$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer File: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer (raw, json) Hash identifier: R3+qe0z46+lXTmOQSUyGugBT3cTuOjBRTc//XMle0mA= Subject key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 13EB7559673409714B6F56219E67BDD33FFF940B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft caRepository: rsync://rpkica.twnic.tw/rpki/QISDA/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:06 +0000 Certificate not after: Mon 10 May 2027 16:01:06 +0000 Subordinate resources: IP: 165.99.112.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:eb:75:59:67:34:09:71:4b:6f:56:21:9e:67:bd:d3:3f:ff:94:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:56:06 2026 GMT Not After : May 10 16:01:06 2027 GMT Subject: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:e2:1b:8e:2a:37:5b:ae:2c:a8:8b:76:88: 77:dd:db:32:22:fa:3f:a4:b2:d5:ee:ee:8e:8f:d0: 90:ae:8b:52:f8:9d:56:90:92:ae:96:7a:24:42:8f: 27:00:1c:a6:88:1d:77:77:6e:bb:29:b3:93:fc:5d: 39:eb:55:bb:c4:8c:41:0f:48:8f:93:e1:8d:e2:54: 3d:e6:3b:e5:fb:e9:bb:e4:d9:98:31:5e:1f:4b:d5: b1:3c:e6:8c:4f:4b:46:03:39:55:79:2b:10:be:ff: 9e:53:ce:7d:87:f9:ff:51:b3:63:6f:9e:63:5e:10: e7:63:1c:1a:91:23:4a:f9:90:28:99:d4:58:98:96: dc:61:8d:dc:28:21:98:7f:3a:b8:c1:e4:4c:de:7d: f2:64:f2:75:37:72:84:71:a4:06:53:1c:8c:c2:5c: 5c:1c:be:e5:0f:ae:29:47:c0:87:a2:1f:04:6c:1f: 43:ee:9c:d4:1e:cc:84:38:ca:2d:e4:0c:ab:16:25: ef:88:39:7d:cc:5e:5b:af:0b:bf:b1:71:93:38:f8: 51:64:c1:8d:94:d0:b5:8e:eb:e6:bf:fa:f4:8b:75: 84:3f:45:97:1e:f5:da:75:5e:14:8c:ed:ef:24:87: 24:c6:d2:60:92:79:81:06:81:57:48:ba:cd:09:e2: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.112.0/23 Signature Algorithm: sha256WithRSAEncryption 46:43:48:9d:e7:08:d9:7d:86:87:a1:b4:b1:dc:63:77:7f:e6: 46:58:25:b4:ff:66:f6:1c:a4:3d:2b:1b:11:52:72:31:d0:15: ed:9a:93:21:4b:ed:76:98:48:24:91:56:ee:23:bd:d5:fc:a4: 10:d0:97:2b:ea:ba:72:e0:6f:0c:cd:0e:2c:7d:15:69:59:66: 18:47:3e:ad:34:18:b7:9d:ae:c4:87:7b:04:1d:7b:b1:0f:67: 2d:81:1d:e9:41:5c:6b:95:69:38:9d:90:29:72:6c:b8:f9:b9: 2f:ae:c2:43:cc:14:72:17:aa:aa:50:09:5e:93:48:6d:2f:2f: fa:ad:f0:33:cb:3f:5a:a0:7e:ac:fb:9f:10:5b:6b:42:df:73: 7a:d3:8e:aa:a2:52:3d:ff:d9:49:27:b5:06:d3:1b:2f:31:f9: 48:08:81:81:29:e5:eb:d3:a8:bc:39:38:95:cf:a1:e5:c0:22: 93:bb:ef:b4:71:3f:da:85:25:b5:6f:15:37:c7:89:aa:80:7f: 44:4b:c4:5e:f9:a6:32:ad:c3:30:65:f9:b2:a0:41:51:7c:c4: 43:f9:68:7e:16:91:36:48:64:11:7f:5f:6a:b7:0b:e4:02:4c: 75:e0:a6:c3:c3:d2:ea:de:cd:06:01:c8:50:9c:a0:eb:34:34: 00:c5:36:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUE+t1WWc0CXFLb1Yhnme90z//lAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NTYwNloX DTI3MDUxMDE2MDEwNlowMzExMC8GA1UEAxMoNTAzMUU2NUE5OEQ4MjczRjk1NzlC RkE1QjhGRTZDQTUyRDAxQzQxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMiD4huOKjdbriyoi3aId93bMiL6P6Sy1e7ujo/QkK6LUvidVpCSrpZ6JEKP JwAcpogdd3duuymzk/xdOetVu8SMQQ9Ij5PhjeJUPeY75fvpu+TZmDFeH0vVsTzm jE9LRgM5VXkrEL7/nlPOfYf5/1GzY2+eY14Q52McGpEjSvmQKJnUWJiW3GGN3Cgh mH86uMHkTN598mTydTdyhHGkBlMcjMJcXBy+5Q+uKUfAh6IfBGwfQ+6c1B7MhDjK LeQMqxYl74g5fcxeW68Lv7Fxkzj4UWTBjZTQtY7r5r/69It1hD9Flx712nVeFIzt 7ySHJMbSYJJ5gQaBV0i6zQnic58CAwEAAaOCAmQwggJgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFAx5lqY2Cc/lXm/pbj+bKUtAcQbMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8xLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8x LzUwMzFFNjVBOThEODI3M0Y5NTc5QkZBNUI4RkU2Q0E1MkQwMUM0MUIubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGlY3AwDQYJKoZIhvcNAQELBQADggEBAEZDSJ3nCNl9hoeh tLHcY3d/5kZYJbT/ZvYcpD0rGxFScjHQFe2akyFL7XaYSCSRVu4jvdX8pBDQlyvq unLgbwzNDix9FWlZZhhHPq00GLedrsSHewQde7EPZy2BHelBXGuVaTidkClybLj5 uS+uwkPMFHIXqqpQCV6TSG0vL/qt8DPLP1qgfqz7nxBba0Lfc3rTjqqiUj3/2Ukn tQbTGy8x+UgIgYEp5evTqLw5OJXPoeXAIpO777RxP9qFJbVvFTfHiaqAf0RLxF75 pjKtwzBl+bKgQVF8xEP5aH4WkTZIZBF/X2q3C+QCTHXgpsPD0urezQYByFCcoOs0 NADFNnA= -----END CERTIFICATE-----Generated at Wed May 13 05:43:26 2026 by rpki-client