$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/719EEF9098B822C154A4B0A2B6AB20CA8D6D6199.cer File: 719EEF9098B822C154A4B0A2B6AB20CA8D6D6199.cer (raw, json) Hash identifier: 2BB8L0lHSpr98rMDm1bjqtUIYZrBKxoy5M8wyEznB/c= Subject key identifier: 71:9E:EF:90:98:B8:22:C1:54:A4:B0:A2:B6:AB:20:CA:8D:6D:61:99 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 49ADA5475CEDE94A646B670131B5328FE835E99E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/MINGDING/0/719EEF9098B822C154A4B0A2B6AB20CA8D6D6199.mft caRepository: rsync://rpkica.twnic.tw/rpki/MINGDING/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:48:29 +0000 Certificate not after: Mon 10 May 2027 15:53:29 +0000 Subordinate resources: AS: 63891 IP: 2402:1360::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ad:a5:47:5c:ed:e9:4a:64:6b:67:01:31:b5:32:8f:e8:35:e9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:48:29 2026 GMT Not After : May 10 15:53:29 2027 GMT Subject: CN=719EEF9098B822C154A4B0A2B6AB20CA8D6D6199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:4c:33:05:fa:2e:eb:11:de:df:91:c0:52: e4:8f:0e:4a:e3:09:0e:7a:28:b1:98:86:c6:3b:e9: 2d:28:29:c6:33:c0:54:fb:da:0b:a8:0e:2d:6d:3c: 9b:c2:64:9e:e3:f5:21:f2:77:26:05:30:b1:27:04: 36:f5:85:19:38:3e:a6:48:4e:26:3f:fd:ee:2a:44: 8f:f3:e2:18:70:99:b9:b3:a6:b2:dd:90:6b:49:28: 8a:3b:51:7b:04:06:ad:ce:4c:d8:ee:9b:83:f8:35: f4:30:20:7c:4d:41:43:21:05:fb:d3:47:87:d6:f0: 78:f1:2d:d3:61:3c:cb:43:32:d8:7f:f9:ba:0c:f4: 95:1d:f2:eb:d6:38:cf:0a:86:11:da:4d:d8:75:78: 9e:2c:9e:4c:76:f4:c0:a8:4f:d7:cc:4d:b6:19:67: 1b:84:68:5f:80:69:40:49:71:9c:05:f4:9e:14:3f: ba:66:f1:87:23:bd:f3:c6:3d:21:65:9f:b3:cd:fa: 2a:e1:d9:d4:87:50:ec:13:c7:de:e7:79:ca:56:80: 59:70:37:e6:eb:e9:ab:f2:d0:b8:7a:bd:6d:91:9b: 64:4a:aa:d1:bf:eb:04:5a:8a:2c:17:9b:da:52:4c: 4e:d6:39:a9:31:54:64:eb:91:24:0e:c2:fd:96:c4: 08:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:9E:EF:90:98:B8:22:C1:54:A4:B0:A2:B6:AB:20:CA:8D:6D:61:99 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MINGDING/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MINGDING/0/719EEF9098B822C154A4B0A2B6AB20CA8D6D6199.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:1360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63891 Signature Algorithm: sha256WithRSAEncryption 60:36:f7:1f:d6:61:be:c0:92:e8:bb:d5:70:53:5c:3f:2e:4d: e5:cf:ff:cd:70:9a:a8:5c:32:35:94:c1:70:a3:7b:f1:6a:95: ea:a7:66:cd:ef:74:09:5c:91:ae:2f:2c:3c:79:06:b6:ca:f2: ae:5c:67:a2:d1:62:4d:1e:f5:cb:4a:99:cb:a6:64:e0:16:53: e7:5e:a9:45:ce:37:e8:19:4f:41:69:62:a9:49:36:2a:53:7a: a0:da:e7:6e:9c:ef:fc:c9:4e:7f:cf:26:24:b6:5f:8f:09:36: 02:42:2c:26:18:e4:86:6d:b8:de:d0:25:0b:e9:1c:b0:24:67: 94:0d:95:b8:88:d1:63:4d:ee:1a:13:ac:a6:f6:ac:81:37:ad: b5:4b:a1:5d:3e:4d:3b:55:dd:f5:04:53:f6:fe:bd:c9:4c:e0: 4f:96:0e:f5:9f:1b:0a:5a:ff:02:de:4a:05:63:c9:d7:e5:8a: 7b:b9:5b:60:78:41:b5:a0:99:a7:73:fe:ce:51:5b:12:44:e0: 57:be:53:c6:98:71:83:e5:b5:f4:95:1d:8c:60:33:30:9d:ab: db:13:41:aa:20:17:05:54:8a:96:88:7c:52:97:21:69:ee:af: 1b:84:87:65:c5:4a:1a:fc:c5:4c:12:c8:c3:87:ec:fa:d7:8f: 39:67:8b:fb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgIUSa2lR1zt6Upka2cBMbUyj+g16Z4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDgyOVoX DTI3MDUxMDE1NTMyOVowMzExMC8GA1UEAxMoNzE5RUVGOTA5OEI4MjJDMTU0QTRC MEEyQjZBQjIwQ0E4RDZENjE5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALo/TDMF+i7rEd7fkcBS5I8OSuMJDnoosZiGxjvpLSgpxjPAVPvaC6gOLW08 m8JknuP1IfJ3JgUwsScENvWFGTg+pkhOJj/97ipEj/PiGHCZubOmst2Qa0koijtR ewQGrc5M2O6bg/g19DAgfE1BQyEF+9NHh9bwePEt02E8y0My2H/5ugz0lR3y69Y4 zwqGEdpN2HV4niyeTHb0wKhP18xNthlnG4RoX4BpQElxnAX0nhQ/umbxhyO988Y9 IWWfs836KuHZ1IdQ7BPH3ud5ylaAWXA35uvpq/LQuHq9bZGbZEqq0b/rBFqKLBeb 2lJMTtY5qTFUZOuRJA7C/ZbECC8CAwEAAaOCAocwggKDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHGe75CYuCLBVKSworarIMqNbWGZMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSU5HRElORy8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSU5H RElORy8wLzcxOUVFRjkwOThCODIyQzE1NEE0QjBBMkI2QUIyMENBOEQ2RDYxOTku bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAhNgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwD5kzANBgkqhkiG9w0BAQsFAAOCAQEAYDb3H9ZhvsCS6LvVcFNcPy5N5c//zXCa qFwyNZTBcKN78WqV6qdmze90CVyRri8sPHkGtsryrlxnotFiTR71y0qZy6Zk4BZT 516pRc436BlPQWliqUk2KlN6oNrnbpzv/MlOf88mJLZfjwk2AkIsJhjkhm243tAl C+kcsCRnlA2VuIjRY03uGhOspvasgTettUuhXT5NO1Xd9QRT9v69yUzgT5YO9Z8b Clr/At5KBWPJ1+WKe7lbYHhBtaCZp3P+zlFbEkTgV75Txphxg+W19JUdjGAzMJ2r 2xNBqiAXBVSKloh8Upchae6vG4SHZcVKGvzFTBLIw4fs+tePOWeL+w== -----END CERTIFICATE-----Generated at Wed May 13 01:36:54 2026 by rpki-client