$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer File: 19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer (raw, json) Hash identifier: 2lvddfNNBcmzwFGOe0U4Ir1fMeF5M//TacCqvHSre70= Subject key identifier: 19:78:1C:D1:C1:CF:52:07:00:CF:F8:06:5E:6D:E6:16:BA:1B:34:28 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 77C19B76FA999F5D3CAFAE02E97BDD9C2DA2875E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.mft caRepository: rsync://rpkica.twnic.tw/rpki/HONGJAY/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:46:38 +0000 Certificate not after: Mon 10 May 2027 15:51:38 +0000 Subordinate resources: AS: 18048 IP: 103.197.172.0/22 IP: 220.158.228.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c1:9b:76:fa:99:9f:5d:3c:af:ae:02:e9:7b:dd:9c:2d:a2:87:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:46:38 2026 GMT Not After : May 10 15:51:38 2027 GMT Subject: CN=19781CD1C1CF520700CFF8065E6DE616BA1B3428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:7a:25:77:15:cd:b0:53:39:3e:9b:3f:c3: 24:ea:18:ba:92:08:af:cd:fc:98:89:90:23:93:2d: af:48:5e:32:ed:77:77:86:09:e1:9f:83:b9:5c:73: 8f:54:2c:28:48:7b:35:9c:65:3e:17:0b:8f:e4:d6: 18:c6:c0:5c:ae:28:6c:b5:27:6e:12:64:c8:a5:3c: 0d:3d:e4:a9:55:6e:e7:cf:a3:3c:d9:17:b4:03:de: ad:81:cd:7e:16:87:5a:58:d8:ce:39:12:2d:61:80: 85:27:19:0e:d9:a6:5f:68:b3:f0:9f:b0:62:a5:1e: a5:64:d6:ca:20:fb:c8:77:68:45:e2:65:d9:7a:40: a8:6e:a2:7a:f7:0a:c1:a8:74:4c:36:39:34:79:e9: 5e:34:6b:8b:c1:03:41:1b:23:22:bd:44:60:7b:58: 34:0b:13:1d:69:14:d1:6a:a7:ed:8d:e8:4c:05:75: 1d:b3:29:e5:fe:6b:cc:74:e8:8a:d8:ca:d0:c1:fa: b9:de:94:ee:62:11:44:ff:7b:48:8c:4b:2f:47:c1: 53:13:27:b0:d5:37:67:0c:3b:94:ed:ff:3d:e2:2b: 58:31:d9:a5:01:bb:ad:28:6e:11:0f:40:56:03:2e: ca:d2:83:e6:c7:24:8f:6a:15:89:d1:83:44:de:6d: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:78:1C:D1:C1:CF:52:07:00:CF:F8:06:5E:6D:E6:16:BA:1B:34:28 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HONGJAY/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.172.0/22 220.158.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18048 Signature Algorithm: sha256WithRSAEncryption 89:9d:81:19:e5:b6:de:bc:c7:34:36:b9:9c:dc:3a:07:60:90: 87:65:db:0c:3a:ac:46:49:11:b8:43:0a:38:64:3b:af:a5:5d: 74:58:c1:2d:84:85:13:41:ea:d5:cd:2c:32:15:46:7c:02:24: 7a:f0:90:87:4b:16:bc:74:a7:10:9d:bf:f3:34:75:69:4b:e2: c0:29:33:2c:f6:f7:07:24:5f:ae:cd:c7:36:8c:9f:23:1b:58: 52:d7:f8:40:2b:a9:3f:d2:0c:41:b4:49:b2:fb:8d:91:de:b0: 7c:4a:33:fd:48:d3:ab:36:07:0b:f5:06:1b:b1:00:a6:13:3d: c2:8d:f1:6a:bb:20:2c:54:11:74:cd:89:69:b4:de:0c:4d:09: 88:ba:16:51:c7:a1:52:b4:1c:94:eb:6a:fe:4e:d3:8b:ab:ad: 04:8c:46:c6:c6:1f:6b:f2:84:10:d5:ec:d6:aa:d2:b2:b7:d4: 4e:35:d9:58:7f:86:ec:35:5f:3b:7c:30:fc:62:0d:92:1a:60: 2c:41:b1:1d:a6:3e:4f:b4:09:d3:d9:01:53:9c:a3:94:06:11: 46:d0:df:65:8d:f6:df:23:48:ed:22:15:4a:2e:16:41:c1:6c: 9c:13:1d:ce:68:05:f1:7f:ce:06:a7:94:57:29:82:1e:00:dd: 27:96:85:aa -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUd8GbdvqZn108r64C6XvdnC2ih14wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDYzOFoX DTI3MDUxMDE1NTEzOFowMzExMC8GA1UEAxMoMTk3ODFDRDFDMUNGNTIwNzAwQ0ZG ODA2NUU2REU2MTZCQTFCMzQyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaieiV3Fc2wUzk+mz/DJOoYupIIr838mImQI5Mtr0heMu13d4YJ4Z+DuVxz j1QsKEh7NZxlPhcLj+TWGMbAXK4obLUnbhJkyKU8DT3kqVVu58+jPNkXtAPerYHN fhaHWljYzjkSLWGAhScZDtmmX2iz8J+wYqUepWTWyiD7yHdoReJl2XpAqG6ievcK wah0TDY5NHnpXjRri8EDQRsjIr1EYHtYNAsTHWkU0Wqn7Y3oTAV1HbMp5f5rzHTo itjK0MH6ud6U7mIRRP97SIxLL0fBUxMnsNU3Zww7lO3/PeIrWDHZpQG7rShuEQ9A VgMuytKD5sckj2oVidGDRN5tu28CAwEAAaOCAokwggKFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBl4HNHBz1IHAM/4Bl5t5ha6GzQoMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IT05HSkFZLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hPTkdK QVkvMC8xOTc4MUNEMUMxQ0Y1MjA3MDBDRkY4MDY1RTZERTYxNkJBMUIzNDI4Lm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQCZ8WsAwQC3J7kMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAkaAMA0GCSqGSIb3DQEBCwUAA4IBAQCJnYEZ5bbevMc0Nrmc3DoHYJCHZdsM OqxGSRG4Qwo4ZDuvpV10WMEthIUTQerVzSwyFUZ8AiR68JCHSxa8dKcQnb/zNHVp S+LAKTMs9vcHJF+uzcc2jJ8jG1hS1/hAK6k/0gxBtEmy+42R3rB8SjP9SNOrNgcL 9QYbsQCmEz3CjfFquyAsVBF0zYlptN4MTQmIuhZRx6FStByU62r+TtOLq60EjEbG xh9r8oQQ1ezWqtKyt9RONdlYf4bsNV87fDD8Yg2SGmAsQbEdpj5PtAnT2QFTnKOU BhFG0N9ljfbfI0jtIhVKLhZBwWycEx3OaAXxf84Gp5RXKYIeAN0nloWq -----END CERTIFICATE-----Generated at Tue May 12 22:32:47 2026 by rpki-client