$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer File: 34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer (raw, json) Hash identifier: c6iIhUVMhdeW2AL8C97/n0zaD+D6IUkqoJw1/1C9Ows= Subject key identifier: 34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 194670A95F1587132E111EFDA7410CA923C960CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft caRepository: rsync://rpkica.twnic.tw/rpki/NCCC/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:55 +0000 Certificate not after: Mon 10 May 2027 15:53:55 +0000 Subordinate resources: AS: 150772 IP: 2401:83a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:46:70:a9:5f:15:87:13:2e:11:1e:fd:a7:41:0c:a9:23:c9:60:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:55 2026 GMT Not After : May 10 15:53:55 2027 GMT Subject: CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4e:d4:5e:09:48:a3:05:3b:04:8e:3d:f1:00: 83:b1:82:13:43:87:9e:a4:58:7a:e5:cf:21:17:23: 93:09:d7:8b:a8:0c:28:69:c3:d9:9b:34:b6:80:a3: 90:b1:c2:04:44:26:17:f1:e3:b1:c2:43:31:a4:47: ba:8e:81:1f:90:12:58:95:2e:f7:09:85:ce:5d:d3: 6a:84:60:64:65:80:08:08:83:c5:26:16:a4:c2:d1: 5a:db:83:14:e3:4b:b1:df:bc:03:d7:8d:f8:f5:7c: ed:e7:17:c1:e8:9e:6b:51:03:be:b5:c1:1d:50:46: 19:3d:dc:13:2e:69:0e:b5:7f:bf:1b:d8:f3:8e:dd: ce:ed:7e:6d:12:44:c6:6e:ce:2f:e2:c7:36:1a:ae: ac:09:63:be:c7:cc:f2:59:c6:fb:ee:99:a4:b1:9b: a7:b1:3e:71:d2:6f:94:ce:34:bb:dc:f3:5d:92:c8: 33:32:78:ee:92:0c:f8:d5:f7:f4:62:9f:d4:99:c4: 0e:65:70:44:5c:ba:42:c7:88:e8:ac:96:be:78:7a: 62:e7:ef:7e:b1:36:f9:6c:2b:25:f7:fe:dd:1b:6e: b3:50:4d:5e:78:df:39:07:4e:56:5e:f0:45:37:f9: d5:36:03:7f:de:6e:8c:5b:58:59:3c:e1:ac:15:29: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:83a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 150772 Signature Algorithm: sha256WithRSAEncryption 32:90:56:13:0e:ff:24:6c:94:3f:6e:30:9d:e8:d1:de:0f:2d: 91:88:c6:4a:6b:63:c1:a3:e1:46:62:cb:b1:63:c3:ce:24:d0: 77:9c:20:e9:4b:90:fc:7f:91:aa:e5:a3:a5:27:41:ca:ed:d8: b5:ac:4f:5d:ce:20:c8:95:be:c7:77:18:f1:b7:44:77:bc:e5: b4:fd:d1:e4:b3:95:f5:dc:b7:1f:5b:63:a7:09:87:79:0a:d1: 8b:b6:88:cc:ea:95:fb:dd:82:fd:c4:ec:ad:39:99:7c:d1:a6: d6:a9:35:21:0b:c2:a8:aa:a1:89:07:f2:dd:c9:cc:61:69:b4: a4:3d:84:ea:d7:8d:00:b2:94:ca:05:b3:4d:0d:a9:68:78:fd: 36:df:b7:1f:8a:b9:96:71:04:55:a2:f2:e7:65:21:3c:36:48: c0:e5:94:28:c0:fa:4d:22:fd:42:65:d3:ea:2a:86:bc:f6:59: 88:be:6c:bb:ef:33:37:a9:ca:2e:ce:14:d4:ce:ac:10:39:36: 30:82:1a:87:8a:ce:34:5c:59:fd:76:03:b8:31:31:75:19:fd: 74:c4:8b:a0:82:6a:96:f5:7f:10:74:30:b6:d5:99:31:e6:f9: 27:18:7e:7f:19:47:e6:07:a1:96:a5:3f:96:99:a3:62:9f:b6: 8d:f9:94:22 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIUGUZwqV8VhxMuER79p0EMqSPJYMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDg1NVoX DTI3MDUxMDE1NTM1NVowMzExMC8GA1UEAxMoMzREQzQzNTdDOTJGMjE4OTQ1QzFG QTdCRDlBODA0ODQ0MUQ0QUJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpO1F4JSKMFOwSOPfEAg7GCE0OHnqRYeuXPIRcjkwnXi6gMKGnD2Zs0toCj kLHCBEQmF/HjscJDMaRHuo6BH5ASWJUu9wmFzl3TaoRgZGWACAiDxSYWpMLRWtuD FONLsd+8A9eN+PV87ecXweiea1EDvrXBHVBGGT3cEy5pDrV/vxvY847dzu1+bRJE xm7OL+LHNhqurAljvsfM8lnG++6ZpLGbp7E+cdJvlM40u9zzXZLIMzJ47pIM+NX3 9GKf1JnEDmVwRFy6QseI6KyWvnh6YufvfrE2+WwrJff+3Rtus1BNXnjfOQdOVl7w RTf51TYDf95ujFtYWTzhrBUppY0CAwEAAaOCAn8wggJ7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDTcQ1fJLyGJRcH6e9moBIRB1KvtMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ0NDLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DQ0MvMC8z NERDNDM1N0M5MkYyMTg5NDVDMUZBN0JEOUE4MDQ4NDQxRDRBQkVELm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAJAGDoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCTPQwDQYJ KoZIhvcNAQELBQADggEBADKQVhMO/yRslD9uMJ3o0d4PLZGIxkprY8Gj4UZiy7Fj w84k0HecIOlLkPx/karlo6UnQcrt2LWsT13OIMiVvsd3GPG3RHe85bT90eSzlfXc tx9bY6cJh3kK0Yu2iMzqlfvdgv3E7K05mXzRptapNSELwqiqoYkH8t3JzGFptKQ9 hOrXjQCylMoFs00NqWh4/Tbftx+KuZZxBFWi8udlITw2SMDllCjA+k0i/UJl0+oq hrz2WYi+bLvvMzepyi7OFNTOrBA5NjCCGoeKzjRcWf12A7gxMXUZ/XTEi6CCapb1 fxB0MLbVmTHm+ScYfn8ZR+YHoZalP5aZo2Kfto35lCI= -----END CERTIFICATE-----Generated at Tue May 12 22:15:48 2026 by rpki-client