$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.cer (raw, json) Hash identifier: Fo9V2glQUmpEDWeKKJQy6ecIrQBkw5rQ7qMwOXhbW24= Subject key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 42A9F574264F66F1D7F2653A5BC9BDF235342A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft caRepository: rsync://rpkica.twnic.tw/rpki/CPSYS/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:38 +0000 Certificate not after: Mon 10 May 2027 15:49:38 +0000 Subordinate resources: IP: 103.14.170.0/23 IP: 2400:b0a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a9:f5:74:26:4f:66:f1:d7:f2:65:3a:5b:c9:bd:f2:35:34:2a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:44:38 2026 GMT Not After : May 10 15:49:38 2027 GMT Subject: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:0c:82:32:81:0b:b2:17:a4:7c:c4:b1:fc: 22:51:f9:e9:08:ef:b9:50:33:45:a2:f8:26:30:5b: a2:ed:87:f3:92:ed:4e:20:26:a8:3a:cc:06:3c:b7: 1d:99:dd:05:2c:27:aa:03:35:54:96:5f:64:19:f0: 99:ab:c0:57:a3:30:c0:39:05:6f:0a:95:b7:12:d7: 5b:af:09:78:9c:e2:71:1f:63:22:a8:7d:86:a5:8d: 59:1e:0e:7f:dc:e3:a6:9f:be:2a:a8:b3:1c:8b:91: 23:dd:fe:0e:4c:66:60:99:1e:31:ed:6a:4d:0c:7d: bd:43:a0:57:d0:61:48:91:a1:77:65:fd:fa:67:71: ca:c7:7e:7e:68:32:e8:f5:e7:12:94:f5:76:8c:53: 62:86:56:c1:7c:37:f4:76:45:b3:11:72:d7:14:b4: e9:e6:36:9e:87:51:7f:d1:85:64:ea:54:40:1c:89: 33:a2:77:25:68:71:a8:01:af:96:68:b3:c8:76:f5: c8:2f:33:f4:9a:f8:51:2a:de:9d:02:34:f9:8c:5c: f8:1c:1d:95:da:3f:6f:99:66:89:25:b5:85:3f:16: 79:80:ed:ab:ab:80:9f:b5:ec:e8:4a:2f:64:b6:19: 79:c5:47:b7:65:b0:9f:a6:bf:7b:b7:88:3f:8e:a3: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.170.0/23 IPv6: 2400:b0a0::/32 Signature Algorithm: sha256WithRSAEncryption b9:62:52:60:e2:c8:1c:af:cd:96:c3:5f:a9:9a:77:52:38:0f: 77:16:d4:bb:57:be:5f:5a:f2:59:19:22:78:7a:d7:27:21:0b: aa:87:13:6a:6c:21:79:59:5e:86:44:4d:38:0e:34:29:8d:e0: f9:39:18:b6:b9:cb:02:9e:ea:a8:7e:fb:c3:c4:a7:1c:02:a9: 5a:a4:b9:89:d4:7c:35:f1:42:09:bd:32:cc:f4:0d:3e:c1:5c: 3c:e0:75:e8:3e:75:28:3f:d4:2e:52:5f:79:57:76:ca:ab:cd: 3a:28:88:94:a9:0d:57:4d:b7:87:d4:b8:f4:68:7c:43:25:9f: 63:34:de:44:6d:7e:c8:39:c9:bf:06:7e:c0:87:63:6c:a9:de: e9:4c:41:2c:e2:06:80:d4:3b:02:ad:23:9f:bc:ee:0b:eb:24: c8:08:f9:00:27:09:11:1a:c4:71:c6:c5:8a:58:f0:eb:f2:03: e9:2f:7c:ed:85:b4:b2:f5:91:36:99:c2:41:1f:92:78:88:38: 4f:fd:81:42:6e:8b:27:aa:d2:49:87:f3:b6:30:53:3a:d0:59: fe:be:31:51:7f:12:09:22:d3:9e:2b:78:1c:93:38:17:0a:73: e3:dd:b7:21:45:58:dd:ed:31:35:f0:c2:be:aa:92:59:4f:ec: d7:85:01:a9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIUQqn1dCZPZvHX8mU6W8m98jU0Kn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQzOFoX DTI3MDUxMDE1NDkzOFowMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIz Q0Q3MTU5MTFEOTk2NzA2RTNBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI83DIIygQuyF6R8xLH8IlH56QjvuVAzRaL4JjBbou2H85LtTiAmqDrMBjy3 HZndBSwnqgM1VJZfZBnwmavAV6MwwDkFbwqVtxLXW68JeJzicR9jIqh9hqWNWR4O f9zjpp++KqizHIuRI93+DkxmYJkeMe1qTQx9vUOgV9BhSJGhd2X9+mdxysd+fmgy 6PXnEpT1doxTYoZWwXw39HZFsxFy1xS06eY2nodRf9GFZOpUQByJM6J3JWhxqAGv lmizyHb1yC8z9Jr4USrenQI0+Yxc+Bwdldo/b5lmiSW1hT8WeYDtq6uAn7Xs6Eov ZLYZecVHt2Wwn6a/e7eIP46j3BkCAwEAAaOCAnMwggJvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEyzq7G0oCSnASI81xWRHZlnBuOqMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8w LzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnDqowDQQCAAIwBwMFACQAsKAwDQYJKoZIhvcNAQELBQAD ggEBALliUmDiyByvzZbDX6mad1I4D3cW1LtXvl9a8lkZInh61ychC6qHE2psIXlZ XoZETTgONCmN4Pk5GLa5ywKe6qh++8PEpxwCqVqkuYnUfDXxQgm9Msz0DT7BXDzg deg+dSg/1C5SX3lXdsqrzTooiJSpDVdNt4fUuPRofEMln2M03kRtfsg5yb8GfsCH Y2yp3ulMQSziBoDUOwKtI5+87gvrJMgI+QAnCREaxHHGxYpY8OvyA+kvfO2FtLL1 kTaZwkEfkniIOE/9gUJuiyeq0kmH87YwUzrQWf6+MVF/Egki054reByTOBcKc+Pd tyFFWN3tMTXwwr6qkllP7NeFAak= -----END CERTIFICATE-----Generated at Tue May 12 22:32:36 2026 by rpki-client