:f4:02:fa:51:24:54: a9:29:83:b6:4d:3d:e9:69:29:50:4f:38:ed:e8:bc:0d:56:f6: 61:8c:a2:c2:fd:c2:10:3a:95:67:8e:a1:db:bb:be:f5:42:7a: ee:6b:73:66:d1:f1:27:11:1c:c9:d3:95:28:58:16:e9:fd:da: fc:35:45:27:7b:b5:e8:d9:32:e3:1c:ea:8a:45:40:47:91:35: fe:0c:98:2c:40:58:5c:cf:d5:31:28:ae:eb:f6:66:84:70:f2: 36:a0:43:51:62:88:c1:26:ee:64:a6:eb:a9:ab:8b:5a:01:4f: 08:04:ba:3d:be:b9:2d:eb:f7:10:88:39:42:dc:28:69:52:61: 37:a0:0e:21:5c:34:62:29:2c:e2:37:3d:be:99:72:19:a5:34: c0:75:b4:23:a6:2f:09:ce:d5:01:65:f2:1c:a3:56:cf:07:80: 92:40:0a:00:38:aa:9c:3a:0b:dd:20:00:73:7c:65:74:59:e7: 4c:df:5f:38 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUU66fcM631C/op3tMlj2Yi8+bplswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDMzN1oX DTI3MDUxMDE1NDgzN1owMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNG MzIyODc3NDI1MTA5Mjk3MEU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdvPYSnDnNg1UhNLaObokBwe1jrZ9kzbxkSFlwkCdCzPSov7K7GzbZgo2gD oNIL82ZqCqREpCxX2eQ0vHZuOhGQZd37cucznookE28F8xVjoFYkXI8NefN6DUZW 68te9m5wC9lr9HSTYy1eItwN43XeK95zvKmXCx4k0T/lYpsxkJRPdIy0pua0EDgv WpEALtAwsu57GVTcP0SLpuAMvtTR59oV89S37mUQJwJ0RHaBAbNZjgQQ55bdf7up atSxuBKmLbSZ76tdcDqRqmTpvoipz65Ym0BjrHamwZ+OprKJUrmzsh1OCu1MfGvc 5NvXcsZSl/zEiB5UWJalrRemuNECAwEAAaOCAmgwggJkMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDv/tnW5X81zqZPzIod0JRCSlw57MB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQ0VURUNILzEv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRF Q0gvMS8zQkZGQjY3NUI5NUZDRDczQTk5M0YzMjI4Nzc0MjUxMDkyOTcwRTdCLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBoBloMA0GCSqGSIb3DQEBCwUAA4IBAQAaVKRm/q3n ZoZe/eczzMb5TbjhLPbb8rGgxZuZFPUrmHsQnrVWDMq7CYRSVHVU8eWAqptvU53E X7WJXLfu+PGTPLz0AvpRJFSpKYO2TT3paSlQTzjt6LwNVvZhjKLC/cIQOpVnjqHb u771Qnrua3Nm0fEnERzJ05UoWBbp/dr8NUUne7Xo2TLjHOqKRUBHkTX+DJgsQFhc z9UxKK7r9maEcPI2oENRYojBJu5kpuupq4taAU8IBLo9vrkt6/cQiDlC3ChpUmE3 oA4hXDRiKSziNz2+mXIZpTTAdbQjpi8JztUBZfIco1bPB4CSQAoAOKqcOgvdIABz fGV0WedM3184 -----END CERTIFICATE-----Generated at Wed May 13 13:02:22 2026 by rpki-client