$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer File: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer (raw, json) Hash identifier: qwMONJaBts8b6AfmIFaqUV7+licOOsYmiccrvQNtl7A= Subject key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 6318924313271C95E87A070DC39CACD5AF6577CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft caRepository: rsync://rpkica.twnic.tw/rpki/CJME/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:12 +0000 Certificate not after: Mon 10 May 2027 15:49:12 +0000 Subordinate resources: IP: 157.20.198.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:18:92:43:13:27:1c:95:e8:7a:07:0d:c3:9c:ac:d5:af:65:77:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:44:12 2026 GMT Not After : May 10 15:49:12 2027 GMT Subject: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:f6:a6:d0:ed:f8:ef:d3:1a:08:21:a6:4e: 62:54:2e:61:6a:9e:b0:87:7a:f1:37:c9:3b:1d:ff: 78:fa:53:40:a8:37:01:f2:27:14:c0:df:e6:2e:31: b5:09:56:b0:f7:bc:1c:53:d3:ca:c2:75:06:d9:58: 84:20:be:63:1a:7c:bc:44:da:1d:82:09:8c:8c:b4: 10:16:90:8b:f5:52:74:65:33:aa:65:d6:96:66:02: 45:58:85:fb:e9:ac:dd:30:8c:8e:08:b3:f6:80:27: 11:10:71:0d:2c:92:4c:35:cb:f1:3b:a3:a0:4b:06: b3:9c:ba:ac:9e:0f:1b:49:d7:62:66:16:46:2f:e8: c4:27:3a:50:fe:58:58:1d:ee:b9:8a:18:42:f9:55: c8:49:d3:52:47:a3:57:1d:ce:f4:3e:2a:c6:b6:e3: ba:46:79:06:a5:a0:83:34:81:34:e7:17:99:25:2a: 61:7b:19:a6:75:01:98:50:ad:5c:c7:66:92:10:f7: 55:72:c4:dd:f5:0d:fd:0b:ec:b4:2e:f8:ad:06:1a: 93:5c:c1:e0:67:ed:ce:66:95:b4:ba:3a:50:78:2e: 4a:3c:16:63:77:1c:93:5c:5a:c3:4f:ab:f5:b9:3e: 00:ac:97:fd:69:4f:15:7b:a2:07:d0:44:48:d4:30: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.198.0/23 Signature Algorithm: sha256WithRSAEncryption 44:2b:19:b6:72:68:c2:ee:4f:fb:6b:82:cf:eb:a0:15:a1:56: a7:f8:fa:ef:52:c5:bd:f1:ff:86:3c:0f:70:8b:94:e8:2d:a4: 4a:1e:eb:ea:4e:96:2b:df:63:fe:2a:43:ea:47:16:25:d4:21: 7e:60:24:7b:54:af:50:59:76:2b:46:a5:24:fe:74:b9:ff:b5: e0:3c:34:5e:4a:7b:85:79:23:75:39:63:e2:fd:0c:32:36:32: c6:ad:a0:d1:4c:a9:4f:c8:2c:8a:bf:b5:44:8a:dd:c1:a0:5b: fc:b8:6e:df:74:83:8a:1d:b2:57:5b:36:53:7d:4b:7d:73:fb: 5f:30:94:ca:1c:22:2e:ac:f6:01:24:b8:53:1e:85:e0:a3:4e: 6a:73:43:ad:13:0f:20:4e:22:65:7e:74:2b:0e:08:94:08:48: c1:1d:57:c6:a2:51:76:60:02:2d:08:1e:13:a8:86:2c:10:66: 84:2f:50:73:eb:5f:d1:cd:6a:7d:a0:24:80:fe:f2:46:c0:25: ea:4a:c0:3c:73:34:e0:2c:fe:9e:34:b4:d5:06:c2:8d:86:77: bd:c9:6a:86:d2:c1:9a:1e:29:c8:8d:c9:0f:96:0d:64:6a:90: 5d:b1:b7:b9:c1:33:99:a1:5a:09:43:f3:e1:48:1f:e9:e3:b1: 1e:7b:59:ef -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUYxiSQxMnHJXoegcNw5ys1a9ld8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDQxMloX DTI3MDUxMDE1NDkxMlowMzExMC8GA1UEAxMoODA5NDAwRUFBNTBBN0VCM0JBQzc4 RUVEMkI5OENENDBCODA5RkU5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhX9qbQ7fjv0xoIIaZOYlQuYWqesId68TfJOx3/ePpTQKg3AfInFMDf5i4x tQlWsPe8HFPTysJ1BtlYhCC+Yxp8vETaHYIJjIy0EBaQi/VSdGUzqmXWlmYCRViF ++ms3TCMjgiz9oAnERBxDSySTDXL8TujoEsGs5y6rJ4PG0nXYmYWRi/oxCc6UP5Y WB3uuYoYQvlVyEnTUkejVx3O9D4qxrbjukZ5BqWggzSBNOcXmSUqYXsZpnUBmFCt XMdmkhD3VXLE3fUN/QvstC74rQYak1zB4GftzmaVtLo6UHguSjwWY3cck1xaw0+r 9bk+AKyX/WlPFXuiB9BESNQwEV0CAwEAAaOCAmIwggJeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFICUAOqlCn6zuseO7SuYzUC4Cf6eMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSk1FLzEvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NKTUUvMS84 MDk0MDBFQUE1MEE3RUIzQkFDNzhFRUQyQjk4Q0Q0MEI4MDlGRTlFLm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQBnRTGMA0GCSqGSIb3DQEBCwUAA4IBAQBEKxm2cmjC7k/7a4LP 66AVoVan+PrvUsW98f+GPA9wi5ToLaRKHuvqTpYr32P+KkPqRxYl1CF+YCR7VK9Q WXYrRqUk/nS5/7XgPDReSnuFeSN1OWPi/QwyNjLGraDRTKlPyCyKv7VEit3BoFv8 uG7fdIOKHbJXWzZTfUt9c/tfMJTKHCIurPYBJLhTHoXgo05qc0OtEw8gTiJlfnQr DgiUCEjBHVfGolF2YAItCB4TqIYsEGaEL1Bz61/RzWp9oCSA/vJGwCXqSsA8czTg LP6eNLTVBsKNhne9yWqG0sGaHinIjckPlg1kapBdsbe5wTOZoVoJQ/PhSB/p47Ee e1nv -----END CERTIFICATE-----Generated at Tue May 12 22:47:17 2026 by rpki-client