$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer File: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer (raw, json) Hash identifier: LRkDpm2350TMPzwwNjv+Qo724Im6cvuem9N3p1dGMI8= Subject key identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 2C6DC3D3A0E46B5FBC343B36E7EC33FD4D324986 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft caRepository: rsync://rpkica.twnic.tw/rpki/VERYFAST/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 16:00:30 +0000 Certificate not after: Mon 10 May 2027 16:05:30 +0000 Subordinate resources: IP: 161.248.44.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6d:c3:d3:a0:e4:6b:5f:bc:34:3b:36:e7:ec:33:fd:4d:32:49:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 16:00:30 2026 GMT Not After : May 10 16:05:30 2027 GMT Subject: CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:94:f0:ca:0c:11:4f:95:a9:ec:7b:67:5c: 20:91:4f:71:a5:91:1f:4b:53:2d:52:26:82:8e:d2: a5:6b:fc:ea:33:07:92:dd:c8:23:8b:50:60:d1:c3: ad:bf:9d:87:88:a7:43:7d:02:79:2f:d2:72:93:d1: 8c:47:87:09:70:3d:f5:52:9e:31:de:35:c2:be:f1: 36:a0:41:d9:7b:a5:7c:81:c9:c4:30:5b:ca:1e:1f: c9:6a:b8:82:76:da:d1:09:7a:6f:47:48:13:4f:71: 0b:ce:19:d7:c2:cf:5d:18:02:dd:1b:9c:18:c9:50: c5:5c:3c:2c:9e:3e:0f:ba:0d:43:0a:b6:e5:f1:b6: fb:da:92:08:02:99:ba:e6:04:63:c5:3c:83:d8:70: 7d:2d:4d:12:a4:cf:fa:91:0b:be:fc:65:2f:a1:f7: 25:36:54:f7:14:b7:99:53:ba:f0:44:ab:9c:4f:49: 9e:01:30:18:a6:67:96:35:c1:d8:eb:1d:5c:0a:b8: c6:d7:66:36:fe:25:b2:51:4f:75:b3:40:94:7f:d7: ae:d8:b9:73:9b:75:25:73:11:2b:33:4c:9d:87:88: cb:20:03:12:b0:57:c6:3b:47:d6:93:21:8f:10:9c: 91:69:d5:50:b4:ae:02:cd:73:06:85:ef:4b:be:5d: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.44.0/23 Signature Algorithm: sha256WithRSAEncryption 13:6e:89:cd:70:84:a0:a7:d6:e5:f8:39:97:55:9b:df:04:76: 0c:fc:5c:3b:34:a0:a2:89:85:79:44:3c:88:ad:f6:10:ac:eb: af:90:e8:db:d7:6a:0d:01:2d:d3:78:1b:19:40:ac:fd:13:46: f2:d5:c4:1e:43:ac:93:38:27:d9:c8:9d:51:45:24:ef:c6:51: 8c:b8:4f:99:a7:d7:16:f0:ae:f0:3e:d9:05:6a:58:56:ca:e9: 16:ea:31:4a:a2:d9:8b:db:ed:93:6f:cf:92:3f:22:7f:77:95: 40:74:7f:4b:94:ec:fd:b7:cf:e8:c5:52:47:6c:3d:94:a1:94: 44:de:6f:27:35:c3:16:b1:96:d5:08:c2:f5:67:d5:1d:d0:53: 68:f3:cb:e8:8f:08:cb:6b:56:3b:cb:86:e8:0e:f2:00:bc:76: 88:83:40:e3:04:2f:0c:53:88:18:00:b9:20:21:bb:4a:58:3d: de:9c:3e:13:dd:5a:1c:1c:5d:e3:45:54:5b:7e:15:ed:fb:d6: c7:24:c6:c9:f3:cc:87:39:be:9c:35:48:a6:76:f4:c7:9c:a6: a3:55:b0:d4:73:d2:58:60:b8:75:84:fa:cb:55:8d:4c:17:b0: 7f:31:ac:5d:40:e8:b5:c3:fa:15:ab:8d:a4:b8:6c:e9:d6:a2: 1a:79:87:f3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIULG3D06Dka1+8NDs25+wz/U0ySYYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE2MDAzMFoX DTI3MDUxMDE2MDUzMFowMzExMC8GA1UEAxMoQzMwNTZDNUYxNTdBN0U3NTEyRkMz MDZFRkVERUY5MkZEMTJDNDdGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSblPDKDBFPlanse2dcIJFPcaWRH0tTLVImgo7SpWv86jMHkt3II4tQYNHD rb+dh4inQ30CeS/ScpPRjEeHCXA99VKeMd41wr7xNqBB2XulfIHJxDBbyh4fyWq4 gnba0Ql6b0dIE09xC84Z18LPXRgC3RucGMlQxVw8LJ4+D7oNQwq25fG2+9qSCAKZ uuYEY8U8g9hwfS1NEqTP+pELvvxlL6H3JTZU9xS3mVO68ESrnE9JngEwGKZnljXB 2OsdXAq4xtdmNv4lslFPdbNAlH/Xrti5c5t1JXMRKzNMnYeIyyADErBXxjtH1pMh jxCckWnVULSuAs1zBoXvS75dwmcCAwEAAaOCAmowggJmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMMFbF8Ven51Evwwbv7e+S/RLEfxMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRVJZRkFTVC8x LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRVJZ RkFTVC8xL0MzMDU2QzVGMTU3QTdFNzUxMkZDMzA2RUZFREVGOTJGRDEyQzQ3RjEu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGh+CwwDQYJKoZIhvcNAQELBQADggEBABNuic1w hKCn1uX4OZdVm98Edgz8XDs0oKKJhXlEPIit9hCs66+Q6NvXag0BLdN4GxlArP0T RvLVxB5DrJM4J9nInVFFJO/GUYy4T5mn1xbwrvA+2QVqWFbK6RbqMUqi2Yvb7ZNv z5I/In93lUB0f0uU7P23z+jFUkdsPZShlETebyc1wxaxltUIwvVn1R3QU2jzy+iP CMtrVjvLhugO8gC8doiDQOMELwxTiBgAuSAhu0pYPd6cPhPdWhwcXeNFVFt+Fe37 1sckxsnzzIc5vpw1SKZ29MecpqNVsNRz0lhguHWE+stVjUwXsH8xrF1A6LXD+hWr jaS4bOnWohp5h/M= -----END CERTIFICATE-----Generated at Tue May 12 22:47:26 2026 by rpki-client