$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/49351FABA26185254DDA416A1D5581DD443EDC41.cer File: 49351FABA26185254DDA416A1D5581DD443EDC41.cer (raw, json) Hash identifier: //CxPnU/TRleXcgia5oBqZd+kLi0TvBaSWpPuExAGA0= Subject key identifier: 49:35:1F:AB:A2:61:85:25:4D:DA:41:6A:1D:55:81:DD:44:3E:DC:41 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 4D4895A7249ECE1B112FB94BABCC51BC312457F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.mft caRepository: rsync://rpkica.twnic.tw/rpki/UNIONISME/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 16:00:19 +0000 Certificate not after: Mon 10 May 2027 16:05:19 +0000 Subordinate resources: AS: 131673 IP: 45.113.156.0/22 IP: 103.16.240.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:48:95:a7:24:9e:ce:1b:11:2f:b9:4b:ab:cc:51:bc:31:24:57:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 16:00:19 2026 GMT Not After : May 10 16:05:19 2027 GMT Subject: CN=49351FABA26185254DDA416A1D5581DD443EDC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:b2:27:51:02:73:13:da:15:9a:75:56:c1: 48:01:03:23:b8:1c:27:fa:ae:08:e7:18:c1:f3:5c: 79:5a:50:e0:b8:79:32:23:72:99:c5:54:bd:92:5c: b1:99:f3:9c:4a:a0:04:5c:fd:1f:bf:67:18:11:ad: 40:4f:50:a8:c3:17:5e:e1:6b:84:b0:2e:fe:03:dc: c6:d0:48:f2:b3:78:77:25:8f:74:20:e8:0c:79:aa: 72:d1:6d:db:ec:d4:15:cd:fa:38:90:8b:97:e6:8f: ba:51:b1:3e:f2:a3:5a:69:2a:e8:dd:e0:4e:ea:a6: eb:7a:9f:4c:0b:d1:8f:b7:10:4b:a7:fd:72:be:8f: 53:3e:cb:cb:e9:9d:21:45:0d:8c:ce:ff:a1:9d:fc: c4:31:7b:0b:6b:95:67:d7:5f:8b:b9:3d:36:83:13: bb:c4:e1:4e:b6:29:96:ef:09:45:d7:13:6c:22:75: 89:c7:d6:09:1f:06:8b:78:7d:3f:5a:8d:97:8b:7c: 4f:f2:c5:74:5f:00:ca:a8:e5:d3:67:80:e7:d8:c8: 5d:ae:97:d7:fa:57:7c:82:e4:e3:2f:9d:69:56:e4: bb:48:e9:2e:c0:a8:8f:64:76:8b:d7:1c:15:ba:e1: db:46:dc:b7:be:14:2a:e4:85:8d:41:67:47:f8:d7: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:35:1F:AB:A2:61:85:25:4D:DA:41:6A:1D:55:81:DD:44:3E:DC:41 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/UNIONISME/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.156.0/22 103.16.240.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131673 Signature Algorithm: sha256WithRSAEncryption 1a:b7:1c:7a:1c:d8:b4:bd:11:56:1b:d2:87:51:c6:81:c1:2b: a5:a4:20:39:2a:65:c7:1d:89:c0:41:08:43:60:ff:ad:93:ae: f2:67:0f:93:f7:3d:7c:01:3e:5b:a2:ee:02:3e:90:11:7e:23: 93:40:cb:1e:1c:ce:3f:f6:b5:81:7c:50:be:ce:10:2b:32:39: d5:b4:91:0f:7c:4e:96:ea:19:c7:70:4a:08:f6:1b:4a:a3:3e: 6d:f2:32:20:21:4c:65:e5:b0:3d:6e:aa:8d:87:25:a0:a5:9a: 4a:1c:3f:c5:5b:79:ad:19:8f:f9:e2:b1:ad:25:ba:69:e8:f4: e2:f6:79:71:d8:90:62:f5:21:2a:82:b2:18:5e:f5:fd:3e:b5: 3c:23:13:5a:9b:e3:55:9d:b4:1f:b2:e3:30:a3:fb:3b:1c:5e: dd:c7:14:42:13:59:c7:ea:da:83:fd:8b:9b:c5:24:b6:d6:f2: 5b:00:36:b0:09:a8:8f:e2:06:6e:e7:29:6c:9c:44:53:c9:2c: 07:60:78:31:7f:6b:9b:97:2e:f4:b7:be:4c:94:a3:37:a3:c4: 6f:cf:38:7f:41:9e:0a:ab:e8:93:a9:43:3f:56:f6:c8:43:e3: 49:34:65:38:3b:a8:40:a3:5e:ac:08:01:f7:fc:66:e2:7a:49: 14:43:72:21 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUTUiVpySezhsRL7lLq8xRvDEkV/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDAxOVoX DTI3MDUxMDE2MDUxOVowMzExMC8GA1UEAxMoNDkzNTFGQUJBMjYxODUyNTREREE0 MTZBMUQ1NTgxREQ0NDNFREM0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgusidRAnMT2hWadVbBSAEDI7gcJ/quCOcYwfNceVpQ4Lh5MiNymcVUvZJc sZnznEqgBFz9H79nGBGtQE9QqMMXXuFrhLAu/gPcxtBI8rN4dyWPdCDoDHmqctFt 2+zUFc36OJCLl+aPulGxPvKjWmkq6N3gTuqm63qfTAvRj7cQS6f9cr6PUz7Ly+md IUUNjM7/oZ38xDF7C2uVZ9dfi7k9NoMTu8ThTrYplu8JRdcTbCJ1icfWCR8Gi3h9 P1qNl4t8T/LFdF8Ayqjl02eA59jIXa6X1/pXfILk4y+daVbku0jpLsCoj2R2i9cc Fbrh20bct74UKuSFjUFnR/jXUakCAwEAAaOCAo4wggKKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEk1H6uiYYUlTdpBah1Vgd1EPtxBMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9VTklPTklTTUUv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5J T05JU01FLzAvNDkzNTFGQUJBMjYxODUyNTREREE0MTZBMUQ1NTgxREQ0NDNFREM0 MS5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF BQcBBwEB/wQWMBQwEgQCAAEwDAMEAi1xnAMEAmcQ8DAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMCAlkwDQYJKoZIhvcNAQELBQADggEBABq3HHoc2LS9EVYb0odRxoHB K6WkIDkqZccdicBBCENg/62TrvJnD5P3PXwBPlui7gI+kBF+I5NAyx4czj/2tYF8 UL7OECsyOdW0kQ98TpbqGcdwSgj2G0qjPm3yMiAhTGXlsD1uqo2HJaClmkocP8Vb ea0Zj/nisa0lumno9OL2eXHYkGL1ISqCshhe9f0+tTwjE1qb41WdtB+y4zCj+zsc Xt3HFEITWcfq2oP9i5vFJLbW8lsANrAJqI/iBm7nKWycRFPJLAdgeDF/a5uXLvS3 vkyUozejxG/POH9Bngqr6JOpQz9W9shD40k0ZTg7qECjXqwIAff8ZuJ6SRRDciE= -----END CERTIFICATE-----Generated at Tue May 12 22:16:36 2026 by rpki-client