$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer (raw, json) Hash identifier: boLSgigj9IE71Yve0g4rb6jxsB7tkdd4GMQSrjQi5Gg= Subject key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 4D0B31F43F213134291BDB6EF74B11AE7A3DF604 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft caRepository: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:25 +0000 Certificate not after: Mon 10 May 2027 15:51:25 +0000 Subordinate resources: IP: 144.79.66.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0b:31:f4:3f:21:31:34:29:1b:db:6e:f7:4b:11:ae:7a:3d:f6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:46:25 2026 GMT Not After : May 10 15:51:25 2027 GMT Subject: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:9d:53:e4:6b:91:f8:aa:01:21:09:27:ef: b8:63:0d:92:21:47:01:41:0a:78:81:aa:94:df:12: 39:fe:77:80:67:df:cf:20:05:d6:3d:c7:9d:fa:58: 77:b6:5b:3b:b7:3a:97:25:81:c4:50:31:a1:90:7e: 1d:54:e3:1c:e6:35:bd:41:89:dd:ad:a1:b9:33:a3: f4:09:dc:7a:56:53:94:1b:d7:d0:4a:aa:53:b2:72: e2:0b:a1:f9:ae:69:97:2e:b0:af:a7:da:61:14:6c: e7:a4:cd:ad:44:bb:ee:fc:6e:70:2d:97:00:b5:59: 34:c3:0a:86:dd:d9:3c:b6:dd:d9:7d:74:a3:af:9a: 7d:db:a0:0c:a1:5e:c2:98:1d:e1:bc:9b:46:48:2f: 1e:ed:60:9b:7d:0f:ad:91:c5:5a:03:d5:7b:d9:4b: 1d:dc:21:24:e6:3a:ed:dd:cb:aa:1a:27:a7:40:61: 1b:2a:4b:46:3c:a9:ac:13:5a:08:53:94:6d:14:86: 8a:d5:25:d9:bb:1b:8e:15:ef:e9:4e:d2:2b:1a:d5: 9a:db:5d:b0:6a:10:b3:c1:4e:a1:d3:83:86:3c:04: ef:c7:de:a7:9f:5f:7d:4a:4b:31:4a:da:77:1e:f6: 5d:b0:3d:2d:5f:e8:bd:58:10:97:e9:74:7d:46:21: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.66.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:22:bf:bd:2d:10:e3:65:8b:75:90:08:1a:f7:12:26:05:af: 11:24:dd:f8:75:dd:f8:b5:76:a9:5f:54:60:d8:45:75:42:9c: a1:5f:d4:e6:36:45:d7:dd:5b:31:8f:bf:78:09:99:89:85:44: 5b:19:fe:f4:e5:f1:23:4d:c2:3f:c1:d0:cc:b0:47:81:52:a2: d9:02:e3:ba:6e:d3:c5:06:df:cf:2c:8e:80:87:d5:84:5d:f7: d0:66:46:8f:05:e2:32:89:e0:4d:76:87:5b:65:e5:a9:ba:fe: 3c:4a:0f:c2:06:d8:5c:56:3d:08:3e:fe:05:98:a4:d3:a7:0c: 30:b4:f9:e5:89:42:1b:70:b2:ef:3b:21:e7:30:5f:92:a4:aa: 9a:fe:b2:d4:a3:ec:9b:3c:ac:8b:3c:41:c3:2a:04:07:de:e6: 04:a5:b5:7d:2f:43:69:2d:90:08:63:55:57:b6:f7:45:3b:96: 3f:58:9c:bb:ee:1d:96:ba:4d:d3:5b:9e:d6:61:7d:5e:2f:27: 5f:15:7b:6b:b5:d8:7d:f7:4b:2a:d9:e9:b0:3d:20:b5:82:56: 6b:86:ff:7c:75:6a:56:a6:1c:12:c2:4c:c2:65:7c:f2:38:c9: 42:d8:98:7b:66:49:77:72:cd:40:a7:e8:ce:a4:0f:e5:ee:32: 25:e6:f3:b6 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUTQsx9D8hMTQpG9tu90sRrno99gQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDYyNVoX DTI3MDUxMDE1NTEyNVowMzExMC8GA1UEAxMoNTlEOThFOENCQkFCRENERjdCMjIy REE1MDBGNUNERTYzRkYyREEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPEnVPka5H4qgEhCSfvuGMNkiFHAUEKeIGqlN8SOf53gGffzyAF1j3HnfpY d7ZbO7c6lyWBxFAxoZB+HVTjHOY1vUGJ3a2huTOj9AncelZTlBvX0EqqU7Jy4guh +a5ply6wr6faYRRs56TNrUS77vxucC2XALVZNMMKht3ZPLbd2X10o6+afdugDKFe wpgd4bybRkgvHu1gm30PrZHFWgPVe9lLHdwhJOY67d3Lqhonp0BhGypLRjyprBNa CFOUbRSGitUl2bsbjhXv6U7SKxrVmttdsGoQs8FOodODhjwE78fep59ffUpLMUra dx72XbA9LV/ovVgQl+l0fUYh5qECAwEAAaOCAmwwggJoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFnZjoy7q9zfeyItpQD1zeY/8toMMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IQ0NHX0hDRUIv MS8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEND R19IQ0VCLzEvNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEw Qy5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAZBPQjANBgkqhkiG9w0BAQsFAAOCAQEAHCK/ vS0Q42WLdZAIGvcSJgWvESTd+HXd+LV2qV9UYNhFdUKcoV/U5jZF191bMY+/eAmZ iYVEWxn+9OXxI03CP8HQzLBHgVKi2QLjum7TxQbfzyyOgIfVhF330GZGjwXiMong TXaHW2Xlqbr+PEoPwgbYXFY9CD7+BZik06cMMLT55YlCG3Cy7zsh5zBfkqSqmv6y 1KPsmzysizxBwyoEB97mBKW1fS9DaS2QCGNVV7b3RTuWP1icu+4dlrpN01ue1mF9 Xi8nXxV7a7XYffdLKtnpsD0gtYJWa4b/fHVqVqYcEsJMwmV88jjJQtiYe2ZJd3LN QKfozqQP5e4yJebztg== -----END CERTIFICATE-----Generated at Tue May 12 22:45:35 2026 by rpki-client