$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer File: 5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer (raw, json) Hash identifier: BOJSzltbGDsCty/F/8YGxVJmMOZa/fPHvg90UjRnP4c= Subject key identifier: 5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 25746BAD26B19076761398B49906C6D4EF493251 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft caRepository: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:30 +0000 Certificate not after: Mon 10 May 2027 16:02:30 +0000 Subordinate resources: IP: 160.187.200.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:74:6b:ad:26:b1:90:76:76:13:98:b4:99:06:c6:d4:ef:49:32:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:57:30 2026 GMT Not After : May 10 16:02:30 2027 GMT Subject: CN=5D61A267754DE88CD8451A63D9D2285FD5AF457D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:03:4a:91:bb:e0:5b:94:d7:fa:55:d1:7b: 73:e5:df:4e:65:ef:3e:34:44:c1:88:c5:8c:4a:f1: 0e:42:8b:5b:9e:9e:ca:d9:26:b2:e6:c2:1e:b8:cb: d1:f3:08:91:6c:cc:70:da:54:56:a7:34:86:9d:51: 21:49:11:d4:4b:1d:43:43:28:37:e3:e5:19:b0:1e: 11:21:62:8a:6d:ef:bc:bc:54:e1:7d:8a:9d:25:cc: a7:04:03:96:37:37:6c:f0:3e:21:71:e5:47:d9:fc: 0d:55:74:db:bf:84:3d:15:78:c9:f3:6b:b7:4e:fa: 26:f8:8b:83:79:49:97:eb:f1:f1:f6:b2:c3:84:57: 2e:85:90:31:90:f7:7e:06:8d:09:07:dd:93:70:79: 74:19:bb:2e:d1:d1:f2:fb:5b:03:2e:4f:6f:1d:9a: 5c:17:44:c9:a9:3c:6a:83:59:a6:6b:7b:89:f6:1e: 0d:15:72:84:07:c7:66:76:9f:e8:c9:0e:15:72:f3: 3f:a8:8d:0c:5d:9c:63:63:97:bb:83:b1:10:3e:74: ed:7f:7e:45:7a:a3:90:d4:f4:d0:8d:5c:b7:25:10: a2:4b:d1:54:18:0c:06:93:79:06:a6:2a:ec:c4:0d: fa:20:d2:5c:d4:62:dd:71:0d:b9:e4:6b:f7:61:c1: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.200.0/23 Signature Algorithm: sha256WithRSAEncryption 58:7c:cd:18:04:70:b9:a1:93:5a:8e:12:11:b0:85:46:77:8b: 55:07:c7:72:73:b5:21:e1:22:7b:5a:a8:bf:9a:21:9e:74:9f: c5:f8:1a:2d:b7:df:98:69:15:7e:b2:13:ef:01:df:0d:81:7c: d3:71:84:1f:76:b8:be:d1:a4:d9:80:55:79:32:3e:4d:4d:f2: bd:2f:07:b9:a0:ae:d0:57:5f:fa:42:be:e0:3b:17:c1:26:bf: 34:ac:db:ad:ff:7b:71:eb:4b:58:45:14:6d:bc:b4:50:8c:15: aa:e6:1d:a0:c2:c5:ad:bd:0f:15:d8:a1:71:5b:44:fd:46:25: 6b:1a:6c:1d:c1:33:c5:a9:e4:f8:12:af:04:3b:aa:a0:f4:3e: 6e:38:e5:c1:cd:3a:9c:e7:91:02:40:fe:95:12:32:08:6f:45: 14:fc:08:34:ac:95:49:1b:4d:57:b5:c5:17:03:ec:74:9b:92: 02:29:60:b1:0e:4b:d8:44:15:d3:2d:3d:48:69:2f:3e:f9:b7: f1:b0:17:ec:d1:31:9e:22:7c:87:17:ee:a3:c6:7d:c9:53:5b: 36:de:c5:e1:fa:b6:a3:99:65:95:fa:60:92:f5:2d:4d:49:70: ce:0a:da:aa:47:5a:a1:1c:31:c2:4a:1e:3c:18:29:c4:45:43: 5f:30:77:a9 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJXRrrSaxkHZ2E5i0mQbG1O9JMlEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NTczMFoX DTI3MDUxMDE2MDIzMFowMzExMC8GA1UEAxMoNUQ2MUEyNjc3NTRERTg4Q0Q4NDUx QTYzRDlEMjI4NUZENUFGNDU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMohA0qRu+BblNf6VdF7c+XfTmXvPjREwYjFjErxDkKLW56eytkmsubCHrjL 0fMIkWzMcNpUVqc0hp1RIUkR1EsdQ0MoN+PlGbAeESFiim3vvLxU4X2KnSXMpwQD ljc3bPA+IXHlR9n8DVV027+EPRV4yfNrt076JviLg3lJl+vx8fayw4RXLoWQMZD3 fgaNCQfdk3B5dBm7LtHR8vtbAy5Pbx2aXBdEyak8aoNZpmt7ifYeDRVyhAfHZnaf 6MkOFXLzP6iNDF2cY2OXu4OxED507X9+RXqjkNT00I1ctyUQokvRVBgMBpN5BqYq 7MQN+iDSXNRi3XENueRr92HB75kCAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF1homd1TeiM2EUaY9nSKF/Vr0V9MB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQUlXQU5fTk8x LzEvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RB SVdBTl9OTzEvMS81RDYxQTI2Nzc1NERFODhDRDg0NTFBNjNEOUQyMjg1RkQ1QUY0 NTdELm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoLvIMA0GCSqGSIb3DQEBCwUAA4IBAQBY fM0YBHC5oZNajhIRsIVGd4tVB8dyc7Uh4SJ7Wqi/miGedJ/F+Bott9+YaRV+shPv Ad8NgXzTcYQfdri+0aTZgFV5Mj5NTfK9Lwe5oK7QV1/6Qr7gOxfBJr80rNut/3tx 60tYRRRtvLRQjBWq5h2gwsWtvQ8V2KFxW0T9RiVrGmwdwTPFqeT4Eq8EO6qg9D5u OOXBzTqc55ECQP6VEjIIb0UU/Ag0rJVJG01XtcUXA+x0m5ICKWCxDkvYRBXTLT1I aS8++bfxsBfs0TGeInyHF+6jxn3JU1s23sXh+rajmWWV+mCS9S1NSXDOCtqqR1qh HDHCSh48GCnERUNfMHep -----END CERTIFICATE-----Generated at Tue May 12 22:16:40 2026 by rpki-client