$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer File: E41CA6D6B740DAA6C89671809353E36E2765E6F8.cer (raw, json) Hash identifier: x4fIh4sl02WQx0IqAyEUEkicKqT47zXX9OartrIcOPU= Subject key identifier: E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 3165D3DB0A6D8FA73AE075B30EB34C5077CC8566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft caRepository: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:08 +0000 Certificate not after: Mon 10 May 2027 15:49:08 +0000 Subordinate resources: AS: 152615 IP: 2401:caa0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:65:d3:db:0a:6d:8f:a7:3a:e0:75:b3:0e:b3:4c:50:77:cc:85:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:44:08 2026 GMT Not After : May 10 15:49:08 2027 GMT Subject: CN=E41CA6D6B740DAA6C89671809353E36E2765E6F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:8b:11:57:a9:0e:43:41:cd:e2:a3:6a:2b: cb:fe:cb:ce:0d:97:39:4d:df:a0:32:83:a2:ff:54: e2:12:9f:f9:00:63:ce:1b:f0:2f:1e:2c:90:3e:a2: c9:04:a7:28:97:04:9e:1c:7e:5d:61:5c:75:a2:4b: 7c:26:b9:02:7b:8e:cb:a3:24:3e:f2:18:52:79:57: c9:50:64:60:76:03:62:9e:c4:3f:f8:f7:d6:71:0a: b2:b1:dd:54:f3:79:9d:90:49:b8:f6:f8:f2:e2:c5: 45:c7:f9:0d:c4:ca:26:38:51:cf:0a:f5:36:fc:49: f0:56:26:e1:46:28:ec:49:7a:8e:37:1e:2b:c4:27: f8:d6:8e:1a:a4:74:2d:dc:3c:12:bd:66:92:2d:23: 14:0d:1c:1e:88:8a:85:06:06:a3:e8:c7:37:bc:e5: b3:65:a9:b3:78:0f:bf:ae:50:f2:e3:6d:bd:c7:51: df:a1:b6:4b:54:19:ca:48:3a:14:ee:c8:94:02:34: 22:26:11:ba:af:a0:d4:1a:f2:b0:20:e7:71:59:fa: 23:89:e2:a2:9a:0e:eb:47:e3:b6:d0:6a:88:36:1d: ac:ba:f0:2e:5e:43:87:62:40:d2:b3:b6:9d:3a:33: f7:dc:13:6a:9f:0f:8b:32:f7:98:c2:2a:27:e4:f2: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:1C:A6:D6:B7:40:DA:A6:C8:96:71:80:93:53:E3:6E:27:65:E6:F8 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/0/E41CA6D6B740DAA6C89671809353E36E2765E6F8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:caa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 152615 Signature Algorithm: sha256WithRSAEncryption 5b:22:cd:cf:59:62:c7:a1:39:ac:64:85:61:f7:7b:d6:5c:11: 26:d1:7d:50:4b:ff:67:bb:1d:45:b8:bf:65:91:5d:1a:df:95: 08:5f:7b:74:15:62:f2:58:a6:71:8f:9e:66:05:a2:36:3b:12: 73:43:19:f5:b7:ac:87:03:25:7a:ea:a0:d4:b1:b8:72:b7:75: 24:6e:51:9b:1c:e4:4c:c6:25:c0:db:05:ac:85:c0:16:f3:d8: d5:5b:55:3f:3c:4f:82:0e:48:fe:b7:61:76:cf:01:8b:a1:70: 12:90:7f:c1:ff:49:db:1e:79:8a:b3:6e:a8:e3:82:0b:a3:d8: 0e:dd:af:e1:97:01:48:13:c7:ba:b1:cc:17:08:ee:ea:f2:1d: 9c:cd:a3:1b:c3:5e:b8:f7:90:1a:8f:30:71:39:e8:68:52:40: 44:6c:90:9d:c4:3b:ab:1d:0c:48:69:8e:de:08:1f:42:77:4d: 83:cb:1b:d3:a8:7a:98:1f:bd:91:99:2e:26:a0:75:8f:ce:a0: ac:f2:f9:ed:0d:ba:12:5a:57:0e:ae:9f:a9:0e:4d:7b:37:2d: f3:16:a1:d1:aa:9e:98:30:fb:8c:9b:c7:f6:a0:94:d2:78:0d: 76:1c:c8:ce:80:13:c7:ce:fd:ab:c1:96:6b:d3:e5:e3:ce:b1: 0a:a0:ab:d4 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIUMWXT2wptj6c64HWzDrNMUHfMhWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQwOFoX DTI3MDUxMDE1NDkwOFowMzExMC8GA1UEAxMoRTQxQ0E2RDZCNzQwREFBNkM4OTY3 MTgwOTM1M0UzNkUyNzY1RTZGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWoixFXqQ5DQc3io2ory/7Lzg2XOU3foDKDov9U4hKf+QBjzhvwLx4skD6i yQSnKJcEnhx+XWFcdaJLfCa5AnuOy6MkPvIYUnlXyVBkYHYDYp7EP/j31nEKsrHd VPN5nZBJuPb48uLFRcf5DcTKJjhRzwr1NvxJ8FYm4UYo7El6jjceK8Qn+NaOGqR0 Ldw8Er1mki0jFA0cHoiKhQYGo+jHN7zls2Wps3gPv65Q8uNtvcdR36G2S1QZykg6 FO7IlAI0IiYRuq+g1BrysCDncVn6I4niopoO60fjttBqiDYdrLrwLl5Dh2JA0rO2 nToz99wTap8PizL3mMIqJ+Tyn3kCAwEAAaOCAoswggKHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOQcpta3QNqmyJZxgJNT424nZeb4MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSFVNTVlURUNI LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NI VU1NWVRFQ0gvMC9FNDFDQTZENkI3NDBEQUE2Qzg5NjcxODA5MzUzRTM2RTI3NjVF NkY4Lm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsG AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHKoDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMCVCcwDQYJKoZIhvcNAQELBQADggEBAFsizc9ZYsehOaxkhWH3e9ZcESbR fVBL/2e7HUW4v2WRXRrflQhfe3QVYvJYpnGPnmYFojY7EnNDGfW3rIcDJXrqoNSx uHK3dSRuUZsc5EzGJcDbBayFwBbz2NVbVT88T4IOSP63YXbPAYuhcBKQf8H/Sdse eYqzbqjjgguj2A7dr+GXAUgTx7qxzBcI7uryHZzNoxvDXrj3kBqPMHE56GhSQERs kJ3EO6sdDEhpjt4IH0J3TYPLG9OoepgfvZGZLiagdY/OoKzy+e0NuhJaVw6un6kO TXs3LfMWodGqnpgw+4ybx/aglNJ4DXYcyM6AE8fO/avBlmvT5ePOsQqgq9Q= -----END CERTIFICATE-----Generated at Wed May 13 04:09:55 2026 by rpki-client