$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer File: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (raw, json) Hash identifier: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg= Subject key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3 Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 31AE1DA138B4AFF8C8D719586153CC35D9C73FD8 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Manifest: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft caRepository: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:04 +0000 Certificate not after: Mon 10 May 2027 15:49:04 +0000 Subordinate resources: IP: 187.79.224.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ae:1d:a1:38:b4:af:f8:c8:d7:19:58:61:53:cc:35:d9:c7:3f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: May 11 15:44:04 2026 GMT Not After : May 10 15:49:04 2027 GMT Subject: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:8f:74:73:7b:8e:7c:cd:31:a8:0d:0e:67: 19:29:eb:e9:19:f0:5a:05:a7:e5:58:4d:c3:3a:f8: dc:d3:bf:03:81:20:e9:d1:93:27:91:1d:71:af:c8: 78:40:a8:1f:bf:22:00:27:75:a6:07:5f:9b:a1:71: cb:c8:e4:05:a0:1f:bf:5b:62:11:93:63:c6:12:9a: 64:17:db:83:81:9a:8d:d7:72:53:1c:6a:46:b0:ee: 4c:97:85:0e:e5:5a:14:da:f7:ea:b9:af:e9:28:b4: 45:59:96:8f:60:2b:e4:fd:d0:a6:c7:72:6b:ec:3e: 4c:ec:ed:01:7c:ba:6a:75:e1:9a:c8:89:ac:eb:f3: 4e:b1:b8:3a:d7:c8:02:2b:c2:e4:8e:62:1d:e7:8c: 0e:f9:26:b0:79:8f:8c:11:ed:14:ff:35:95:bd:de: 51:f7:b4:6e:3f:0e:ca:27:fd:aa:5f:52:49:9b:e2: b9:8a:17:66:f5:2f:43:03:54:0d:3d:b5:6a:98:29: 52:8e:71:99:6a:b1:15:ee:c9:9b:ef:c6:03:ef:d4: c4:5a:ea:25:8f:ab:92:62:63:cc:58:65:62:b3:21: 4d:8d:49:be:e4:34:ce:39:4b:6a:3d:88:92:82:1f: 09:4c:dd:71:92:f2:ab:68:30:b9:82:f8:89:e1:11: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3 X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.224.0/20 Signature Algorithm: sha256WithRSAEncryption a6:ef:95:43:b9:c5:ae:a4:4d:79:1e:98:d6:ab:a0:f0:da:4f: d1:59:44:a2:c2:be:84:69:8f:23:9c:47:57:57:b9:e4:67:fa: 5c:9a:e0:ba:d9:3f:34:0d:81:37:ba:7c:16:a0:06:7f:94:62: d8:04:b4:14:80:5e:51:5f:44:56:0b:df:6f:13:b9:bc:c0:59: 07:0b:97:bf:ba:66:80:97:35:b9:bc:17:04:35:d6:11:73:cc: f4:2e:02:60:9c:ff:12:8b:05:90:d6:6c:00:4d:9d:f9:f1:50: 21:bd:e1:d8:91:87:59:12:05:a9:a7:33:f2:ab:55:92:00:cd: 26:7f:f3:32:a8:85:82:24:0c:72:c5:e5:ec:83:bc:e5:cc:f9: ec:65:3a:22:a2:03:0c:bd:1d:ca:ae:e7:76:5d:f5:7a:e5:5e: 1f:b4:93:83:ae:7d:21:22:68:b2:96:41:12:d4:d7:82:9d:c3: f4:6c:3b:77:01:39:ed:a3:32:ed:d0:c7:81:ff:e0:d1:c8:62: a6:6c:d2:92:09:f0:75:1b:71:39:c1:61:92:c0:77:fa:75:73: 83:4c:f9:a5:c6:9d:a4:80:06:f8:a9:4e:3f:cb:7e:32:43:ec: 7e:8f:4e:f9:0a:54:9a:e8:a2:3c:08:bb:74:8c:88:4d:14:25: 11:d6:da:df -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMa4doTi0r/jI1xlYYVPMNdnHP9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDUxMTE1NDQwNFoX DTI3MDUxMDE1NDkwNFowMzExMC8GA1UEAxMoOTVCMUE2MjQ3OUIzNkMxNDE0RkYx N0NFNzU5RjQ1RTJFN0U0MjFBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMO0j3Rze458zTGoDQ5nGSnr6RnwWgWn5VhNwzr43NO/A4Eg6dGTJ5Edca/I eECoH78iACd1pgdfm6Fxy8jkBaAfv1tiEZNjxhKaZBfbg4GajddyUxxqRrDuTJeF DuVaFNr36rmv6Si0RVmWj2Ar5P3Qpsdya+w+TOztAXy6anXhmsiJrOvzTrG4OtfI AivC5I5iHeeMDvkmsHmPjBHtFP81lb3eUfe0bj8Oyif9ql9SSZviuYoXZvUvQwNU DT21apgpUo5xmWqxFe7Jm+/GA+/UxFrqJY+rkmJjzFhlYrMhTY1JvuQ0zjlLaj2I koIfCUzdcZLyq2gwuYL4ieERWCkCAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJWxpiR5s2wUFP8XznWfReLn5CGjMB8GA1UdIwQYMBaAFHFS WXLjwRU95TBUeY9Rpb1Vx1AZMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMi83MTUy NTk3MkUzQzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5LmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZGMi9jVkpaY3VQ QkZUM2xNRlI1ajFHbHZWWEhVQmsuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSFVBTi1DSEFO LzEvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NI VUFOLUNIQU4vMS85NUIxQTYyNDc5QjM2QzE0MTRGRjE3Q0U3NTlGNDVFMkU3RTQy MUEzLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEu0/gMA0GCSqGSIb3DQEBCwUAA4IBAQCm 75VDucWupE15HpjWq6Dw2k/RWUSiwr6EaY8jnEdXV7nkZ/pcmuC62T80DYE3unwW oAZ/lGLYBLQUgF5RX0RWC99vE7m8wFkHC5e/umaAlzW5vBcENdYRc8z0LgJgnP8S iwWQ1mwATZ358VAhveHYkYdZEgWppzPyq1WSAM0mf/MyqIWCJAxyxeXsg7zlzPns ZToiogMMvR3Krud2XfV65V4ftJODrn0hImiylkES1NeCncP0bDt3ATntozLt0MeB /+DRyGKmbNKSCfB1G3E5wWGSwHf6dXODTPmlxp2kgAb4qU4/y34yQ+x+j075ClSa 6KI8CLt0jIhNFCUR1trf -----END CERTIFICATE-----Generated at Wed May 13 04:55:06 2026 by rpki-client