$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer (raw, json) Hash identifier: SETwozTrIG1D81cXxYYqS5x4lrSkrUKqM5tXNqJcVh4= Subject key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 0A4FBCFDE3409CD9B1E1CBD4114C5993A7FF6195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft caRepository: rsync://rpkica.twnic.tw/rpki/IMYKL/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:57 +0000 Certificate not after: Mon 10 May 2027 15:51:57 +0000 Subordinate resources: IP: 160.191.4.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4f:bc:fd:e3:40:9c:d9:b1:e1:cb:d4:11:4c:59:93:a7:ff:61:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:46:57 2026 GMT Not After : May 10 15:51:57 2027 GMT Subject: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:2e:f8:52:90:25:0d:45:91:16:45:32:f2: eb:2e:3c:5d:b1:cf:8b:fe:82:ce:3f:9c:3e:12:ea: 0e:0f:e3:85:e8:66:fa:7e:9d:91:7c:18:cd:0f:eb: d2:f0:dd:ca:59:77:ed:f6:d6:45:0c:a9:fa:2d:03: 4f:2d:65:3a:fb:32:9a:bf:e5:23:bd:90:3d:5b:a8: 7a:e1:58:56:88:11:cc:a3:32:e9:05:69:14:8a:0f: b9:a7:77:12:52:0b:7b:44:d3:8b:53:fd:e5:f8:a3: 4f:f9:83:c7:75:81:c9:2a:ed:63:33:21:eb:c6:a7: 5e:1f:5e:8c:2e:48:00:2c:43:a4:10:a4:df:de:2e: db:7d:d7:dc:16:01:78:cf:0d:bd:34:6e:6d:68:ba: 7c:aa:6a:11:f8:d8:92:a6:82:d4:b6:47:18:ae:75: ca:e3:e9:39:42:bd:67:3f:f0:91:95:ff:1c:84:14: 25:22:cc:0f:18:82:9d:4c:84:bb:12:ca:8f:6b:04: 42:a0:25:c3:f8:f8:c5:a3:72:de:fa:6d:73:e9:c4: 40:34:ed:bd:25:47:58:37:44:99:bb:a5:00:77:95: 01:d3:52:90:c5:65:9e:64:56:44:26:63:83:60:5e: 58:f3:c3:70:19:5b:78:5b:c4:4a:86:55:17:69:7d: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.4.0/23 Signature Algorithm: sha256WithRSAEncryption 04:f9:75:92:ed:fc:bb:35:68:91:c3:f1:37:c1:ca:88:37:7d: 81:be:27:35:f5:8d:2a:a1:78:22:68:58:a7:73:53:17:5b:2b: 3c:60:fb:0b:bf:64:f9:62:22:a0:c2:43:7b:4d:53:ec:6e:ca: 5f:ff:e3:0e:e9:db:86:96:9d:cc:f5:69:f7:ec:25:1d:b4:25: aa:76:a7:75:46:42:3b:5b:8b:93:35:b1:f8:55:c2:4b:5e:ae: 58:66:24:ed:cc:1b:4a:83:9a:6a:04:86:1b:95:03:95:2d:7a: a6:4e:22:7a:06:cc:f1:86:ce:a0:fb:f8:63:cf:f2:fc:f2:ef: 6c:41:75:59:97:b7:74:e9:47:7d:58:18:f5:df:3f:d2:cf:6e: 44:81:d5:83:0f:d1:9a:0f:32:6b:05:94:95:3a:05:c9:6c:e6: b2:ea:ad:cb:69:0a:e7:30:7b:64:f5:15:38:dd:b6:d2:7f:74: d7:30:7c:73:19:47:44:af:45:cb:c4:4d:df:13:f9:6e:73:c2: ec:93:e5:06:05:46:f6:5a:67:f2:b0:df:21:ab:0a:c8:27:41: 6f:1b:f2:92:07:c5:03:21:a8:a2:29:b9:0e:f7:f2:b5:21:41: 15:25:51:1d:5e:06:ee:8c:eb:5e:21:b9:3b:12:76:92:ff:02: dc:55:4c:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUCk+8/eNAnNmx4cvUEUxZk6f/YZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDY1N1oX DTI3MDUxMDE1NTE1N1owMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThG QTBFRkE3RjNCMEMxNkVFNDNBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJEULvhSkCUNRZEWRTLy6y48XbHPi/6Czj+cPhLqDg/jhehm+n6dkXwYzQ/r 0vDdyll37fbWRQyp+i0DTy1lOvsymr/lI72QPVuoeuFYVogRzKMy6QVpFIoPuad3 ElILe0TTi1P95fijT/mDx3WBySrtYzMh68anXh9ejC5IACxDpBCk394u233X3BYB eM8NvTRubWi6fKpqEfjYkqaC1LZHGK51yuPpOUK9Zz/wkZX/HIQUJSLMDxiCnUyE uxLKj2sEQqAlw/j4xaNy3vptc+nEQDTtvSVHWDdEmbulAHeVAdNSkMVlnmRWRCZj g2BeWPPDcBlbeFvESoZVF2l9sTsCAwEAAaOCAmQwggJgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO8dEEhO+nmrwBj6Dvp/OwwW7kOnMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8w L0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgvwQwDQYJKoZIhvcNAQELBQADggEBAAT5dZLt/Ls1aJHD 8TfByog3fYG+JzX1jSqheCJoWKdzUxdbKzxg+wu/ZPliIqDCQ3tNU+xuyl//4w7p 24aWncz1affsJR20Jap2p3VGQjtbi5M1sfhVwkterlhmJO3MG0qDmmoEhhuVA5Ut eqZOInoGzPGGzqD7+GPP8vzy72xBdVmXt3TpR31YGPXfP9LPbkSB1YMP0ZoPMmsF lJU6Bcls5rLqrctpCucwe2T1FTjdttJ/dNcwfHMZR0SvRcvETd8T+W5zwuyT5QYF RvZaZ/Kw3yGrCsgnQW8b8pIHxQMhqKIpuQ738rUhQRUlUR1eBu6M614huTsSdpL/ AtxVTJc= -----END CERTIFICATE-----Generated at Tue May 12 22:03:49 2026 by rpki-client