$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer File: A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer (raw, json) Hash identifier: OMWcOs6KlqttHQByizb4AfJP0kqDFCwP+4AE1kAWNrc= Subject key identifier: A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 1D84D1E6A5768502613411F03BFB733A064B81BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft caRepository: rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Wed 20 May 2026 09:24:33 +0000 Certificate not after: Wed 19 May 2027 09:29:33 +0000 Subordinate resources: IP: 162.4.116.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:84:d1:e6:a5:76:85:02:61:34:11:f0:3b:fb:73:3a:06:4b:81:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 20 09:24:33 2026 GMT Not After : May 19 09:29:33 2027 GMT Subject: CN=A4D8B81BA95B8036B78E08972E6FF77ECDDA475A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:21:b2:7d:72:03:7b:67:b4:14:9c:50:20: 2f:c1:88:cf:7a:17:81:1d:05:8c:ec:ff:35:01:d6: a1:5b:1c:cf:2b:db:cf:09:e6:79:c5:eb:88:10:4a: 16:29:fa:9c:1d:2a:77:c5:20:9a:4b:73:62:76:cd: b6:0d:45:b6:19:db:b1:09:82:47:d7:69:1c:a7:63: 8c:72:30:e2:51:a7:03:6b:c9:7d:13:71:4c:8e:a5: 11:47:10:c1:11:0e:53:2c:09:79:5b:3f:3f:a3:3f: 20:d7:b1:08:0f:a9:f7:e1:cb:ab:67:ed:c6:ea:75: 5a:a4:c7:ee:4f:6c:8c:05:0e:aa:63:a3:79:f5:d8: 62:6b:7a:08:ef:ef:47:65:46:0b:91:23:1a:7a:16: 34:28:1e:e7:1b:d6:82:6a:f1:7a:64:1f:58:12:ff: 20:91:15:dc:85:c2:a0:ae:6e:09:a5:fc:c4:25:29: e7:49:14:c1:51:5b:c3:0d:7e:ee:0a:09:5e:e2:8b: cb:94:cb:03:1d:c4:5c:c8:59:cb:63:8e:50:e3:ea: 0b:7e:5f:14:de:87:68:ac:81:3d:cf:d5:79:58:66: 1b:04:ce:ca:06:83:52:6a:0a:af:d9:52:22:ff:54: 3c:2b:a9:0e:e4:ed:3a:6d:71:b2:95:59:38:d2:ae: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.116.0/23 Signature Algorithm: sha256WithRSAEncryption 14:ad:d7:ed:18:bc:e2:93:56:21:9e:84:27:62:b4:d5:96:9a: 91:f4:c6:ad:f9:69:81:42:06:14:59:79:4b:36:05:20:bc:32: 65:7f:55:36:fb:d0:5f:a6:14:77:b3:d7:08:8c:ce:2d:af:2b: b6:80:8a:07:50:36:ca:91:44:c9:31:2e:74:a5:ba:c7:ed:ca: 38:e9:c3:78:48:50:46:66:92:83:6c:00:c4:3e:8e:3a:b2:25: 84:e1:98:d1:62:08:e1:7b:78:df:7c:f1:35:e3:7f:d1:75:76: 75:fa:92:e5:36:87:99:27:e7:3a:0a:b1:43:13:a4:87:45:e5: 4c:78:49:40:f9:22:50:de:1a:af:d1:0e:bc:50:7b:dd:bd:4f: bf:57:b0:ec:88:e4:67:f7:28:01:98:42:d5:a5:4a:94:5f:2c: bd:f9:02:1c:89:ed:cd:c8:f5:6f:df:31:bf:db:a4:e0:fa:a5: ce:ad:e6:37:51:7b:2f:e7:cc:49:0a:7d:a2:31:08:35:c9:8f: ec:69:fb:fc:90:b9:f9:40:be:32:0c:4a:d4:47:a7:09:c5:fa: ce:9d:a4:07:fa:4b:02:00:0b:15:b4:a8:c2:f1:0c:96:0c:f9: c1:3a:b7:72:bf:5e:dd:2f:14:74:48:d7:97:11:65:cb:a2:84: d7:b2:0c:4e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUHYTR5qV2hQJhNBHwO/tzOgZLgb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUyMDA5MjQzM1oX DTI3MDUxOTA5MjkzM1owMzExMC8GA1UEAxMoQTREOEI4MUJBOTVCODAzNkI3OEUw ODk3MkU2RkY3N0VDRERBNDc1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJVmIbJ9cgN7Z7QUnFAgL8GIz3oXgR0FjOz/NQHWoVsczyvbzwnmecXriBBK Fin6nB0qd8UgmktzYnbNtg1FthnbsQmCR9dpHKdjjHIw4lGnA2vJfRNxTI6lEUcQ wREOUywJeVs/P6M/INexCA+p9+HLq2ftxup1WqTH7k9sjAUOqmOjefXYYmt6CO/v R2VGC5EjGnoWNCge5xvWgmrxemQfWBL/IJEV3IXCoK5uCaX8xCUp50kUwVFbww1+ 7goJXuKLy5TLAx3EXMhZy2OOUOPqC35fFN6HaKyBPc/VeVhmGwTOygaDUmoKr9lS Iv9UPCupDuTtOm1xspVZONKutpcCAwEAAaOCAmowggJmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKTYuBupW4A2t44Ily5v937N2kdaMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UUEVGVUJPTi8x LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UUEVG VUJPTi8xL0E0RDhCODFCQTk1QjgwMzZCNzhFMDg5NzJFNkZGNzdFQ0REQTQ3NUEu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGiBHQwDQYJKoZIhvcNAQELBQADggEBABSt1+0Y vOKTViGehCditNWWmpH0xq35aYFCBhRZeUs2BSC8MmV/VTb70F+mFHez1wiMzi2v K7aAigdQNsqRRMkxLnSlusftyjjpw3hIUEZmkoNsAMQ+jjqyJYThmNFiCOF7eN98 8TXjf9F1dnX6kuU2h5kn5zoKsUMTpIdF5Ux4SUD5IlDeGq/RDrxQe929T79XsOyI 5Gf3KAGYQtWlSpRfLL35AhyJ7c3I9W/fMb/bpOD6pc6t5jdRey/nzEkKfaIxCDXJ j+xp+/yQuflAvjIMStRHpwnF+s6dpAf6SwIACxW0qMLxDJYM+cE6t3K/Xt0vFHRI 15cRZcuihNeyDE4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:39 2026 by rpki-client