$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer File: 4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer (raw, json) Hash identifier: jgD2xspXZwnMmBp7JQ/bXfcOaOJQGHBqmi+bUNj+bRM= Subject key identifier: 4E:B9:8F:52:3D:7A:DE:58:5D:07:59:A9:9A:16:63:EA:42:85:D1:8F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 3D4D77F4F61CB0B55C15F0959CA557D8FB343323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft caRepository: rsync://rpkica.twnic.tw/rpki/INNOLUX/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:01 +0000 Certificate not after: Mon 10 May 2027 15:52:01 +0000 Subordinate resources: AS: 131683 IP: 103.161.90.0/23 IP: 2406:fdc0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4d:77:f4:f6:1c:b0:b5:5c:15:f0:95:9c:a5:57:d8:fb:34:33:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:01 2026 GMT Not After : May 10 15:52:01 2027 GMT Subject: CN=4EB98F523D7ADE585D0759A99A1663EA4285D18F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:b5:3e:60:9e:a4:0c:67:c7:72:7c:9a:7d: 63:b4:05:87:ea:07:5b:58:ff:35:ae:9b:38:ed:5f: ff:b7:61:6d:c7:d8:76:e6:ea:d0:5a:51:78:79:60: 2b:ad:2b:98:6f:b2:f5:3d:c8:f6:aa:fd:ed:f9:cb: db:bc:4f:31:47:d7:d0:3e:dc:c7:cb:fe:64:0c:86: ab:4e:d7:b2:72:55:6e:84:2c:1b:86:2f:b6:e1:03: 46:21:fc:c6:9d:6a:3d:6b:5b:69:6c:6e:52:57:88: 84:79:e5:b1:8f:a4:fa:ec:2b:20:0b:aa:e3:50:fe: 9e:13:49:6b:d9:03:15:18:a9:4f:80:24:f5:37:11: 6c:f3:9e:c3:c3:23:86:e4:a0:18:fb:b5:07:89:6d: 65:b9:56:7c:a1:a9:72:61:db:d9:2a:c4:1a:a9:03: c4:43:5d:96:79:81:2c:13:f7:6c:8b:55:f4:8d:5e: 26:7f:0e:dc:9d:5f:46:9a:ff:a9:f1:78:4a:00:95: 66:35:e6:ae:ce:57:70:d7:4b:50:9a:f1:08:c5:ed: 84:7b:df:f7:e4:5a:fc:8a:6c:6e:a7:38:47:66:0b: 50:bb:6c:94:a4:b5:37:b5:86:0d:80:2a:e1:31:4b: e8:f2:cb:b3:dc:28:2d:85:e3:99:88:e8:25:e9:a3: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:B9:8F:52:3D:7A:DE:58:5D:07:59:A9:9A:16:63:EA:42:85:D1:8F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/INNOLUX/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.90.0/23 IPv6: 2406:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131683 Signature Algorithm: sha256WithRSAEncryption 26:b3:0d:57:8c:80:64:d6:50:ea:fd:aa:60:a7:fa:ed:4c:3a: 15:c9:38:ab:f2:ce:96:f3:ae:40:82:c7:83:ce:d7:d8:b2:39: cf:74:d2:3f:09:c8:83:47:93:22:a5:65:24:f5:a0:76:c7:5a: 88:77:a1:03:b7:4d:36:05:16:15:c7:3a:28:d1:98:ce:61:b6: b5:5b:16:03:b8:5e:f5:4f:3d:46:8f:3e:49:0b:55:52:42:fd: 2b:d1:c2:62:e2:18:94:3b:18:9f:d5:f0:ae:6e:4e:7b:be:91: d6:ef:dd:02:b9:89:74:58:30:78:29:fb:71:99:2c:ef:b5:de: d7:16:25:29:3a:53:f8:37:15:b1:9a:21:b2:60:43:66:9d:9a: d5:da:f0:1f:95:71:0d:09:52:75:e3:a4:a7:b7:96:eb:b7:58: b7:04:e8:8c:f1:a9:75:9a:e8:d2:86:6f:05:d9:29:c7:7a:d6: e5:51:ca:90:11:8d:80:7b:69:e8:1c:82:07:69:9b:e2:ef:a2: 54:52:46:a6:d4:68:3b:6a:5a:b1:0b:d9:5f:3a:82:64:3d:cb: 19:62:f0:6f:ec:cb:d0:7d:51:01:b4:ce:73:3f:8b:71:03:c6: 31:8d:e2:05:61:e5:86:bd:c3:f7:78:c7:b4:f0:e3:0b:8e:16: ae:82:b2:09 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUPU139PYcsLVcFfCVnKVX2Ps0MyMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDcwMVoX DTI3MDUxMDE1NTIwMVowMzExMC8GA1UEAxMoNEVCOThGNTIzRDdBREU1ODVEMDc1 OUE5OUExNjYzRUE0Mjg1RDE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJFtT5gnqQMZ8dyfJp9Y7QFh+oHW1j/Na6bOO1f/7dhbcfYdubq0FpReHlg K60rmG+y9T3I9qr97fnL27xPMUfX0D7cx8v+ZAyGq07XsnJVboQsG4YvtuEDRiH8 xp1qPWtbaWxuUleIhHnlsY+k+uwrIAuq41D+nhNJa9kDFRipT4Ak9TcRbPOew8Mj huSgGPu1B4ltZblWfKGpcmHb2SrEGqkDxENdlnmBLBP3bItV9I1eJn8O3J1fRpr/ qfF4SgCVZjXmrs5XcNdLUJrxCMXthHvf9+Ra/Ipsbqc4R2YLULtslKS1N7WGDYAq 4TFL6PLLs9woLYXjmYjoJemjNtUCAwEAAaOCApMwggKPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE65j1I9et5YXQdZqZoWY+pChdGPMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTk5PTFVYLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lOTk9M VVgvMC80RUI5OEY1MjNEN0FERTU4NUQwNzU5QTk5QTE2NjNFQTQyODVEMThGLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ6FaMA0EAgACMAcDBQAkBv3AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwICYzANBgkqhkiG9w0BAQsFAAOCAQEAJrMNV4yAZNZQ6v2q YKf67Uw6Fck4q/LOlvOuQILHg87X2LI5z3TSPwnIg0eTIqVlJPWgdsdaiHehA7dN NgUWFcc6KNGYzmG2tVsWA7he9U89Ro8+SQtVUkL9K9HCYuIYlDsYn9Xwrm5Oe76R 1u/dArmJdFgweCn7cZks77Xe1xYlKTpT+DcVsZohsmBDZp2a1drwH5VxDQlSdeOk p7eW67dYtwTojPGpdZro0oZvBdkpx3rW5VHKkBGNgHtp6ByCB2mb4u+iVFJGptRo O2pasQvZXzqCZD3LGWLwb+zL0H1RAbTOcz+LcQPGMY3iBWHlhr3D93jHtPDjC44W roKyCQ== -----END CERTIFICATE-----Generated at Tue May 12 22:10:34 2026 by rpki-client