$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.cer File: 244C8E99B153753EBDDF52F3AE0D8258D1FE460B.cer (raw, json) Hash identifier: mig1JxFmHLpWLCN0EMupz604vg/N2X6vuDDvdG2X284= Subject key identifier: 24:4C:8E:99:B1:53:75:3E:BD:DF:52:F3:AE:0D:82:58:D1:FE:46:0B Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 0AA899C626573C10433E8EB344E68AE5461F6355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.mft caRepository: rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:46 +0000 Certificate not after: Mon 10 May 2027 15:53:46 +0000 Subordinate resources: AS: 152621 IP: 163.61.124.0/23 IP: 2401:eea0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a8:99:c6:26:57:3c:10:43:3e:8e:b3:44:e6:8a:e5:46:1f:63:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:46 2026 GMT Not After : May 10 15:53:46 2027 GMT Subject: CN=244C8E99B153753EBDDF52F3AE0D8258D1FE460B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:d0:ae:e6:65:a4:a3:c5:89:fa:13:e0:52: 06:f1:64:11:bc:13:a8:20:02:95:19:5e:e1:d4:77: d9:7e:6d:1a:68:77:00:d7:3b:ac:cd:9b:4f:19:84: cd:cb:06:9d:58:40:36:09:0e:48:ce:bb:25:5d:c1: ce:4d:a3:87:f0:fe:47:51:50:d9:1c:95:ef:f9:63: 5a:bf:f4:7b:58:67:cd:c0:f9:78:08:26:9a:b2:bc: 40:ff:c8:a3:1b:16:dd:a6:33:ab:ee:f6:81:e7:49: 62:95:15:98:8c:c9:d5:a5:1e:12:ab:b7:dc:72:82: 5a:50:7e:36:35:36:fe:53:1f:77:33:d6:fe:38:08: b3:f2:29:64:79:9a:2f:27:cc:37:2a:4b:1e:3a:3d: 35:34:1b:54:7f:63:a4:e1:30:2f:f7:e6:bb:aa:58: 37:fc:41:93:f9:ba:0f:62:34:db:80:ee:71:a2:df: 9f:8a:58:12:26:e4:38:f7:88:ac:82:d2:c9:6f:ab: 79:74:38:aa:c0:49:46:e3:6d:27:c8:e8:af:b9:d6: a1:88:83:27:89:aa:80:72:f7:4b:a4:64:b5:32:31: ed:b3:f4:02:4d:eb:09:59:ba:3a:35:59:57:8e:f3: b5:b3:50:0d:19:57:7f:7a:23:2d:2f:a9:96:d6:a7: 13:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:4C:8E:99:B1:53:75:3E:BD:DF:52:F3:AE:0D:82:58:D1:FE:46:0B X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.124.0/23 IPv6: 2401:eea0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 152621 Signature Algorithm: sha256WithRSAEncryption 6f:2d:ee:00:10:0b:df:7d:2c:db:01:68:34:fa:31:ab:86:51: 35:a8:21:1c:05:34:71:48:e2:15:28:7b:11:7f:8b:51:fe:48: 3c:1f:b9:db:7b:77:ee:fc:f2:3b:57:cb:71:cb:69:a5:86:e1: 9e:54:34:3f:9e:ba:1c:29:29:2d:e3:1c:9a:82:6b:71:9a:26: 73:16:c3:99:c8:d1:71:f6:02:bd:8e:89:11:c0:9a:2f:9b:b5: b2:e5:33:ce:99:ee:28:9a:b4:cf:c3:6d:d3:3b:a8:44:ea:27: 19:c1:27:ca:2b:39:ca:dc:ee:6b:73:49:cc:16:d6:a0:c8:3d: bf:13:ec:17:10:16:7c:8f:bb:53:c4:bc:ff:18:d0:74:75:07: b7:83:d2:65:b4:af:ca:78:e6:c6:7d:d8:ac:50:2f:8a:01:86: df:1f:3e:c6:bf:36:77:00:35:94:a7:81:b2:ef:8f:22:12:76: f3:88:41:55:90:72:b0:b1:7d:97:3e:51:47:54:7d:10:cf:d1: 39:84:a6:58:c8:6d:9e:e3:8a:f6:3b:c3:73:24:f1:a9:5d:31: 4e:5c:5e:2c:8f:8e:53:79:46:c0:34:d8:58:1a:66:ca:ff:20: bb:e3:f9:5b:16:79:1a:ae:d3:1e:85:bb:f2:0c:c7:8c:c8:71: f1:10:b3:e0 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIUCqiZxiZXPBBDPo6zROaK5UYfY1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDg0NloX DTI3MDUxMDE1NTM0NlowMzExMC8GA1UEAxMoMjQ0QzhFOTlCMTUzNzUzRUJEREY1 MkYzQUUwRDgyNThEMUZFNDYwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpY0K7mZaSjxYn6E+BSBvFkEbwTqCAClRle4dR32X5tGmh3ANc7rM2bTxmE zcsGnVhANgkOSM67JV3Bzk2jh/D+R1FQ2RyV7/ljWr/0e1hnzcD5eAgmmrK8QP/I oxsW3aYzq+72gedJYpUVmIzJ1aUeEqu33HKCWlB+NjU2/lMfdzPW/jgIs/IpZHma LyfMNypLHjo9NTQbVH9jpOEwL/fmu6pYN/xBk/m6D2I024DucaLfn4pYEibkOPeI rILSyW+reXQ4qsBJRuNtJ8jor7nWoYiDJ4mqgHL3S6RktTIx7bP0Ak3rCVm6OjVZ V47ztbNQDRlXf3ojLS+pltanE+cCAwEAAaOCApcwggKTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCRMjpmxU3U+vd9S864NgljR/kYLMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NT1JOTUFQTEUv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTU9S Tk1BUExFLzAvMjQ0QzhFOTlCMTUzNzUzRUJEREY1MkYzQUUwRDgyNThEMUZFNDYw Qi5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAaM9fDANBAIAAjAHAwUAJAHuoDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMCVC0wDQYJKoZIhvcNAQELBQADggEBAG8t7gAQC999 LNsBaDT6MauGUTWoIRwFNHFI4hUoexF/i1H+SDwfudt7d+788jtXy3HLaaWG4Z5U ND+euhwpKS3jHJqCa3GaJnMWw5nI0XH2Ar2OiRHAmi+btbLlM86Z7iiatM/DbdM7 qETqJxnBJ8orOcrc7mtzScwW1qDIPb8T7BcQFnyPu1PEvP8Y0HR1B7eD0mW0r8p4 5sZ92KxQL4oBht8fPsa/NncANZSngbLvjyISdvOIQVWQcrCxfZc+UUdUfRDP0TmE pljIbZ7jivY7w3Mk8aldMU5cXiyPjlN5RsA02FgaZsr/ILvj+VsWeRqu0x6Fu/IM x4zIcfEQs+A= -----END CERTIFICATE-----Generated at Wed May 13 01:36:00 2026 by rpki-client