$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer File: 4F029ED27C82844F72C10999E3E77841D888E8A5.cer (raw, json) Hash identifier: xSLZGH72z5HYbUL41GB05aNfzzq6eGgHGWEHytTGxjI= Subject key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 2280A0999763B8DC42902E047A318CF2CB6C36B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft caRepository: rsync://rpkica.twnic.tw/rpki/LIRUN/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:03 +0000 Certificate not after: Mon 10 May 2027 15:53:03 +0000 Subordinate resources: IP: 157.66.166.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:80:a0:99:97:63:b8:dc:42:90:2e:04:7a:31:8c:f2:cb:6c:36:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:48:03 2026 GMT Not After : May 10 15:53:03 2027 GMT Subject: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:8a:3c:b5:a2:16:62:28:e3:72:d6:7e:04: 6a:f7:d4:0a:28:41:8e:a6:31:9a:f5:14:09:dc:45: d9:c0:1f:c0:b8:2f:73:31:85:5b:c0:2f:f3:53:90: 95:46:17:99:d2:90:16:90:3c:09:30:27:43:32:6d: b9:cb:5d:0e:47:66:ad:59:ba:cc:89:8e:5a:32:1b: db:a0:29:cb:37:84:79:ed:4d:3a:7a:cc:48:36:eb: c2:40:a1:4a:cc:32:bf:f1:6a:0b:c0:be:ff:bd:bd: 5a:0e:f6:d7:96:b3:64:43:5d:1c:69:00:c5:b8:73: 18:34:7b:c6:d0:7d:a9:91:be:15:e8:50:e8:91:66: 71:81:45:1a:f9:e2:9e:ea:2a:04:02:42:8c:14:20: fd:f9:b1:d5:45:6d:82:a9:70:da:0b:35:70:02:68: d9:8f:9f:35:1d:c7:62:ed:2d:44:4f:86:92:d8:a8: 32:c4:66:56:d6:46:18:cf:9b:ae:c4:bc:21:12:02: e6:d8:fd:b7:bf:50:f6:65:a2:fa:92:48:32:e3:01: 6c:ae:7f:dc:30:fa:b7:21:8c:6c:a6:2b:b5:ea:c9: 04:84:c2:3e:51:bc:1a:63:cc:10:77:41:5d:18:bc: 4a:72:ef:79:9a:7c:13:d5:0f:16:59:cd:c6:fe:10: a4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.166.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:24:92:e0:17:f2:e6:40:bd:87:81:33:b0:b4:6c:bf:66:97: ad:92:20:c4:cc:16:cc:6d:1b:dd:d5:51:86:e6:ac:4f:7c:e0: 07:cc:2a:68:50:e9:e5:78:ac:b0:4e:2b:0d:44:62:b7:6b:01: 8d:b2:de:e8:b8:57:c5:2f:03:92:25:06:c2:1b:8f:e8:32:28: 05:bc:0f:9f:fc:7f:e3:53:47:e8:21:42:6e:51:24:48:c6:ce: 13:d8:c7:2b:3b:93:f6:aa:b3:b3:c2:e9:5c:7a:b9:7c:b6:38: 5a:12:68:69:02:92:cb:0a:f6:69:4c:d1:a1:da:6c:41:f0:a2: 03:ec:1c:71:8a:26:68:12:1f:9c:14:6e:6b:ac:ed:56:8c:5c: 50:47:3b:87:a0:71:1f:3e:cd:2d:23:e6:74:54:5e:61:d4:60: f7:44:1a:1d:a1:f9:11:c0:5a:08:03:83:b0:9f:a5:90:26:c2: 42:c2:70:da:69:71:79:af:75:39:d8:d0:ab:e6:bc:34:dc:4d: 21:e6:2f:28:5f:ed:71:14:12:8c:5d:82:60:ef:bf:35:40:56: bd:ea:c4:20:4e:08:a1:af:3b:44:9f:cb:9b:4e:bf:24:69:5e: 11:72:c7:52:52:0f:7d:35:57:13:21:0b:d2:fe:be:5d:eb:d0: af:e3:66:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUIoCgmZdjuNxCkC4EejGM8stsNrcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDgwM1oX DTI3MDUxMDE1NTMwM1owMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEw OTk5RTNFNzc4NDFEODg4RThBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkVijy1ohZiKONy1n4EavfUCihBjqYxmvUUCdxF2cAfwLgvczGFW8Av81OQ lUYXmdKQFpA8CTAnQzJtuctdDkdmrVm6zImOWjIb26ApyzeEee1NOnrMSDbrwkCh Sswyv/FqC8C+/729Wg7215azZENdHGkAxbhzGDR7xtB9qZG+FehQ6JFmcYFFGvni nuoqBAJCjBQg/fmx1UVtgqlw2gs1cAJo2Y+fNR3HYu0tRE+GktioMsRmVtZGGM+b rsS8IRIC5tj9t79Q9mWi+pJIMuMBbK5/3DD6tyGMbKYrterJBITCPlG8GmPMEHdB XRi8SnLveZp8E9UPFlnNxv4QpDsCAwEAAaOCAmQwggJgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE8CntJ8goRPcsEJmePneEHYiOilMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8x LzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQqYwDQYJKoZIhvcNAQELBQADggEBAI4kkuAX8uZAvYeB M7C0bL9ml62SIMTMFsxtG93VUYbmrE984AfMKmhQ6eV4rLBOKw1EYrdrAY2y3ui4 V8UvA5IlBsIbj+gyKAW8D5/8f+NTR+ghQm5RJEjGzhPYxys7k/aqs7PC6Vx6uXy2 OFoSaGkCkssK9mlM0aHabEHwogPsHHGKJmgSH5wUbmus7VaMXFBHO4egcR8+zS0j 5nRUXmHUYPdEGh2h+RHAWggDg7CfpZAmwkLCcNppcXmvdTnY0KvmvDTcTSHmLyhf 7XEUEoxdgmDvvzVAVr3qxCBOCKGvO0Sfy5tOvyRpXhFyx1JSD301VxMhC9L+vl3r 0K/jZnA= -----END CERTIFICATE-----Generated at Wed May 13 04:54:41 2026 by rpki-client