$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer File: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (raw, json) Hash identifier: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY= Subject key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 4A6CCAB03BDA2275A1D05128DEB3BF8B0BEC4A27 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Manifest: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft caRepository: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:56:23 +0000 Certificate not after: Mon 10 May 2027 16:01:23 +0000 Subordinate resources: IP: 187.79.192.0/19 IP: 187.79.248.0/21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6c:ca:b0:3b:da:22:75:a1:d0:51:28:de:b3:bf:8b:0b:ec:4a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: May 11 15:56:23 2026 GMT Not After : May 10 16:01:23 2027 GMT Subject: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:1f:ce:00:6f:96:6a:d6:4f:6b:f3:32:aa: c2:6f:df:08:95:38:b2:bf:cc:0b:54:71:05:68:74: 27:58:76:0c:6d:10:86:03:19:8e:8c:5f:a0:d5:4a: 7c:5f:68:07:ca:4c:99:ba:fe:5a:8c:57:8f:44:51: 50:75:f0:99:51:f6:73:4d:2d:8f:f4:fd:6a:a2:06: b7:1f:c6:5e:ed:69:85:3a:9b:8e:bd:aa:6d:b1:61: 08:17:5a:a4:2a:64:2f:cd:af:5c:d2:1e:cc:68:f2: d5:b1:09:99:19:99:fa:13:24:1f:13:22:94:ed:a9: 3c:43:aa:2a:ea:33:fe:17:c8:50:e7:9d:47:56:ee: 07:75:b5:e5:e2:e0:94:f5:60:7f:11:24:56:6a:09: 3c:b1:06:56:da:07:08:62:af:64:36:62:8a:aa:95: 1e:47:e9:97:1c:d1:d3:0e:18:c4:ed:fe:98:e6:d7: a3:77:a9:e1:70:5f:77:70:4c:cb:41:20:3d:bf:9a: 02:36:6c:a1:3e:f9:9c:76:ba:4c:34:ae:ca:26:5b: 1f:07:f8:57:44:e7:ea:80:3b:dd:03:41:65:d9:bf: 38:c3:b4:43:c5:b7:c5:ae:99:7e:c7:9e:39:f2:54: 8f:3c:18:d4:a4:a0:33:e8:32:4c:58:49:12:5b:1e: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.192.0/19 187.79.248.0/21 Signature Algorithm: sha256WithRSAEncryption 91:a4:68:f3:c7:8b:4e:f7:d9:1e:4b:ee:e4:fa:a7:c8:95:0a: fc:d6:53:97:5d:b8:a8:28:21:20:25:a5:c1:1a:bb:b4:be:ba: 55:c6:cf:96:17:ed:7b:bb:3b:f7:03:f8:f1:27:c2:cc:6f:33: df:46:00:40:da:d5:e7:78:aa:20:fc:50:d7:27:68:c0:ab:51: a4:48:4d:d0:67:4f:ef:11:9f:29:3f:04:cb:fe:7c:f5:17:f0: 53:1e:da:a5:e6:86:60:c5:3d:b2:e4:5e:15:fc:1a:e4:b1:a6: 5d:9c:8f:01:8e:3b:43:ce:b7:6c:57:91:7d:e3:aa:83:fa:cf: 26:05:d1:de:71:f9:55:fe:f6:72:d5:f5:e3:a6:ae:29:ef:b9: ec:dd:13:5c:54:8b:d1:70:c6:74:cf:05:d1:1f:37:ff:76:e5: 95:2d:a2:37:39:fb:b0:af:fc:7c:c6:8a:24:4e:b8:5c:e1:cc: 4d:1c:b6:28:0e:d9:8a:4a:09:6d:64:73:f0:34:58:6a:b5:fc: 7e:5e:92:42:09:9e:30:32:6d:40:57:0d:e4:f9:6b:65:1e:96: 1d:d3:e4:d8:ae:c3:77:37:be:52:60:ae:be:ac:d2:4e:1b:8a: 2f:82:b8:28:4d:c6:57:a9:17:3d:f4:38:dd:cf:61:e0:32:46: c2:da:bc:16 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSmzKsDvaInWh0FEo3rO/iwvsSicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDUxMTE1NTYyM1oX DTI3MDUxMDE2MDEyM1owMzExMC8GA1UEAxMoREZBRDg3NzM1Qjk2RTM4QzVCMTY0 NTBEMDZGMUUzRjA1RDFDMEI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBCH84Ab5Zq1k9r8zKqwm/fCJU4sr/MC1RxBWh0J1h2DG0QhgMZjoxfoNVK fF9oB8pMmbr+WoxXj0RRUHXwmVH2c00tj/T9aqIGtx/GXu1phTqbjr2qbbFhCBda pCpkL82vXNIezGjy1bEJmRmZ+hMkHxMilO2pPEOqKuoz/hfIUOedR1buB3W15eLg lPVgfxEkVmoJPLEGVtoHCGKvZDZiiqqVHkfplxzR0w4YxO3+mObXo3ep4XBfd3BM y0EgPb+aAjZsoT75nHa6TDSuyiZbHwf4V0Tn6oA73QNBZdm/OMO0Q8W3xa6Zfsee OfJUjzwY1KSgM+gyTFhJElsevp0CAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN+th3NbluOMWxZFDQbx4/BdHAtQMB8GA1UdIwQYMBaAFHFS WXLjwRU95TBUeY9Rpb1Vx1AZMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMi83MTUy NTk3MkUzQzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5LmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNEExQkVBNjFENjYxMUUyQjJDRDhCN0M3MkZEMUZGMi9jVkpaY3VQ QkZUM2xNRlI1ajFHbHZWWEhVQmsuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRENMLVRXLzEv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wt VFcvMS9ERkFEODc3MzVCOTZFMzhDNUIxNjQ1MEQwNkYxRTNGMDVEMUMwQjUwLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQFu0/AAwQDu0/4MA0GCSqGSIb3DQEBCwUAA4IBAQCR pGjzx4tO99keS+7k+qfIlQr81lOXXbioKCEgJaXBGru0vrpVxs+WF+17uzv3A/jx J8LMbzPfRgBA2tXneKog/FDXJ2jAq1GkSE3QZ0/vEZ8pPwTL/nz1F/BTHtql5oZg xT2y5F4V/BrksaZdnI8BjjtDzrdsV5F946qD+s8mBdHecflV/vZy1fXjpq4p77ns 3RNcVIvRcMZ0zwXRHzf/duWVLaI3Ofuwr/x8xookTrhc4cxNHLYoDtmKSgltZHPw NFhqtfx+XpJCCZ4wMm1AVw3k+WtlHpYd0+TYrsN3N75SYK6+rNJOG4ovgrgoTcZX qRc99Djdz2HgMkbC2rwW -----END CERTIFICATE-----Generated at Wed May 13 04:55:07 2026 by rpki-client