$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.cer File: B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.cer (raw, json) Hash identifier: OY6zlcuFsOI+15F8A3KMNZ7+HxQ6QjF/R9BrZvFQjmk= Subject key identifier: B4:C4:ED:64:78:D0:18:1F:9C:1C:BF:F0:AD:08:2E:88:78:FC:7B:B4 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 0DD983D11A2FB6B10C459FD0812E7C17C2DF0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/LINGCAI/0/B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.mft caRepository: rsync://rpkica.twnic.tw/rpki/LINGCAI/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:47:59 +0000 Certificate not after: Mon 10 May 2027 15:52:59 +0000 Subordinate resources: IP: 103.20.98.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d9:83:d1:1a:2f:b6:b1:0c:45:9f:d0:81:2e:7c:17:c2:df:02:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:47:59 2026 GMT Not After : May 10 15:52:59 2027 GMT Subject: CN=B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:33:f4:79:f2:06:1e:bd:4e:51:39:d6:9f: 9a:62:bd:a0:d3:a1:cb:a2:90:06:d0:9a:78:a1:eb: 6b:38:d2:ba:fa:f7:04:f0:3a:fa:0a:d1:ee:41:c6: db:87:6d:1b:f1:e2:ac:50:e1:43:a1:4a:a3:8b:d7: 29:4e:37:e5:10:c8:ec:31:94:f5:a1:53:6c:e2:b5: 1e:42:b4:48:99:03:e4:66:7c:59:bd:3f:80:b9:d5: 7b:43:cd:58:d0:7a:4f:16:4f:3c:08:1e:60:4a:38: 6e:bd:db:4c:b1:86:50:e6:7f:48:2a:a9:2b:9d:3e: 18:21:17:24:6d:c8:b4:7f:1e:c2:26:71:39:15:d2: 19:93:ba:8c:85:de:61:9e:ed:b3:c5:a5:6a:fb:d8: ab:9d:c0:e3:e6:4e:06:b4:e2:87:29:fa:7c:9c:c1: 71:80:c6:7f:bf:48:d1:e9:42:02:a9:65:61:e2:63: c4:4d:63:4a:48:bf:52:02:14:66:e4:44:5c:3e:02: 1a:fa:de:de:2f:df:f6:ab:47:e1:1b:73:51:73:98: af:51:35:81:f3:6e:9d:d7:85:44:01:d8:7d:4d:cc: ec:50:f3:4c:9a:c1:0c:2a:31:0f:89:de:dd:41:b0: 03:18:0a:ab:f2:2e:71:43:59:0f:0e:c9:ed:47:ad: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:C4:ED:64:78:D0:18:1F:9C:1C:BF:F0:AD:08:2E:88:78:FC:7B:B4 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LINGCAI/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LINGCAI/0/B4C4ED6478D0181F9C1CBFF0AD082E8878FC7BB4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.98.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:c1:e4:ed:e5:bd:9f:1a:37:8b:7e:90:70:6a:ba:97:4c:ce: e1:dc:ef:16:1a:17:e1:09:a0:1e:ab:05:94:a5:16:7e:ce:04: d6:2e:67:0a:90:ac:14:3e:7a:f4:10:51:27:ca:89:c1:69:dd: 14:56:4d:cf:7a:b4:65:12:ab:4e:e2:11:1a:c8:2c:ab:a0:c1: 4c:a1:7e:c6:f2:58:bc:68:8f:43:d6:1a:a2:7f:e2:50:b0:3a: b9:14:07:32:df:70:de:b2:01:cc:4a:29:4d:97:8b:a8:90:34: 18:03:79:e8:3f:10:84:22:5e:5f:68:5e:82:ab:53:1b:3d:fb: 0a:d0:2c:6a:ab:6d:4f:e2:3f:3d:0b:74:50:57:73:33:ee:43: 0f:68:5a:9c:4f:ab:5f:d7:16:09:9d:4c:46:4c:89:b5:d8:0b: 3c:44:66:e8:b0:57:31:5c:06:55:5c:c3:c4:7a:4b:3a:a9:96: 1d:3d:f9:dd:97:11:37:dc:53:fc:0d:3b:46:32:f5:0d:23:79: 51:f0:91:bb:f7:51:e6:2d:9c:31:0d:0b:16:72:4e:0a:d9:82: 31:08:3f:a3:b0:2a:f1:5e:07:e2:f2:f9:6e:cc:2c:c6:f5:a9: 01:be:92:0d:03:bb:9d:84:fa:47:a5:2e:7b:0f:63:c7:d4:b2: 42:ad:76:c2 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUDdmD0RovtrEMRZ/QgS58F8LfAmkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDc1OVoX DTI3MDUxMDE1NTI1OVowMzExMC8GA1UEAxMoQjRDNEVENjQ3OEQwMTgxRjlDMUNC RkYwQUQwODJFODg3OEZDN0JCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMI1M/R58gYevU5ROdafmmK9oNOhy6KQBtCaeKHrazjSuvr3BPA6+grR7kHG 24dtG/HirFDhQ6FKo4vXKU435RDI7DGU9aFTbOK1HkK0SJkD5GZ8Wb0/gLnVe0PN WNB6TxZPPAgeYEo4br3bTLGGUOZ/SCqpK50+GCEXJG3ItH8ewiZxORXSGZO6jIXe YZ7ts8WlavvYq53A4+ZOBrTihyn6fJzBcYDGf79I0elCAqllYeJjxE1jSki/UgIU ZuREXD4CGvre3i/f9qtH4RtzUXOYr1E1gfNundeFRAHYfU3M7FDzTJrBDCoxD4ne 3UGwAxgKq/IucUNZDw7J7UetH2ECAwEAAaOCAmgwggJkMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLTE7WR40BgfnBy/8K0ILoh4/Hu0MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSU5HQ0FJLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0xJTkdD QUkvMC9CNEM0RUQ2NDc4RDAxODFGOUMxQ0JGRjBBRDA4MkU4ODc4RkM3QkI0Lm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQBZxRiMA0GCSqGSIb3DQEBCwUAA4IBAQA/weTt5b2f GjeLfpBwarqXTM7h3O8WGhfhCaAeqwWUpRZ+zgTWLmcKkKwUPnr0EFEnyonBad0U Vk3PerRlEqtO4hEayCyroMFMoX7G8li8aI9D1hqif+JQsDq5FAcy33DesgHMSilN l4uokDQYA3noPxCEIl5faF6Cq1MbPfsK0Cxqq21P4j89C3RQV3Mz7kMPaFqcT6tf 1xYJnUxGTIm12As8RGbosFcxXAZVXMPEeks6qZYdPfndlxE33FP8DTtGMvUNI3lR 8JG791HmLZwxDQsWck4K2YIxCD+jsCrxXgfi8vluzCzG9akBvpINA7udhPpHpS57 D2PH1LJCrXbC -----END CERTIFICATE-----Generated at Tue May 12 22:33:16 2026 by rpki-client