$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer File: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer (raw, json) Hash identifier: RNCUDqiS1vhidZw0pvbHIY8Z24Iz8S+irMAuBc3S4ow= Subject key identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 496D4B700A5AD7C7DE763FDAE8C79BBF136647BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft caRepository: rsync://rpkica.twnic.tw/rpki/APPIER/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:42:51 +0000 Certificate not after: Mon 10 May 2027 15:47:51 +0000 Subordinate resources: IP: 103.122.16.0/22 IP: 2403:8640::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6d:4b:70:0a:5a:d7:c7:de:76:3f:da:e8:c7:9b:bf:13:66:47:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:42:51 2026 GMT Not After : May 10 15:47:51 2027 GMT Subject: CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:be:f5:b0:c0:d3:a3:6c:af:d0:78:50:88: c2:8f:d6:a3:50:12:57:48:a0:97:1c:03:24:33:96: 30:95:08:b5:c0:17:6b:51:a3:3d:69:34:e6:35:8a: fd:d9:8f:8e:45:51:55:7c:aa:c6:1c:84:e6:7c:16: 8d:be:10:29:ee:9d:79:7c:50:04:dd:80:5b:c4:26: da:38:ff:d1:13:4c:26:db:15:74:49:dc:12:17:47: dc:d3:95:57:c9:0d:94:e0:49:07:c4:48:e0:87:c2: fd:25:4b:b7:e0:c0:4b:46:bc:a8:b0:1d:06:00:3d: 7f:76:76:37:21:c6:ca:7d:81:42:95:c0:83:60:5e: aa:f3:5a:83:4e:12:ca:e5:4f:25:0f:ac:aa:0f:f5: 08:b1:8d:f0:a0:9b:8d:71:86:5f:b3:1f:20:b4:95: 48:07:a9:d8:4c:e3:a7:4b:c1:c9:34:29:f3:7c:69: 14:38:90:eb:c0:90:8c:39:91:a8:bb:83:46:48:1e: 92:00:14:b0:95:9f:9e:02:30:35:0b:9b:70:94:f0: fe:0f:75:ff:57:dc:d7:4a:64:27:6d:26:aa:59:0f: 68:47:16:7f:1d:a4:fa:6f:20:c3:fd:29:5d:8c:36: 02:b4:64:c5:32:86:8b:00:87:0c:11:ed:21:eb:52: dd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.16.0/22 IPv6: 2403:8640::/32 Signature Algorithm: sha256WithRSAEncryption a9:ca:76:80:cd:d8:82:b4:1b:52:74:2f:e9:0f:83:e9:19:98: f1:74:20:a9:d3:7e:52:c0:4c:67:c5:de:81:21:b1:9c:c7:61: 5a:10:9a:05:11:4b:f6:20:00:47:bb:c4:99:40:37:89:31:a8: 04:17:73:f8:f6:db:a0:d5:08:03:dc:d1:20:5a:c4:e1:38:2d: 62:24:9f:06:36:d8:40:45:d1:7b:be:82:4e:8d:36:86:9d:57: 00:74:87:ee:4f:7f:8f:7c:11:51:46:a3:aa:38:74:f8:99:cf: 17:f5:29:ff:95:ae:40:b3:11:35:01:c4:d4:e8:b7:e5:fb:af: 44:7d:a9:ed:ee:4e:99:99:78:ca:43:96:f7:a6:5a:f0:dc:70: 19:c3:10:7f:c9:5b:94:e3:3d:8a:b1:3f:f1:4b:d9:d0:df:f4: 4f:53:de:02:f2:3f:e7:28:c2:cb:bf:9e:e7:5b:e8:fb:26:d0: 66:de:ab:52:d9:73:e4:40:75:89:0c:1f:cb:bc:f2:e4:0d:49: 90:d2:ff:e2:4b:a8:ed:31:5c:49:7c:0b:76:97:94:92:0e:d5: c0:dd:be:08:cc:24:4e:34:46:d3:01:d6:59:b8:59:fe:33:5f: 33:47:43:d7:3a:00:23:a4:e7:87:ec:93:bc:9e:e6:43:c5:c8: e7:c0:1c:43 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUSW1LcApa18fedj/a6MebvxNmR7owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDI1MVoX DTI3MDUxMDE1NDc1MVowMzExMC8GA1UEAxMoODgxQkVFMUY5M0Q1OEJBRURGQUM5 OTRCNjc3QUFBRDAzQ0M1OUM3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALm+vvWwwNOjbK/QeFCIwo/Wo1ASV0iglxwDJDOWMJUItcAXa1GjPWk05jWK /dmPjkVRVXyqxhyE5nwWjb4QKe6deXxQBN2AW8Qm2jj/0RNMJtsVdEncEhdH3NOV V8kNlOBJB8RI4IfC/SVLt+DAS0a8qLAdBgA9f3Z2NyHGyn2BQpXAg2BeqvNag04S yuVPJQ+sqg/1CLGN8KCbjXGGX7MfILSVSAep2Ezjp0vByTQp83xpFDiQ68CQjDmR qLuDRkgekgAUsJWfngIwNQubcJTw/g91/1fc10pkJ20mqlkPaEcWfx2k+m8gw/0p XYw2ArRkxTKGiwCHDBHtIetS3bsCAwEAAaOCAnUwggJxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIgb7h+T1Yuu36yZS2d6qtA8xZx4MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFBJRVIvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBQSUVS LzAvODgxQkVFMUY5M0Q1OEJBRURGQUM5OTRCNjc3QUFBRDAzQ0M1OUM3OC5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAmd6EDANBAIAAjAHAwUAJAOGQDANBgkqhkiG9w0BAQsF AAOCAQEAqcp2gM3YgrQbUnQv6Q+D6RmY8XQgqdN+UsBMZ8XegSGxnMdhWhCaBRFL 9iAAR7vEmUA3iTGoBBdz+PbboNUIA9zRIFrE4TgtYiSfBjbYQEXRe76CTo02hp1X AHSH7k9/j3wRUUajqjh0+JnPF/Up/5WuQLMRNQHE1Oi35fuvRH2p7e5OmZl4ykOW 96Za8NxwGcMQf8lblOM9irE/8UvZ0N/0T1PeAvI/5yjCy7+e51vo+ybQZt6rUtlz 5EB1iQwfy7zy5A1JkNL/4kuo7TFcSXwLdpeUkg7VwN2+CMwkTjRG0wHWWbhZ/jNf M0dD1zoAI6Tnh+yTvJ7mQ8XI58AcQw== -----END CERTIFICATE-----Generated at Tue May 12 21:53:53 2026 by rpki-client