$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer File: 2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer (raw, json) Hash identifier: TuaI4FtaSYrlh9USPH/MLgyyP+z3whmsqNROj25gHX4= Subject key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 05ED4F1E3E1A9218423F088E162E90246F25B1AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft caRepository: rsync://rpkica.twnic.tw/rpki/MLYTICS/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:36 +0000 Certificate not after: Mon 10 May 2027 15:53:36 +0000 Subordinate resources: IP: 103.125.224.0/22 IP: 211.79.106.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ed:4f:1e:3e:1a:92:18:42:3f:08:8e:16:2e:90:24:6f:25:b1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:36 2026 GMT Not After : May 10 15:53:36 2027 GMT Subject: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:a2:53:ee:0c:5d:88:87:8f:52:94:9b:72: 5d:3f:fd:34:9d:72:0e:49:6e:ae:d5:4a:ef:6d:a4: b7:88:26:76:7f:c7:31:a2:2b:e1:45:99:6c:06:19: 86:9d:57:bb:4d:9f:56:cf:7c:2f:12:e5:5f:10:5e: 03:5e:9e:d4:e2:dd:9f:84:ff:34:7b:08:9e:bb:b7: 20:29:ea:4d:11:11:1e:ca:8c:e0:0c:a1:b9:0b:05: 0b:0e:a7:5a:1d:33:48:bb:6e:59:73:52:f1:d3:6f: 40:ac:9b:4c:a0:d7:b7:c5:d9:01:29:d2:2b:c0:c3: 2f:c9:0b:2f:b1:55:f2:ee:46:ec:08:0a:9f:19:4d: 42:a3:5f:25:d9:d3:89:ca:6c:4a:fa:9c:17:1d:f6: f7:79:ac:a3:bf:eb:c9:ad:88:25:0b:5c:fd:20:19: 09:12:a0:a2:c8:5d:ac:86:70:f6:ef:6a:0d:cf:91: 8e:fe:e1:3b:5c:8a:aa:4e:60:1e:0d:1b:77:48:bd: a0:db:63:af:12:e6:2c:61:b6:e1:1c:31:cc:79:23: ca:36:3e:87:96:d9:fe:1f:97:57:ba:c5:e4:b3:9a: 8b:59:77:ab:c3:0e:d2:05:07:fa:55:e0:4c:17:b8: 68:a0:33:18:06:a9:7a:2d:4c:c5:00:42:e8:2d:a6: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.224.0/22 211.79.106.0/23 Signature Algorithm: sha256WithRSAEncryption 82:d5:fe:03:71:b6:f0:30:21:15:b0:6f:f6:e7:5d:3a:48:47: 41:8f:3f:6c:27:40:dc:17:4c:97:b4:12:30:04:b5:b6:fa:d1: 77:cd:7c:74:5e:35:b4:fb:a1:94:37:1f:8f:76:eb:42:09:25: 6a:c5:ad:ea:31:37:c7:29:a1:0c:92:89:b4:aa:c7:24:5e:96: e9:87:9c:8f:4f:9c:4d:bf:56:9b:10:a7:27:b0:f5:4b:22:04: ec:bf:28:66:c2:56:79:3a:31:b8:55:bd:1b:8b:e5:87:81:aa: 04:c1:97:d9:5a:37:5d:47:97:90:14:e6:46:47:6b:02:be:b7: dc:a9:b2:3f:b5:df:18:1a:f6:a6:b7:f5:cf:d8:da:7d:ea:e2: 0b:5c:16:02:76:d3:84:cc:3b:e7:3c:98:ba:05:ad:c7:e3:36: b5:e6:3c:4d:f2:83:74:59:08:cb:4a:9d:e2:b2:f6:52:17:1b: c6:03:44:d8:13:86:f0:4b:a7:33:df:89:08:35:04:63:bf:33: 2c:e2:5b:b5:f7:b0:98:fc:f1:37:51:2e:0c:fd:d0:24:c1:22: 19:63:dd:df:ec:50:8b:8a:8e:5d:83:73:14:5a:46:32:aa:ba: d6:a9:48:71:b9:ac:c5:7a:53:a5:9a:77:46:87:f5:e4:11:b0: 8e:d3:6e:dd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUBe1PHj4akhhCPwiOFi6QJG8lsawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDgzNloX DTI3MDUxMDE1NTMzNlowMzExMC8GA1UEAxMoMjkyM0JEOTZDN0IzRDRCQ0FBMTBC QTk5Q0UyOURDMTVCQzEwMTgzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBSolPuDF2Ih49SlJtyXT/9NJ1yDklurtVK722kt4gmdn/HMaIr4UWZbAYZ hp1Xu02fVs98LxLlXxBeA16e1OLdn4T/NHsInru3ICnqTRERHsqM4AyhuQsFCw6n Wh0zSLtuWXNS8dNvQKybTKDXt8XZASnSK8DDL8kLL7FV8u5G7AgKnxlNQqNfJdnT icpsSvqcFx3293mso7/rya2IJQtc/SAZCRKgoshdrIZw9u9qDc+Rjv7hO1yKqk5g Hg0bd0i9oNtjrxLmLGG24RwxzHkjyjY+h5bZ/h+XV7rF5LOai1l3q8MO0gUH+lXg TBe4aKAzGAapei1MxQBC6C2m+L0CAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCkjvZbHs9S8qhC6mc4p3BW8EBg/MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NTFlUSUNTLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01MWVRJ Q1MvMC8yOTIzQkQ5NkM3QjNENEJDQUExMEJBOTlDRTI5REMxNUJDMTAxODNGLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQCZ33gAwQB009qMA0GCSqGSIb3DQEBCwUAA4IBAQCC 1f4DcbbwMCEVsG/25106SEdBjz9sJ0DcF0yXtBIwBLW2+tF3zXx0XjW0+6GUNx+P dutCCSVqxa3qMTfHKaEMkom0qsckXpbph5yPT5xNv1abEKcnsPVLIgTsvyhmwlZ5 OjG4Vb0bi+WHgaoEwZfZWjddR5eQFOZGR2sCvrfcqbI/td8YGvamt/XP2Np96uIL XBYCdtOEzDvnPJi6Ba3H4za15jxN8oN0WQjLSp3isvZSFxvGA0TYE4bwS6cz34kI NQRjvzMs4lu197CY/PE3US4M/dAkwSIZY93f7FCLio5dg3MUWkYyqrrWqUhxuazF elOlmndGh/XkEbCO027d -----END CERTIFICATE-----Generated at Tue May 12 22:29:04 2026 by rpki-client