$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer File: E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer (raw, json) Hash identifier: kPGUGvRj69YEb3i0dQEsdf0tfgHgPyHABll4aeTwXWg= Subject key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 24A21024F0100BDFA6B989EB949E1ACDBAC9DD4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft caRepository: rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:45 +0000 Certificate not after: Mon 10 May 2027 16:02:45 +0000 Subordinate resources: IP: 103.51.88.0/23 IP: 103.196.172.0/23 IP: 2400:c9a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a2:10:24:f0:10:0b:df:a6:b9:89:eb:94:9e:1a:cd:ba:c9:dd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:45 2026 GMT Not After : May 10 16:02:45 2027 GMT Subject: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:3d:57:c9:9a:36:cb:09:70:ac:3c:cb:41: 21:c2:c0:0f:ec:6d:80:00:fa:d1:b8:ec:d6:50:75: 5e:09:ec:b8:f4:21:2a:de:b0:c9:d8:b9:0a:14:65: c2:54:3b:61:a9:de:bc:e9:f3:d9:74:8f:69:e9:f7: 47:3a:83:34:68:ce:5c:73:a0:19:00:47:ad:3f:35: 51:9e:c5:59:1c:14:56:1e:ff:9f:20:70:f1:36:fe: b0:61:08:ec:82:f1:5f:56:60:10:88:8b:97:3f:dd: 08:aa:0b:80:84:09:8a:12:29:20:30:6d:d3:89:4a: 19:b1:bb:99:69:0b:a5:73:03:99:53:a4:cf:51:f5: 5f:62:ee:93:7b:07:91:6b:92:54:f8:2d:fe:ed:5e: 5f:9c:71:fc:16:e0:47:34:11:39:b4:8d:4f:27:0b: 27:25:c3:6a:d7:0b:f6:99:f5:f3:c8:91:3d:49:a2: 73:9a:42:b0:90:aa:cb:85:71:d1:2c:48:2a:73:a2: 6e:d6:91:2e:25:ad:f1:83:45:a1:bd:64:42:75:c4: 1f:b9:aa:41:a4:9c:f6:2a:a1:04:fb:8a:55:70:ae: 7e:2e:5a:47:e4:e2:ba:b4:a7:49:de:6d:60:a1:d9: 2d:91:c1:df:06:df:47:43:90:35:7c:34:c4:d1:28: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.51.88.0/23 103.196.172.0/23 IPv6: 2400:c9a0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:f0:89:b1:0f:a3:ac:42:f4:91:7c:e2:3f:f2:16:87:31:6f: 6a:a7:a2:df:77:99:83:99:92:f0:f9:f0:88:8c:95:6b:5a:6a: e9:c9:4f:9a:99:b9:cc:4b:5b:2a:f8:e9:39:ec:a3:05:1b:0f: 21:9c:65:a7:37:78:40:ec:e3:98:68:de:02:e7:c4:3d:3c:ed: 47:79:f0:58:06:9f:bd:84:a4:1a:73:ad:46:50:0c:cb:90:df: 7a:ab:3b:30:c1:6e:57:fc:94:c4:b9:3b:cb:e8:d4:46:c7:87: a7:d4:94:3e:3f:4d:ba:63:9a:dd:c1:9b:ce:05:ca:b0:d2:91: 36:e4:89:45:71:fa:46:95:9c:e1:20:b8:0b:7e:1a:4c:9f:93: 4c:b2:6e:b9:fb:37:ea:79:ff:02:88:1f:7b:9a:4d:d6:f4:67: 6f:f8:02:16:f6:49:6b:ad:d6:90:d0:d4:b5:b6:3c:ac:02:b7: 34:4f:ef:02:1b:e3:28:23:b8:21:cf:e3:14:30:d2:6d:78:b2: b4:d3:1e:31:1f:d2:34:d3:3c:e1:a7:ca:2f:9b:49:c1:89:e7: 2a:b8:a0:db:b7:5a:fb:e6:c2:a8:d3:30:e3:17:f0:05:e0:00: 6a:fb:e3:d1:72:e4:15:85:fa:1f:ae:5e:25:3b:5d:e4:3e:f0: d3:e6:94:ab -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUJKIQJPAQC9+muYnrlJ4azbrJ3U0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTc0NVoX DTI3MDUxMDE2MDI0NVowMzExMC8GA1UEAxMoRTMzNjZFN0Y3QjI1NzVFMTFBMDlC QTc4OTg1QTlBRUZCQzVGRkVDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9kPVfJmjbLCXCsPMtBIcLAD+xtgAD60bjs1lB1XgnsuPQhKt6wydi5ChRl wlQ7YanevOnz2XSPaen3RzqDNGjOXHOgGQBHrT81UZ7FWRwUVh7/nyBw8Tb+sGEI 7ILxX1ZgEIiLlz/dCKoLgIQJihIpIDBt04lKGbG7mWkLpXMDmVOkz1H1X2Luk3sH kWuSVPgt/u1eX5xx/BbgRzQRObSNTycLJyXDatcL9pn188iRPUmic5pCsJCqy4Vx 0SxIKnOibtaRLiWt8YNFob1kQnXEH7mqQaSc9iqhBPuKVXCufi5aR+TiurSnSd5t YKHZLZHB3wbfR0OQNXw0xNEowKkCAwEAAaOCAoMwggJ/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOM2bn97JXXhGgm6eJhamu+8X/7MMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9URUNIRFJJVkVO LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RF Q0hEUklWRU4vMC9FMzM2NkU3RjdCMjU3NUUxMUEwOUJBNzg5ODVBOUFFRkJDNUZG RUNDLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsG AQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZzNYAwQBZ8SsMA0EAgACMAcDBQAkAMmg MA0GCSqGSIb3DQEBCwUAA4IBAQB98ImxD6OsQvSRfOI/8haHMW9qp6Lfd5mDmZLw +fCIjJVrWmrpyU+ambnMS1sq+Ok57KMFGw8hnGWnN3hA7OOYaN4C58Q9PO1HefBY Bp+9hKQac61GUAzLkN96qzswwW5X/JTEuTvL6NRGx4en1JQ+P026Y5rdwZvOBcqw 0pE25IlFcfpGlZzhILgLfhpMn5NMsm65+zfqef8CiB97mk3W9Gdv+AIW9klrrdaQ 0NS1tjysArc0T+8CG+MoI7ghz+MUMNJteLK00x4xH9I00zzhp8ovm0nBiecquKDb t1r75sKo0zDjF/AF4ABq++PRcuQVhfofrl4lO13kPvDT5pSr -----END CERTIFICATE-----Generated at Tue May 12 21:53:29 2026 by rpki-client