$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer File: 4DC8A0E80696AD1A2419ACE881334BE812506228.cer (raw, json) Hash identifier: YfjgOWjGqvXHXvv7BE+9V70UEwGSP+D/K1v2mTvEgYs= Subject key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 5F24D9567FEAF4E291BC0675352BFC31E2592312 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft caRepository: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Thu 11 Jun 2026 08:34:47 +0000 Certificate not after: Thu 10 Jun 2027 08:39:47 +0000 Subordinate resources: IP: 162.4.236.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:24:d9:56:7f:ea:f4:e2:91:bc:06:75:35:2b:fc:31:e2:59:23:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: Jun 11 08:34:47 2026 GMT Not After : Jun 10 08:39:47 2027 GMT Subject: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:46:e8:ee:08:08:21:00:e4:67:1f:d2:8d: 0b:4f:7b:19:2d:72:2a:8d:e0:2a:99:0a:ca:b7:d8: 6e:1b:a7:f3:35:60:b5:99:5a:8a:ff:8e:36:23:72: 45:83:e5:98:1f:57:d3:9f:1e:ce:ed:2e:53:f5:c5: 0d:71:49:ea:d5:c3:a4:7e:23:51:2d:06:95:ca:a8: ba:84:63:64:d4:ad:4d:d3:a5:2a:fc:21:b2:7e:ae: 87:b2:8b:a6:70:7c:e4:64:68:fc:ec:6f:4f:96:38: ba:11:68:cb:0e:a2:df:d5:04:22:ff:7c:95:86:fa: 0a:42:69:92:91:de:80:a1:05:27:a8:94:d0:c4:97: 64:bc:70:85:cd:8c:68:e8:cf:a0:06:e6:12:c9:d6: d6:1f:62:8c:1a:92:a9:27:ed:27:ed:51:59:51:77: 8c:a6:fb:9a:67:5b:b6:f7:b5:f0:fc:04:b0:80:6f: 51:bd:8d:36:e1:6f:9f:c3:71:64:20:75:27:94:62: 79:f9:49:71:2c:7e:95:6a:89:c1:30:1d:4a:25:78: 69:ac:c4:c7:7c:9a:ee:cd:1b:a7:29:1d:db:e5:31: 69:5d:cb:47:9f:94:3f:73:f0:e4:4c:91:d4:48:8c: 1d:74:dc:36:91:03:b4:e7:20:2d:7d:c8:0a:df:a0: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.236.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:20:7c:52:0f:b8:f9:47:81:c3:0c:00:74:fd:ca:92:a3:09: ae:35:84:3a:cb:78:02:59:48:70:bd:15:9b:67:59:ae:1f:fa: 89:99:8b:2a:f5:84:bd:f8:cb:39:0c:b1:ba:51:0b:8b:7c:6e: 6d:6a:f7:94:86:94:07:c3:73:71:18:e9:d6:6e:e5:12:df:a0: ef:bf:94:94:b8:11:39:dd:50:04:3e:52:25:61:75:bc:52:48: f9:25:01:30:b2:3a:8a:0c:be:c9:5d:18:a1:ab:f7:77:aa:3f: de:0b:10:ec:a2:18:0b:70:03:d6:c3:ba:bb:07:5f:4a:08:fb: 60:b9:4f:73:c2:f3:cc:29:b8:81:ff:e2:a7:b3:9a:cf:35:63: a4:e0:9f:28:99:c7:1b:12:57:a2:bd:0c:94:54:cd:1b:02:9d: b2:f8:2a:e4:36:e9:42:57:7f:72:40:f4:98:e3:f0:12:b4:61: e3:d3:bd:5b:df:99:aa:45:51:52:68:b8:4e:22:57:08:b0:48: 27:4f:05:4b:98:ef:9a:be:3a:54:b1:bf:a4:b4:5e:bd:b8:3e: ee:b6:0c:89:8f:03:71:82:a2:c7:ff:5a:45:16:09:0b:52:a1: ad:69:0a:cc:01:3d:f0:8e:7c:87:1e:27:aa:25:31:a3:d0:f8: 8d:fc:af:71 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIUXyTZVn/q9OKRvAZ1NSv8MeJZIxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDYxMTA4MzQ0N1oX DTI3MDYxMDA4Mzk0N1owMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlB Q0U4ODEzMzRCRTgxMjUwNjIyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJeRujuCAghAORnH9KNC097GS1yKo3gKpkKyrfYbhun8zVgtZlaiv+ONiNy RYPlmB9X058ezu0uU/XFDXFJ6tXDpH4jUS0GlcqouoRjZNStTdOlKvwhsn6uh7KL pnB85GRo/OxvT5Y4uhFoyw6i39UEIv98lYb6CkJpkpHegKEFJ6iU0MSXZLxwhc2M aOjPoAbmEsnW1h9ijBqSqSftJ+1RWVF3jKb7mmdbtve18PwEsIBvUb2NNuFvn8Nx ZCB1J5RieflJcSx+lWqJwTAdSiV4aazEx3ya7s0bpykd2+UxaV3LR5+UP3Pw5EyR 1EiMHXTcNpEDtOcgLX3ICt+gFDsCAwEAAaOCAmYwggJiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE3IoOgGlq0aJBms6IEzS+gSUGIoMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET1dURUsvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB /wQQMA4wDAQCAAEwBgMEAaIE7DANBgkqhkiG9w0BAQsFAAOCAQEACyB8Ug+4+UeB wwwAdP3KkqMJrjWEOst4AllIcL0Vm2dZrh/6iZmLKvWEvfjLOQyxulELi3xubWr3 lIaUB8NzcRjp1m7lEt+g77+UlLgROd1QBD5SJWF1vFJI+SUBMLI6igy+yV0Yoav3 d6o/3gsQ7KIYC3AD1sO6uwdfSgj7YLlPc8LzzCm4gf/ip7OazzVjpOCfKJnHGxJX or0MlFTNGwKdsvgq5DbpQld/ckD0mOPwErRh49O9W9+ZqkVRUmi4TiJXCLBIJ08F S5jvmr46VLG/pLRevbg+7rYMiY8DcYKix/9aRRYJC1KhrWkKzAE98I58hx4nqiUx o9D4jfyvcQ== -----END CERTIFICATE-----Generated at Sat Jun 13 12:41:28 2026 by rpki-client