$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer File: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer (raw, json) Hash identifier: VUK/B2WnWtQwWBjmK5RH8RMOZQWGpQFNMccA5uaOW0k= Subject key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 7CF7A55E34333811D4244C2C5F2803CFE2EEE144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft caRepository: rsync://rpkica.twnic.tw/rpki/ERAY/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:45:32 +0000 Certificate not after: Mon 10 May 2027 15:50:32 +0000 Subordinate resources: IP: 103.255.206.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f7:a5:5e:34:33:38:11:d4:24:4c:2c:5f:28:03:cf:e2:ee:e1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:45:32 2026 GMT Not After : May 10 15:50:32 2027 GMT Subject: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:4f:f6:83:14:52:e9:45:45:50:1a:e5:f0: 40:01:8b:98:45:59:dd:99:fd:06:a7:4b:58:67:1c: 9a:5d:27:e2:5b:97:e6:70:1b:2f:ab:f5:31:0d:46: bd:18:67:e4:15:a7:06:07:b7:a7:92:2b:98:78:b2: 2c:e0:85:c6:db:3e:5d:af:50:05:32:c9:05:96:eb: 4f:35:c7:47:e8:02:c4:02:9d:fc:50:3c:77:3e:de: 0b:d9:98:dd:78:50:76:69:ed:34:d0:b3:be:de:f4: 1d:b7:6a:da:c1:aa:08:45:74:71:19:5c:19:83:fc: 0d:6c:22:c9:5a:d0:d0:0f:81:1c:3a:54:3c:cf:1b: d0:81:3a:c1:fd:04:73:3c:91:66:67:af:f4:37:ce: e2:77:b5:fa:98:7b:61:90:bc:1f:c5:85:33:4c:54: 57:30:43:a6:29:a9:b6:18:3a:e7:2c:dd:75:26:15: 0b:3a:91:e2:a2:bf:fc:fa:cc:39:ef:da:93:a5:fc: 7a:b1:26:d5:a2:19:6a:27:c6:9f:ae:f1:aa:d6:fb: 76:92:1a:f0:d7:29:3f:6b:5c:a6:d9:06:af:92:a0: a1:e8:6c:b1:84:0f:84:e5:14:3f:16:ae:37:45:db: 97:9b:9a:fb:37:cb:58:90:16:56:95:c5:b3:f6:da: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.206.0/23 Signature Algorithm: sha256WithRSAEncryption 43:0f:c0:4c:2c:61:26:cb:a5:ab:78:a2:bd:2f:cf:cb:e2:85: f8:1d:cc:0e:31:e8:59:85:ca:62:dd:ab:72:77:47:55:5b:b5: 90:a4:2a:71:58:8b:8d:db:da:c1:47:db:bb:24:b4:5f:b8:82: c5:d5:cf:b9:63:02:99:c8:ac:62:2f:26:06:98:38:4d:2f:d3: eb:d5:db:63:f7:df:ce:d3:ef:f5:1f:c6:6f:ca:af:17:65:34: 30:fd:dd:39:96:cb:d1:c5:78:8f:d6:46:98:40:05:79:80:96: cc:7c:86:fe:02:21:79:e4:dd:ff:81:d3:a0:ed:9e:db:1e:23: 4a:e5:d0:71:00:14:09:77:77:26:19:b9:46:67:b4:2c:b3:92: 1b:53:4b:c0:ce:d7:26:4d:65:5e:d2:85:14:d8:0e:fb:08:78: 90:56:cf:63:ef:4d:a8:94:c0:ba:21:c7:5f:2f:9e:b0:a4:3f: bf:d4:29:eb:05:4e:7e:cd:18:f1:60:3e:14:76:5c:ba:39:9a: a1:4d:7f:1a:75:e8:03:2f:d4:5f:c5:82:53:25:6d:47:d6:c3: 7a:cd:d8:2f:67:60:13:b8:5f:26:e7:1f:7a:87:2e:9c:c9:3d: ce:a7:e7:8c:a9:36:4a:38:be:10:72:29:24:1d:5d:d9:58:c8: d2:1f:0d:ee -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUfPelXjQzOBHUJEwsXygDz+Lu4UQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDUzMloX DTI3MDUxMDE1NTAzMlowMzExMC8GA1UEAxMoMTlDMjRENjRBNTYzN0YxRjY4MzdE MDZCQTc3RjEwMDBGRjlFNTREMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNUT/aDFFLpRUVQGuXwQAGLmEVZ3Zn9BqdLWGccml0n4luX5nAbL6v1MQ1G vRhn5BWnBge3p5IrmHiyLOCFxts+Xa9QBTLJBZbrTzXHR+gCxAKd/FA8dz7eC9mY 3XhQdmntNNCzvt70Hbdq2sGqCEV0cRlcGYP8DWwiyVrQ0A+BHDpUPM8b0IE6wf0E czyRZmev9DfO4ne1+ph7YZC8H8WFM0xUVzBDpimpthg65yzddSYVCzqR4qK//PrM Oe/ak6X8erEm1aIZaifGn67xqtb7dpIa8NcpP2tcptkGr5KgoehssYQPhOUUPxau N0Xbl5ua+zfLWJAWVpXFs/ba2EcCAwEAAaOCAmIwggJeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBnCTWSlY38faDfQa6d/EAD/nlTTMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FUkFZLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0VSQVkvMC8x OUMyNEQ2NEE1NjM3RjFGNjgzN0QwNkJBNzdGMTAwMEZGOUU1NEQzLm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQBZ//OMA0GCSqGSIb3DQEBCwUAA4IBAQBDD8BMLGEmy6WreKK9 L8/L4oX4HcwOMehZhcpi3atyd0dVW7WQpCpxWIuN29rBR9u7JLRfuILF1c+5YwKZ yKxiLyYGmDhNL9Pr1dtj99/O0+/1H8Zvyq8XZTQw/d05lsvRxXiP1kaYQAV5gJbM fIb+AiF55N3/gdOg7Z7bHiNK5dBxABQJd3cmGblGZ7Qss5IbU0vAztcmTWVe0oUU 2A77CHiQVs9j702olMC6IcdfL56wpD+/1CnrBU5+zRjxYD4Udly6OZqhTX8adegD L9RfxYJTJW1H1sN6zdgvZ2ATuF8m5x96hy6cyT3Op+eMqTZKOL4QcikkHV3ZWMjS Hw3u -----END CERTIFICATE-----Generated at Tue May 12 22:16:42 2026 by rpki-client