$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer File: B5BCB843FC62D50C018D67AAECEC768693B898BB.cer (raw, json) Hash identifier: uqTYHLMOTzKFL/5GO1PlZ6F/Igo2brjIvfLNoQi+dGo= Subject key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 336C07A171C850310A401064CCD8A15B1D86341E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft caRepository: rsync://rpkica.twnic.tw/rpki/M2NIM/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:10 +0000 Certificate not after: Mon 10 May 2027 15:53:10 +0000 Subordinate resources: IP: 157.20.134.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6c:07:a1:71:c8:50:31:0a:40:10:64:cc:d8:a1:5b:1d:86:34:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:48:10 2026 GMT Not After : May 10 15:53:10 2027 GMT Subject: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:52:85:00:50:90:e4:ed:22:49:a8:5f:78: 79:88:1a:45:74:69:89:7b:05:ee:99:a8:06:09:d9: dd:f4:cb:11:92:30:66:8b:08:99:36:89:41:28:5e: 2d:6f:20:c9:cd:9f:c0:61:45:19:95:99:67:1e:0c: 33:26:02:81:2b:15:04:a5:14:b1:c8:c7:cd:07:6e: 92:34:89:78:14:01:61:77:4d:16:c4:6b:77:09:8c: a5:2a:9b:cd:3d:86:18:2e:36:73:d1:d6:8b:56:f5: 1f:6e:36:74:ee:bf:37:59:e8:da:4f:4c:f4:a3:bc: 57:61:d0:4e:24:97:34:1d:a2:b0:be:0f:06:e3:5f: e4:c7:91:c1:8d:6d:9d:e6:94:65:20:a3:b0:f0:75: ce:d4:1d:6c:5c:0c:43:9d:94:43:f4:da:3a:1f:bf: 41:40:30:ee:05:2a:a5:63:6d:b5:cf:8c:11:23:63: 1b:73:b5:42:25:60:b7:68:0c:ec:9c:da:5f:08:f2: 49:2d:96:0f:db:ef:36:80:8d:e7:29:d7:c4:9a:20: a8:2f:e2:46:5f:0d:9b:b7:8e:f7:46:db:b6:45:37: 6a:4d:6d:77:30:8c:4f:39:6c:78:76:62:65:b7:85: fd:df:30:1b:e0:da:c1:b5:f6:1d:d2:b5:59:1f:54: 45:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.134.0/23 Signature Algorithm: sha256WithRSAEncryption 69:28:57:60:9d:f0:f5:b7:a0:ee:be:29:59:83:cc:36:d7:da: 41:d1:19:44:19:97:b2:6b:e7:b1:bc:01:9b:88:b5:83:d8:df: 51:1b:0d:ec:6c:36:db:bf:b9:42:39:72:72:04:d7:91:a7:c2: 90:13:49:ea:7b:d8:de:2b:f5:3c:7d:15:7b:1c:35:c0:43:8c: 94:30:21:31:0f:b0:9a:82:e8:05:60:c1:cb:92:01:0d:75:e5: 70:e6:e4:17:ac:c4:37:f4:64:95:c4:83:c0:e7:dc:05:c7:ff: 00:c0:c1:b8:e3:e5:df:c3:81:90:8a:d5:35:34:44:21:17:5c: 94:2b:fd:df:e9:98:32:fa:3f:89:5f:65:e3:32:85:03:5e:4d: 4d:ba:da:0d:70:22:40:a2:4f:a7:61:a3:94:ca:52:f0:2a:bb: 64:e6:25:c5:1a:ff:55:62:54:42:7b:ee:0b:44:2a:c1:31:ec: 29:5a:32:e6:00:54:37:b3:9b:20:91:9f:10:22:7a:30:e8:0f: 78:30:be:18:ce:76:cc:a7:0d:4b:94:ac:23:ee:db:85:30:25: 44:50:12:81:c3:43:f7:a5:86:34:84:84:93:7e:e2:07:6d:78: f4:4e:2c:08:81:e3:44:65:62:e8:25:c3:05:87:67:3b:0c:c1: 8b:89:4a:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUM2wHoXHIUDEKQBBkzNihWx2GNB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDgxMFoX DTI3MDUxMDE1NTMxMFowMzExMC8GA1UEAxMoQjVCQ0I4NDNGQzYyRDUwQzAxOEQ2 N0FBRUNFQzc2ODY5M0I4OThCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5SUoUAUJDk7SJJqF94eYgaRXRpiXsF7pmoBgnZ3fTLEZIwZosImTaJQShe LW8gyc2fwGFFGZWZZx4MMyYCgSsVBKUUscjHzQdukjSJeBQBYXdNFsRrdwmMpSqb zT2GGC42c9HWi1b1H242dO6/N1no2k9M9KO8V2HQTiSXNB2isL4PBuNf5MeRwY1t neaUZSCjsPB1ztQdbFwMQ52UQ/TaOh+/QUAw7gUqpWNttc+MESNjG3O1QiVgt2gM 7JzaXwjySS2WD9vvNoCN5ynXxJogqC/iRl8Nm7eO90bbtkU3ak1tdzCMTzlseHZi ZbeF/d8wG+DawbX2HdK1WR9URf8CAwEAAaOCAmQwggJgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLW8uEP8YtUMAY1nquzsdoaTuJi7MB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8xLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8x L0I1QkNCODQzRkM2MkQ1MEMwMThENjdBQUVDRUM3Njg2OTNCODk4QkIubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFIYwDQYJKoZIhvcNAQELBQADggEBAGkoV2Cd8PW3oO6+ KVmDzDbX2kHRGUQZl7Jr57G8AZuItYPY31EbDexsNtu/uUI5cnIE15GnwpATSep7 2N4r9Tx9FXscNcBDjJQwITEPsJqC6AVgwcuSAQ115XDm5BesxDf0ZJXEg8Dn3AXH /wDAwbjj5d/DgZCK1TU0RCEXXJQr/d/pmDL6P4lfZeMyhQNeTU262g1wIkCiT6dh o5TKUvAqu2TmJcUa/1ViVEJ77gtEKsEx7ClaMuYAVDezmyCRnxAiejDoD3gwvhjO dsynDUuUrCPu24UwJURQEoHDQ/elhjSEhJN+4gdtePROLAiB40RlYuglwwWHZzsM wYuJSrc= -----END CERTIFICATE-----Generated at Tue May 12 22:16:15 2026 by rpki-client