$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer File: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer (raw, json) Hash identifier: GOQ4uUi7SUWnBQIrexLDzPyzsZjzXNeErYeaASJZ0SA= Subject key identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 7A4615C81C8CFF7B8D77F384A952A449784D8095 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft caRepository: rsync://rpkica.twnic.tw/rpki/SYVC/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Tue 08 Sep 2026 06:39:03 +0000 Certificate not after: Tue 07 Sep 2027 06:44:03 +0000 Subordinate resources: IP: 103.183.198.0/23 IP: 211.73.104.0/23 IP: 2400:63e0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:46:15:c8:1c:8c:ff:7b:8d:77:f3:84:a9:52:a4:49:78:4d:80:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 8 06:39:03 2026 GMT Not After : Sep 7 06:44:03 2027 GMT Subject: CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:8c:59:e5:da:0f:08:56:e6:db:b7:84:92: 68:f7:7c:76:07:70:86:2d:7e:0a:74:5d:20:5b:d9: c6:51:7d:6a:97:a5:74:50:f1:7f:3d:41:e7:26:e5: 90:73:74:77:6d:c9:f9:93:53:86:9a:11:fd:a0:18: 68:bc:97:e8:97:d0:c7:a4:85:64:b6:3f:71:3e:4c: 5f:40:23:15:11:e5:f5:e4:a1:a2:1d:3e:19:ee:bd: 47:43:b2:f7:f9:11:f0:ca:30:19:d4:58:06:bc:7d: d4:78:1c:92:27:bf:ea:a0:97:da:0a:6e:87:75:2d: 2b:a9:72:ca:57:21:83:1d:6e:a7:55:57:4a:01:e1: 32:6c:47:b8:ee:e6:ed:8e:40:0a:72:d9:f9:f6:42: 62:a4:14:37:da:b6:64:92:a0:c9:6f:75:38:7f:4a: 40:dd:5e:03:c8:ec:da:b7:83:93:e1:54:d7:b4:93: e9:ff:46:26:9b:56:e1:55:18:0e:db:92:41:01:13: 28:a8:89:9d:d7:91:55:d2:de:9e:d1:63:73:fd:01: 78:49:fa:fe:8b:86:b0:16:33:2d:b9:1a:34:ad:8a: 27:83:c7:9b:bb:5e:96:83:02:9b:4b:03:4f:d1:6d: 75:55:8f:40:8c:55:d9:31:cf:1b:6a:aa:b2:dc:21: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.198.0/23 211.73.104.0/23 IPv6: 2400:63e0::/32 Signature Algorithm: sha256WithRSAEncryption 88:fe:56:75:e5:21:54:4b:c6:32:25:86:b3:1e:3f:0d:59:8f: d8:9f:af:79:79:ec:31:ad:c5:87:17:cb:29:44:56:34:e1:31: 7e:f6:d3:da:ec:72:18:1c:93:46:41:54:92:af:c7:99:8e:33: 1f:2e:38:2b:9a:04:81:5e:39:fb:5e:81:7b:2d:27:5c:45:34: d0:cf:4d:10:2b:9b:9b:c4:d4:d4:d0:c0:ef:e7:fd:51:04:e4: d0:b6:93:af:b8:67:d4:16:f4:2c:6c:ef:5e:85:35:9f:f1:bf: d5:be:f8:9e:83:78:29:8d:a3:ef:0a:1e:34:34:8b:b6:49:52: 1e:8f:3c:15:a1:aa:79:98:11:b0:40:66:27:23:bf:5f:46:c7: 62:a2:06:68:55:57:d0:6e:3a:8c:ca:e0:6a:42:27:7b:dc:96: ae:e2:69:24:16:2e:86:41:82:f2:3f:36:d9:cf:b6:09:6f:a2: d2:b7:a9:3a:bf:80:3b:35:6e:61:f5:9d:b3:58:59:3e:19:47: eb:13:d7:37:33:1a:9d:5f:6d:a3:89:f6:fc:ad:a3:31:91:39: d6:17:96:2d:d4:78:50:81:f6:6e:e4:7f:d1:9c:c9:4f:d5:3c: 55:cd:e8:fa:f2:1a:c9:79:f5:bc:40:f8:79:41:5b:80:d2:22: 53:2f:e2:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUekYVyByM/3uNd/OEqVKkSXhNgJUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwODA2MzkwM1oX DTI3MDkwNzA2NDQwM1owMzExMC8GA1UEAxMoM0YzRTZFOERGNEY0NkRERkUwNDhG NzFDNUFFQzg2MTZGREQ3RDczNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPJjFnl2g8IVubbt4SSaPd8dgdwhi1+CnRdIFvZxlF9apeldFDxfz1B5ybl kHN0d23J+ZNThpoR/aAYaLyX6JfQx6SFZLY/cT5MX0AjFRHl9eShoh0+Ge69R0Oy 9/kR8MowGdRYBrx91Hgckie/6qCX2gpuh3UtK6lyylchgx1up1VXSgHhMmxHuO7m 7Y5ACnLZ+fZCYqQUN9q2ZJKgyW91OH9KQN1eA8js2reDk+FU17ST6f9GJptW4VUY DtuSQQETKKiJndeRVdLentFjc/0BeEn6/ouGsBYzLbkaNK2KJ4PHm7teloMCm0sD T9FtdVWPQIxV2THPG2qqstwh+VkCAwEAAaOCAncwggJzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD8+bo309G3f4Ej3HFrshhb919c3MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TWVZDLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NZVkMvMC8z RjNFNkU4REY0RjQ2RERGRTA0OEY3MUM1QUVDODYxNkZERDdENzM3Lm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw IzASBAIAATAMAwQBZ7fGAwQB00loMA0EAgACMAcDBQAkAGPgMA0GCSqGSIb3DQEB CwUAA4IBAQCI/lZ15SFUS8YyJYazHj8NWY/Yn695eewxrcWHF8spRFY04TF+9tPa 7HIYHJNGQVSSr8eZjjMfLjgrmgSBXjn7XoF7LSdcRTTQz00QK5ubxNTU0MDv5/1R BOTQtpOvuGfUFvQsbO9ehTWf8b/Vvvieg3gpjaPvCh40NIu2SVIejzwVoap5mBGw QGYnI79fRsdiogZoVVfQbjqMyuBqQid73Jau4mkkFi6GQYLyPzbZz7YJb6LSt6k6 v4A7NW5h9Z2zWFk+GUfrE9c3MxqdX22jifb8raMxkTnWF5Yt1HhQgfZu5H/RnMlP 1TxVzej68hrJefW8QPh5QVuA0iJTL+Lq -----END CERTIFICATE-----Generated at Mon Sep 21 00:17:03 2026 by rpki-client