$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer File: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer (raw, json) Hash identifier: wk31krZBBrC2T267VkXc/MlJFZoflM/o7bi+gxvz0fU= Subject key identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 51592C44FCBA72BBE0E620EF074A6A1D011C008D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft caRepository: rsync://rpkica.twnic.tw/rpki/SYVC/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:19 +0000 Certificate not after: Mon 10 May 2027 16:02:19 +0000 Subordinate resources: IP: 103.183.198.0/23 IP: 2400:63e0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:59:2c:44:fc:ba:72:bb:e0:e6:20:ef:07:4a:6a:1d:01:1c:00:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:19 2026 GMT Not After : May 10 16:02:19 2027 GMT Subject: CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:8c:59:e5:da:0f:08:56:e6:db:b7:84:92: 68:f7:7c:76:07:70:86:2d:7e:0a:74:5d:20:5b:d9: c6:51:7d:6a:97:a5:74:50:f1:7f:3d:41:e7:26:e5: 90:73:74:77:6d:c9:f9:93:53:86:9a:11:fd:a0:18: 68:bc:97:e8:97:d0:c7:a4:85:64:b6:3f:71:3e:4c: 5f:40:23:15:11:e5:f5:e4:a1:a2:1d:3e:19:ee:bd: 47:43:b2:f7:f9:11:f0:ca:30:19:d4:58:06:bc:7d: d4:78:1c:92:27:bf:ea:a0:97:da:0a:6e:87:75:2d: 2b:a9:72:ca:57:21:83:1d:6e:a7:55:57:4a:01:e1: 32:6c:47:b8:ee:e6:ed:8e:40:0a:72:d9:f9:f6:42: 62:a4:14:37:da:b6:64:92:a0:c9:6f:75:38:7f:4a: 40:dd:5e:03:c8:ec:da:b7:83:93:e1:54:d7:b4:93: e9:ff:46:26:9b:56:e1:55:18:0e:db:92:41:01:13: 28:a8:89:9d:d7:91:55:d2:de:9e:d1:63:73:fd:01: 78:49:fa:fe:8b:86:b0:16:33:2d:b9:1a:34:ad:8a: 27:83:c7:9b:bb:5e:96:83:02:9b:4b:03:4f:d1:6d: 75:55:8f:40:8c:55:d9:31:cf:1b:6a:aa:b2:dc:21: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.198.0/23 IPv6: 2400:63e0::/32 Signature Algorithm: sha256WithRSAEncryption 64:5d:15:a9:fb:9d:6e:80:5d:e5:d7:4b:a1:1d:ac:de:7f:f7: f3:bf:91:ac:b8:ac:e0:2b:86:b5:5a:98:fc:a3:dd:fb:d4:ef: 4f:d0:cb:b6:92:85:7a:6c:07:f3:9d:13:0d:49:85:2c:e7:b7: f8:ec:eb:6f:ac:be:22:e5:ba:f6:c9:a8:e5:fb:27:4c:33:f3: 4b:20:4c:6a:96:8a:74:30:57:78:06:1c:40:f1:26:24:dd:77: 94:4c:5d:91:f4:80:bb:df:42:21:a9:26:bf:b8:d5:1d:ca:44: eb:d3:63:3b:fa:51:09:06:00:f7:a0:66:de:b5:6c:13:04:10: e9:86:2d:ec:f3:45:35:5d:0f:7b:78:a0:30:bd:a7:af:ed:39: a1:fb:0b:30:10:95:7c:6d:a4:76:5d:3a:40:4a:ee:f3:a6:4c: 5f:7c:e2:b9:ed:de:a0:9e:7a:9a:77:db:dc:a1:81:37:ac:0a: c7:93:9e:6a:00:02:f4:86:ae:92:bf:e0:77:9d:3e:7e:94:a3: e3:9c:22:69:0f:01:a7:0c:c7:81:66:6a:60:f5:fa:7f:f5:96: a5:49:b0:05:46:c2:58:f9:db:eb:57:6f:cd:04:56:44:b7:13: 93:c7:56:bd:29:21:7e:5b:25:46:8f:aa:23:36:b4:c1:f3:68: ba:7c:66:40 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUUVksRPy6crvg5iDvB0pqHQEcAI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTcxOVoX DTI3MDUxMDE2MDIxOVowMzExMC8GA1UEAxMoM0YzRTZFOERGNEY0NkRERkUwNDhG NzFDNUFFQzg2MTZGREQ3RDczNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPJjFnl2g8IVubbt4SSaPd8dgdwhi1+CnRdIFvZxlF9apeldFDxfz1B5ybl kHN0d23J+ZNThpoR/aAYaLyX6JfQx6SFZLY/cT5MX0AjFRHl9eShoh0+Ge69R0Oy 9/kR8MowGdRYBrx91Hgckie/6qCX2gpuh3UtK6lyylchgx1up1VXSgHhMmxHuO7m 7Y5ACnLZ+fZCYqQUN9q2ZJKgyW91OH9KQN1eA8js2reDk+FU17ST6f9GJptW4VUY DtuSQQETKKiJndeRVdLentFjc/0BeEn6/ouGsBYzLbkaNK2KJ4PHm7teloMCm0sD T9FtdVWPQIxV2THPG2qqstwh+VkCAwEAAaOCAnEwggJtMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD8+bo309G3f4Ej3HFrshhb919c3MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TWVZDLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NZVkMvMC8z RjNFNkU4REY0RjQ2RERGRTA0OEY3MUM1QUVDODYxNkZERDdENzM3Lm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w HTAMBAIAATAGAwQBZ7fGMA0EAgACMAcDBQAkAGPgMA0GCSqGSIb3DQEBCwUAA4IB AQBkXRWp+51ugF3l10uhHazef/fzv5GsuKzgK4a1Wpj8o9371O9P0Mu2koV6bAfz nRMNSYUs57f47OtvrL4i5br2yajl+ydMM/NLIExqlop0MFd4BhxA8SYk3XeUTF2R 9IC730IhqSa/uNUdykTr02M7+lEJBgD3oGbetWwTBBDphi3s80U1XQ97eKAwvaev 7Tmh+wswEJV8baR2XTpASu7zpkxffOK57d6gnnqad9vcoYE3rArHk55qAAL0hq6S v+B3nT5+lKPjnCJpDwGnDMeBZmpg9fp/9ZalSbAFRsJY+dvrV2/NBFZEtxOTx1a9 KSF+WyVGj6ojNrTB82i6fGZA -----END CERTIFICATE-----Generated at Tue May 12 22:10:09 2026 by rpki-client