$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.cer File: 7411EB8A89B091C3CB5C6D282FCA1E46D214035D.cer (raw, json) Hash identifier: aD4Y47xTAGqA4rfRkctUsHfcmO0BStPhJPr7glEjWjg= Subject key identifier: 74:11:EB:8A:89:B0:91:C3:CB:5C:6D:28:2F:CA:1E:46:D2:14:03:5D Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 47007D2DF639E7C2E77C5C92306F0848DB8F0E88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/YUJIN/0/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.mft caRepository: rsync://rpkica.twnic.tw/rpki/YUJIN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 16:01:09 +0000 Certificate not after: Mon 10 May 2027 16:06:09 +0000 Subordinate resources: IP: 103.24.54.0/23 IP: 2400:ba60::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:00:7d:2d:f6:39:e7:c2:e7:7c:5c:92:30:6f:08:48:db:8f:0e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 16:01:09 2026 GMT Not After : May 10 16:06:09 2027 GMT Subject: CN=7411EB8A89B091C3CB5C6D282FCA1E46D214035D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:a0:db:e0:9a:d0:17:c8:3a:2a:0e:f7:74: e9:b5:62:65:94:f1:74:67:f7:b7:cc:f9:4a:4b:9e: 41:78:c9:71:37:7a:b9:62:85:cb:e9:a1:f1:a1:f5: 85:db:ca:14:1c:70:cc:70:25:c8:f0:a7:8d:16:5e: 98:fb:21:45:bd:67:14:0b:fd:22:ac:29:9d:f2:f1: 8d:d4:64:19:98:7b:7c:fd:5c:61:b5:07:60:30:22: 0d:43:97:92:fd:39:4b:1a:e9:3a:9f:d3:53:73:ac: a4:6c:8c:82:88:dc:2e:87:2f:e8:1e:74:03:85:83: 49:56:6b:e9:07:91:97:7b:32:8d:f3:ff:62:71:f6: 5c:d4:ef:7f:5e:73:9f:fb:e1:a7:91:d2:1b:9e:5f: 1c:4f:b0:65:44:1a:03:b0:f3:1f:a4:7e:25:d1:f8: 42:94:a1:8a:f3:4a:f7:0d:75:8a:fb:38:bb:ed:ab: 9f:54:f4:45:d7:5c:65:2d:87:9e:56:38:7a:f3:0f: b9:ab:30:ed:90:15:8d:d5:c6:86:fd:54:d4:39:77: 09:a0:f1:da:b3:f7:dd:d4:5e:37:8b:d9:79:5f:2c: 53:d8:de:53:d0:05:e9:3c:e3:b9:3d:83:94:4f:83: 89:ab:15:0c:c2:ad:60:8e:92:54:cf:67:84:53:e0: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:11:EB:8A:89:B0:91:C3:CB:5C:6D:28:2F:CA:1E:46:D2:14:03:5D X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/YUJIN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/YUJIN/0/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.54.0/23 IPv6: 2400:ba60::/32 Signature Algorithm: sha256WithRSAEncryption b7:b2:9f:38:8f:c9:8d:1e:15:92:9c:04:45:6e:2e:01:9d:f8: 35:6c:cb:56:57:86:1e:52:c0:f7:8c:9b:cd:13:de:6b:3c:d4: d9:18:b1:9e:13:b0:94:ed:05:37:40:31:33:84:f0:ba:e0:4c: 56:de:df:14:f3:0a:81:b0:62:55:dc:95:9f:7e:88:55:e9:91: c9:18:e2:58:bc:ad:c8:d9:b1:18:a9:84:fc:53:12:74:d9:20: 2b:5e:9d:78:f5:2f:90:27:77:59:3d:1a:eb:ee:87:9c:dd:7a: 57:df:46:d8:99:46:bc:7e:92:ec:74:fc:93:c4:75:53:99:83: a7:a7:30:f6:ca:1d:73:84:2a:d0:20:01:cf:db:07:86:a5:1b: 0c:13:e5:65:0b:1b:7d:13:f8:d8:f3:26:2b:86:09:0a:a4:9b: 6d:63:9d:ac:60:19:6c:96:a3:0f:1d:aa:2f:15:97:a0:63:49: d8:ab:2f:a7:21:f6:66:be:d5:8f:e0:5c:fd:92:c3:5a:dc:f0: 9a:42:93:3e:11:fe:0a:15:ed:13:4b:5b:3e:ee:82:f6:81:6f: 4a:60:f9:73:eb:1c:df:48:be:f5:9b:71:b7:4d:66:08:92:6d: 25:f2:21:22:2d:c7:74:01:7c:cc:ef:bb:30:36:e0:eb:94:0e: 2b:85:0b:1c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIURwB9LfY558LnfFySMG8ISNuPDogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDEwOVoX DTI3MDUxMDE2MDYwOVowMzExMC8GA1UEAxMoNzQxMUVCOEE4OUIwOTFDM0NCNUM2 RDI4MkZDQTFFNDZEMjE0MDM1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMnoNvgmtAXyDoqDvd06bViZZTxdGf3t8z5SkueQXjJcTd6uWKFy+mh8aH1 hdvKFBxwzHAlyPCnjRZemPshRb1nFAv9IqwpnfLxjdRkGZh7fP1cYbUHYDAiDUOX kv05SxrpOp/TU3OspGyMgojcLocv6B50A4WDSVZr6QeRl3syjfP/YnH2XNTvf15z n/vhp5HSG55fHE+wZUQaA7DzH6R+JdH4QpShivNK9w11ivs4u+2rn1T0RddcZS2H nlY4evMPuasw7ZAVjdXGhv1U1Dl3CaDx2rP33dReN4vZeV8sU9jeU9AF6TzjuT2D lE+DiasVDMKtYI6SVM9nhFPgRzkCAwEAAaOCAnMwggJvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHQR64qJsJHDy1xtKC/KHkbSFANdMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ZVUpJTi8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ZVUpJTi8w Lzc0MTFFQjhBODlCMDkxQzNDQjVDNkQyODJGQ0ExRTQ2RDIxNDAzNUQubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnGDYwDQQCAAIwBwMFACQAumAwDQYJKoZIhvcNAQELBQAD ggEBALeynziPyY0eFZKcBEVuLgGd+DVsy1ZXhh5SwPeMm80T3ms81NkYsZ4TsJTt BTdAMTOE8LrgTFbe3xTzCoGwYlXclZ9+iFXpkckY4li8rcjZsRiphPxTEnTZICte nXj1L5And1k9Guvuh5zdelffRtiZRrx+kux0/JPEdVOZg6enMPbKHXOEKtAgAc/b B4alGwwT5WULG30T+NjzJiuGCQqkm21jnaxgGWyWow8dqi8Vl6BjSdirL6ch9ma+ 1Y/gXP2Sw1rc8JpCkz4R/goV7RNLWz7ugvaBb0pg+XPrHN9IvvWbcbdNZgiSbSXy ISItx3QBfMzvuzA24OuUDiuFCxw= -----END CERTIFICATE-----Generated at Tue May 12 22:32:13 2026 by rpki-client