$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer File: 29663E2ACD53191459F334EE521FAAAABE4930ED.cer (raw, json) Hash identifier: xX89clnOiu2wrjyLY8FwzwzmM+q1pwUjL5bYbBRiUK4= Subject key identifier: 29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 6BEFF778B598246C38DDFCA50D16BD6892225F7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft caRepository: rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:19 +0000 Certificate not after: Mon 10 May 2027 15:52:19 +0000 Subordinate resources: AS: 131619 IP: 103.116.96.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ef:f7:78:b5:98:24:6c:38:dd:fc:a5:0d:16:bd:68:92:22:5f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:19 2026 GMT Not After : May 10 15:52:19 2027 GMT Subject: CN=29663E2ACD53191459F334EE521FAAAABE4930ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:0f:e9:f6:5a:bb:fb:d2:ab:8c:55:af:65: 97:7d:36:84:a5:1c:fa:9c:7b:4e:b7:4e:bc:f9:e4: 52:36:50:4f:eb:48:82:cb:3d:8f:bc:06:30:d5:ca: 59:e2:35:73:4a:45:3e:35:40:43:4d:c5:e2:12:75: f2:84:ad:33:b7:29:28:80:84:7e:7e:0e:8c:63:15: e5:d9:0d:2c:39:1f:2b:16:cf:f9:37:bb:fb:f6:3f: 21:a6:21:2c:b6:59:50:f7:73:21:4d:c4:e0:f2:91: f1:d3:f9:7a:f4:d3:f5:ff:92:a2:c1:4a:95:be:be: b4:b0:61:79:9c:84:ac:e0:31:1e:ae:fd:fb:cb:f7: f0:4c:1d:2d:95:f1:da:cc:68:a0:2f:b5:34:e0:db: a8:7e:47:c1:a2:fa:07:70:ae:84:a6:51:d1:47:a7: f1:12:d9:9c:ee:01:0f:67:32:7a:76:93:72:a7:23: 38:fa:08:89:02:26:6f:ef:49:ac:cc:e3:90:f3:d5: e9:79:73:87:4e:09:48:2a:0f:9c:c4:16:dc:15:d3: 51:0d:8a:c4:da:e7:fe:4b:d8:ba:0a:c3:9b:88:e9: 76:2b:02:a8:07:8f:bd:ad:4c:17:cc:00:3c:0a:87: f7:54:12:5a:cd:82:64:1b:52:f5:c1:7e:11:4d:e8: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.96.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131619 Signature Algorithm: sha256WithRSAEncryption 9c:ea:3b:b1:0c:be:3c:30:2e:bf:ae:6f:93:93:a4:3e:66:40: 2a:cb:a4:bf:dd:3e:4e:22:21:2d:c3:5e:f3:25:11:04:ed:09: 26:a7:6b:37:f0:65:47:a4:74:0f:49:8e:e0:30:2a:0d:6f:43: 2c:f0:80:9b:bc:3d:ca:5f:a8:aa:66:a5:6f:56:63:4c:ad:c9: e0:dd:d4:75:ad:4f:ab:13:9e:84:bd:2e:77:12:47:3b:8a:fc: 88:d9:83:83:7f:f6:fc:0a:ef:53:25:fd:fd:d9:34:19:ab:e0: 23:18:fe:9e:8a:08:0e:90:10:ba:81:9b:3a:11:26:10:b0:19: 3a:24:7e:88:0a:50:7d:13:d9:3f:21:a4:ae:59:86:e7:99:7e: 58:51:02:08:ed:39:65:e1:07:88:56:15:2c:f3:87:1a:61:20: 47:18:8d:49:2f:d1:d8:07:5a:24:63:f5:99:85:3e:02:0f:8a: 30:3a:91:93:57:82:06:cb:78:8b:4d:b6:5f:b0:49:95:e6:d4: c5:f1:b4:33:d7:e6:1b:8c:e6:7e:4f:80:35:cd:35:e6:76:f8: 77:e9:b9:2e:b4:5c:14:93:4f:1f:9f:5e:e6:8c:7b:f6:56:74: a5:73:46:dc:d7:fd:5d:34:0c:ee:37:0f:dd:3a:58:d9:58:4e: fb:14:06:ca -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIUa+/3eLWYJGw43fylDRa9aJIiX30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDcxOVoX DTI3MDUxMDE1NTIxOVowMzExMC8GA1UEAxMoMjk2NjNFMkFDRDUzMTkxNDU5RjMz NEVFNTIxRkFBQUFCRTQ5MzBFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJg+D+n2Wrv70quMVa9ll302hKUc+px7TrdOvPnkUjZQT+tIgss9j7wGMNXK WeI1c0pFPjVAQ03F4hJ18oStM7cpKICEfn4OjGMV5dkNLDkfKxbP+Te7+/Y/IaYh LLZZUPdzIU3E4PKR8dP5evTT9f+SosFKlb6+tLBheZyErOAxHq79+8v38EwdLZXx 2sxooC+1NODbqH5HwaL6B3CuhKZR0Uen8RLZnO4BD2cyenaTcqcjOPoIiQImb+9J rMzjkPPV6Xlzh04JSCoPnMQW3BXTUQ2KxNrn/kvYugrDm4jpdisCqAePva1MF8wA PAqH91QSWs2CZBtS9cF+EU3o4j8CAwEAAaOCAoYwggKCMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClmPirNUxkUWfM07lIfqqq+STDtMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9KSUdFTlRFQy8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9KSUdF TlRFQy8wLzI5NjYzRTJBQ0Q1MzE5MTQ1OUYzMzRFRTUyMUZBQUFBQkU0OTMwRUQu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJndGAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AgIjMA0GCSqGSIb3DQEBCwUAA4IBAQCc6juxDL48MC6/rm+Tk6Q+ZkAqy6S/3T5O IiEtw17zJREE7Qkmp2s38GVHpHQPSY7gMCoNb0Ms8ICbvD3KX6iqZqVvVmNMrcng 3dR1rU+rE56EvS53Ekc7ivyI2YODf/b8Cu9TJf392TQZq+AjGP6eiggOkBC6gZs6 ESYQsBk6JH6IClB9E9k/IaSuWYbnmX5YUQII7Tll4QeIVhUs84caYSBHGI1JL9HY B1okY/WZhT4CD4owOpGTV4IGy3iLTbZfsEmV5tTF8bQz1+YbjOZ+T4A1zTXmdvh3 6bkutFwUk08fn17mjHv2VnSlc0bc1/1dNAzuNw/dOljZWE77FAbK -----END CERTIFICATE-----Generated at Tue May 12 22:47:33 2026 by rpki-client