$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer File: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer (raw, json) Hash identifier: yjRPdw4qsZQm5a53Jz+GCeHByCDiZqz3zkEqNNgns9U= Subject key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 3A4C9125DE1FAA00FA6391FECEDFBFE5C4C62833 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft caRepository: rsync://rpkica.twnic.tw/rpki/APWON/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Thu 21 May 2026 08:16:01 +0000 Certificate not after: Thu 20 May 2027 08:21:01 +0000 Subordinate resources: IP: 162.4.120.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4c:91:25:de:1f:aa:00:fa:63:91:fe:ce:df:bf:e5:c4:c6:28:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 21 08:16:01 2026 GMT Not After : May 20 08:21:01 2027 GMT Subject: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a5:3a:13:ee:34:ea:e5:06:21:96:bb:88:03: 7b:b8:d5:0b:76:54:32:34:92:50:26:3c:18:c2:94: 7c:e1:76:fc:c9:e5:ef:48:86:f7:0b:4b:05:fe:cf: a2:ae:c8:a2:54:ef:a0:51:db:41:af:3d:3f:93:f7: 14:f9:a6:b1:35:97:14:bd:bb:a5:dd:43:e7:d0:04: 3e:42:f1:de:a7:49:42:a6:bd:7f:25:db:5d:3e:12: fd:2f:78:88:d5:09:49:3d:54:92:e3:c8:18:d3:8f: c8:1c:69:80:42:21:fb:fd:60:58:a3:d7:75:55:46: 43:23:4a:5a:0c:fa:e7:0a:ae:85:c6:a4:54:3c:d7: 84:02:76:71:66:ca:47:68:23:e8:45:79:fc:1c:ef: f1:73:ac:28:4d:b9:01:21:ff:d3:99:d1:ca:7f:49: 6b:40:f8:6c:be:f6:0c:ba:f1:29:b8:d4:36:87:93: dd:1a:43:c7:31:d6:33:4c:a7:9f:f4:e9:7b:9f:27: 13:ee:a7:03:d5:ff:8b:ac:ab:b8:b1:a3:33:72:2c: bb:fe:14:d3:49:a4:4c:a8:f2:82:e8:d8:61:03:e4: 28:10:44:43:1a:21:e7:94:69:28:a5:84:a6:c1:e2: 3d:75:23:20:09:86:19:4a:7b:83:ba:59:bd:a1:3b: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.120.0/23 Signature Algorithm: sha256WithRSAEncryption 56:71:04:e3:7a:42:40:b1:14:77:ad:ce:fd:96:8d:22:c9:25: 36:86:38:4b:f3:d7:11:8d:ee:48:59:cc:3b:ec:3c:02:dd:ce: 6a:3d:b6:fc:54:8f:05:85:7a:c5:23:fa:ff:31:15:aa:d2:01: 9f:01:aa:43:41:f5:50:af:52:0f:9f:64:de:fe:02:61:85:d7: 83:dc:f3:2c:d8:cb:ca:1c:46:89:f3:79:5d:45:0f:c6:1f:c5: e4:59:14:1c:69:ff:37:dd:48:de:b8:22:a6:84:b9:44:c1:45: 80:5b:19:e7:81:24:32:ba:1c:2b:b4:a6:cf:6d:2d:76:63:57: b1:79:ef:03:c0:df:8a:53:64:5e:0f:d0:81:bd:72:73:06:22: 55:d2:f8:95:4e:e5:7b:ec:a8:37:fb:96:27:bd:76:ff:77:db: 34:a8:ac:1d:ac:2f:67:65:ae:8e:7b:7e:bb:49:12:16:df:fc: aa:7c:7e:97:c9:98:2e:a0:f8:92:bc:27:e7:83:67:ec:91:02: 03:d5:1f:df:d0:1b:2c:aa:d3:f3:2d:92:2b:98:6b:3a:a9:23: df:cc:55:14:dd:8a:27:81:2c:6b:3e:d3:2c:ba:a7:ae:a4:69: 0b:38:bb:1c:06:89:27:60:90:f6:5a:6d:d6:fa:6c:9a:20:46: 90:21:5a:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUOkyRJd4fqgD6Y5H+zt+/5cTGKDMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUyMTA4MTYwMVoX DTI3MDUyMDA4MjEwMVowMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5 MDA2RUE3QTU1REQ3N0UyQ0I5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2lOhPuNOrlBiGWu4gDe7jVC3ZUMjSSUCY8GMKUfOF2/Mnl70iG9wtLBf7P oq7IolTvoFHbQa89P5P3FPmmsTWXFL27pd1D59AEPkLx3qdJQqa9fyXbXT4S/S94 iNUJST1UkuPIGNOPyBxpgEIh+/1gWKPXdVVGQyNKWgz65wquhcakVDzXhAJ2cWbK R2gj6EV5/Bzv8XOsKE25ASH/05nRyn9Ja0D4bL72DLrxKbjUNoeT3RpDxzHWM0yn n/Tpe58nE+6nA9X/i6yruLGjM3Isu/4U00mkTKjygujYYQPkKBBEQxoh55RpKKWE psHiPXUjIAmGGUp7g7pZvaE72t0CAwEAAaOCAmQwggJgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMWJzA0s8NY0y06QBup6Vd134sueMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8w L0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1NURENzdFMkNCOUUubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGiBHgwDQYJKoZIhvcNAQELBQADggEBAFZxBON6QkCxFHet zv2WjSLJJTaGOEvz1xGN7khZzDvsPALdzmo9tvxUjwWFesUj+v8xFarSAZ8BqkNB 9VCvUg+fZN7+AmGF14Pc8yzYy8ocRonzeV1FD8YfxeRZFBxp/zfdSN64IqaEuUTB RYBbGeeBJDK6HCu0ps9tLXZjV7F57wPA34pTZF4P0IG9cnMGIlXS+JVO5XvsqDf7 lie9dv932zSorB2sL2dlro57frtJEhbf/Kp8fpfJmC6g+JK8J+eDZ+yRAgPVH9/Q Gyyq0/MtkiuYazqpI9/MVRTdiieBLGs+0yy6p66kaQs4uxwGiSdgkPZabdb6bJog RpAhWoE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:39:48 2026 by rpki-client