$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer File: F4194E27E15A4F76E006403795143D4EFDCF022E.cer (raw, json) Hash identifier: pnBz15ocDUsdQF8zRSNow+HMK4WGxQjsVLwJxNfxL3Q= Subject key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 1D03A3EA75334C52BC04EC54804A4546632980A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft caRepository: rsync://rpkica.twnic.tw/rpki/NCCC/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:54 +0000 Certificate not after: Mon 10 May 2027 15:53:54 +0000 Subordinate resources: IP: 157.20.106.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:03:a3:ea:75:33:4c:52:bc:04:ec:54:80:4a:45:46:63:29:80:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:48:54 2026 GMT Not After : May 10 15:53:54 2027 GMT Subject: CN=F4194E27E15A4F76E006403795143D4EFDCF022E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:e1:e0:f7:d9:40:97:1f:a5:ac:7b:21:18: bc:9a:49:cd:2d:6c:20:35:d2:9c:eb:7f:26:e6:ad: 6b:04:60:29:e2:87:f6:ab:d3:c2:c6:68:4d:58:4c: df:f5:a8:63:96:6e:b6:34:f8:62:48:14:bc:74:e6: d1:69:e3:dd:44:79:01:6b:d4:e7:ea:97:89:37:75: 93:b9:00:e1:7e:68:b5:6d:d7:04:65:8c:ca:1f:5c: e7:52:18:fc:d7:88:f1:7c:b9:cb:55:f7:2a:ba:51: db:18:27:03:d7:99:f0:f3:80:6e:c4:3a:11:ac:ae: d2:8f:c1:ce:48:b0:4b:7b:c0:9e:a7:62:3b:ae:6b: ee:f8:40:a6:09:2a:3c:c3:04:d1:bd:b9:7d:e7:02: f4:5d:5d:6b:1a:1d:69:dd:c8:bf:8d:bc:c4:f0:ca: e3:e1:b9:cb:08:1f:0f:09:19:36:3b:13:37:56:41: 4c:8a:e2:41:38:14:26:f5:92:fb:82:e8:1d:2c:2a: 4e:47:1d:86:a2:9a:76:2a:83:c0:2d:ef:45:19:d9: 27:17:71:c5:cc:68:f8:83:2e:68:e6:14:47:5b:66: 38:de:5d:23:13:80:25:50:b8:4a:6a:de:fd:6b:20: c5:c3:d3:9d:d0:6a:57:56:05:74:8f:42:36:4d:8a: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.106.0/23 Signature Algorithm: sha256WithRSAEncryption 91:3e:80:fe:0a:d9:37:2a:43:69:3f:e8:8a:b1:22:bc:65:c7: 50:3b:50:6a:72:6e:dc:91:3c:a7:67:c0:7b:46:fe:97:13:90: f8:31:d2:4e:a9:45:74:c8:d5:3d:03:82:9f:e1:2e:89:f7:f0: 40:70:f2:96:0b:82:4b:b6:d1:c1:ef:ea:d9:e9:d5:32:7c:ea: 9e:f5:63:99:d2:ee:ed:d7:7e:79:b6:a4:01:44:af:c5:88:bf: 72:22:af:1e:de:fb:fd:87:b2:b0:1e:a3:95:30:d9:7a:0b:45: 07:5b:d1:41:49:3c:3c:b2:27:e7:98:b8:58:11:e6:04:b3:b6: 8c:eb:eb:ee:b3:b6:db:68:c4:75:c5:c5:a0:b7:a2:a6:58:7b: d2:65:39:9e:29:76:19:14:c8:7b:3c:78:26:91:b0:80:b4:aa: 8e:37:05:75:eb:96:83:5d:08:b1:9b:e6:1b:2f:f2:a9:fb:65: 32:d1:7b:fd:07:96:0a:3a:a5:c5:d1:c7:f9:8f:5f:6f:68:d9: bc:bd:b7:95:fb:b4:c3:0c:bc:06:59:72:c6:fe:b5:9d:86:b3: d5:e5:94:94:88:e4:22:35:30:b5:28:0b:9a:fb:6c:10:83:b8: 2e:70:79:74:7d:c8:06:11:69:af:5a:8d:7d:2e:21:44:b7:df: f5:dd:d8:1d -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUHQOj6nUzTFK8BOxUgEpFRmMpgKgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDg1NFoX DTI3MDUxMDE1NTM1NFowMzExMC8GA1UEAxMoRjQxOTRFMjdFMTVBNEY3NkUwMDY0 MDM3OTUxNDNENEVGRENGMDIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANK54eD32UCXH6WseyEYvJpJzS1sIDXSnOt/JuatawRgKeKH9qvTwsZoTVhM 3/WoY5ZutjT4YkgUvHTm0Wnj3UR5AWvU5+qXiTd1k7kA4X5otW3XBGWMyh9c51IY /NeI8Xy5y1X3KrpR2xgnA9eZ8POAbsQ6Eayu0o/BzkiwS3vAnqdiO65r7vhApgkq PMME0b25fecC9F1daxodad3Iv428xPDK4+G5ywgfDwkZNjsTN1ZBTIriQTgUJvWS +4LoHSwqTkcdhqKadiqDwC3vRRnZJxdxxcxo+IMuaOYUR1tmON5dIxOAJVC4Smre /WsgxcPTndBqV1YFdI9CNk2Kvr0CAwEAAaOCAmIwggJeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPQZTifhWk924AZAN5UUPU79zwIuMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ0NDLzEvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMS9G NDE5NEUyN0UxNUE0Rjc2RTAwNjQwMzc5NTE0M0Q0RUZEQ0YwMjJFLm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQBnRRqMA0GCSqGSIb3DQEBCwUAA4IBAQCRPoD+Ctk3KkNpP+iK sSK8ZcdQO1Bqcm7ckTynZ8B7Rv6XE5D4MdJOqUV0yNU9A4Kf4S6J9/BAcPKWC4JL ttHB7+rZ6dUyfOqe9WOZ0u7t1355tqQBRK/FiL9yIq8e3vv9h7KwHqOVMNl6C0UH W9FBSTw8sifnmLhYEeYEs7aM6+vus7bbaMR1xcWgt6KmWHvSZTmeKXYZFMh7PHgm kbCAtKqONwV165aDXQixm+YbL/Kp+2Uy0Xv9B5YKOqXF0cf5j19vaNm8vbeV+7TD DLwGWXLG/rWdhrPV5ZSUiOQiNTC1KAua+2wQg7gucHl0fcgGEWmvWo19LiFEt9/1 3dgd -----END CERTIFICATE-----Generated at Tue May 12 21:53:19 2026 by rpki-client