$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer File: 7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer (raw, json) Hash identifier: 7KbzYbHCpT8WD11/3WmgSJc5WQqazMgd32d85+dyRsw= Subject key identifier: 7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 6304B64072EAB80A4474BE73E4CF59472570728F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft caRepository: rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:50 +0000 Certificate not after: Mon 10 May 2027 16:01:50 +0000 Subordinate resources: IP: 157.20.108.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:04:b6:40:72:ea:b8:0a:44:74:be:73:e4:cf:59:47:25:70:72:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:56:50 2026 GMT Not After : May 10 16:01:50 2027 GMT Subject: CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:e3:ed:f7:7d:4b:f1:d4:7d:05:9f:b8:19: 5b:42:4c:80:53:ed:7c:6a:95:1a:67:02:42:c8:44: 9f:63:e4:72:9c:c6:e3:b0:7e:a6:55:8e:1a:ab:7f: 9e:e6:bd:48:e9:b6:b4:70:f9:04:b3:03:e1:6b:c9: 5b:64:f8:96:df:d4:e6:09:c3:1c:31:cb:d2:75:3b: eb:c4:6c:b8:b8:db:37:df:6d:ee:52:6d:08:e6:b5: 39:d1:4b:db:0d:fc:56:31:05:ea:1b:04:0a:c5:4a: 4f:56:2e:36:63:4b:23:ac:ab:2c:27:ef:aa:4d:ec: 8a:79:3e:8e:57:0a:2f:41:c5:6b:e2:6e:0c:bb:29: 35:33:36:a7:a5:95:b0:12:c3:90:06:45:21:db:76: ce:7a:3c:5d:37:60:22:dc:d9:45:64:06:f2:ef:c3: bb:e7:43:17:f9:b9:17:b9:cd:6f:4e:cf:26:99:bf: 2e:ea:96:c7:9e:95:be:75:71:78:e6:91:30:e5:a3: b4:cf:c4:ac:c3:26:e6:fd:29:ee:65:dd:16:c7:cc: e1:df:27:9b:51:b4:a4:bd:4b:e6:9a:ea:5c:65:df: 2f:5c:ba:80:1f:a6:1f:2b:f8:5f:f8:d6:2e:94:46: 85:1a:94:b1:50:3c:e1:21:a7:65:46:bb:7c:4e:d9: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.108.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:32:96:0c:22:0c:90:0a:fc:5b:bd:a8:2c:39:46:b0:52:58: 15:fd:a3:2d:4c:4c:34:3a:8f:3e:b9:34:bd:f0:17:95:b1:e9: fd:61:c7:00:0a:69:56:40:ad:38:28:a7:96:27:37:4d:4f:cd: 22:4b:64:f6:b3:c7:be:83:72:42:d5:c6:c2:59:9e:ac:2e:c0: c7:52:57:31:ec:f9:67:a1:99:92:40:36:6a:d2:c5:ab:bc:0b: ef:21:b8:bf:b9:c8:85:44:f8:b7:4b:2d:84:15:09:ef:69:75: 9f:9d:b5:a3:4f:17:53:9a:59:64:f8:ba:f1:11:e7:6e:83:3b: 6a:b4:f7:d6:80:18:4f:34:e9:f2:fe:65:00:3a:83:cb:b1:09: 08:08:4c:d1:e4:25:f9:3a:46:c2:ab:d0:bf:24:88:be:02:43: 2b:1a:1c:10:19:d9:f8:1b:3e:47:79:64:66:53:f0:66:ae:60: 3d:12:eb:e8:7a:a5:3e:a9:54:7f:ee:0a:49:b6:6c:4d:f1:6c: f2:b6:af:57:ad:9d:c9:b2:b0:12:58:f6:bb:9e:73:2b:24:63: 0a:9c:af:cb:4a:33:27:3b:6b:20:53:9e:87:16:f1:85:6b:4a: cb:d4:4d:a4:92:80:b6:3b:8f:e6:2c:03:62:9c:b3:40:82:4e: 20:9f:8c:f5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYwS2QHLquApEdL5z5M9ZRyVwco8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NTY1MFoX DTI3MDUxMDE2MDE1MFowMzExMC8GA1UEAxMoN0Q3MzA5M0NBMTJENkNEQUQwMEU1 MzIyMzQ4MEE2RjJCN0ZEQjc4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJL14+33fUvx1H0Fn7gZW0JMgFPtfGqVGmcCQshEn2PkcpzG47B+plWOGqt/ nua9SOm2tHD5BLMD4WvJW2T4lt/U5gnDHDHL0nU768RsuLjbN99t7lJtCOa1OdFL 2w38VjEF6hsECsVKT1YuNmNLI6yrLCfvqk3sink+jlcKL0HFa+JuDLspNTM2p6WV sBLDkAZFIdt2zno8XTdgItzZRWQG8u/Du+dDF/m5F7nNb07PJpm/LuqWx56VvnVx eOaRMOWjtM/ErMMm5v0p7mXdFsfM4d8nm1G0pL1L5prqXGXfL1y6gB+mHyv4X/jW LpRGhRqUsVA84SGnZUa7fE7Zl4cCAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1zCTyhLWza0A5TIjSApvK3/beMMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSU1QTEVDTE9V LzEvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NJ TVBMRUNMT1UvMS83RDczMDkzQ0ExMkQ2Q0RBRDAwRTUzMjIzNDgwQTZGMkI3RkRC NzhDLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRRsMA0GCSqGSIb3DQEBCwUAA4IBAQCP MpYMIgyQCvxbvagsOUawUlgV/aMtTEw0Oo8+uTS98BeVsen9YccACmlWQK04KKeW JzdNT80iS2T2s8e+g3JC1cbCWZ6sLsDHUlcx7PlnoZmSQDZq0sWrvAvvIbi/uciF RPi3Sy2EFQnvaXWfnbWjTxdTmllk+LrxEedugztqtPfWgBhPNOny/mUAOoPLsQkI CEzR5CX5OkbCq9C/JIi+AkMrGhwQGdn4Gz5HeWRmU/BmrmA9EuvoeqU+qVR/7gpJ tmxN8Wzytq9XrZ3JsrASWPa7nnMrJGMKnK/LSjMnO2sgU56HFvGFa0rL1E2kkoC2 O4/mLANinLNAgk4gn4z1 -----END CERTIFICATE-----Generated at Tue May 12 22:03:22 2026 by rpki-client