$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer File: aJO3oCNNDm2_QupgVacUVov9-KU.cer (raw, json) Hash identifier: RISBripPyUjF1ZCCBkzC8bZJFHQEEVIhE6sM/B7OPk0= Subject key identifier: 68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 4174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 13 Feb 2026 01:49:01 +0000 Certificate not after: Wed 10 Feb 2027 15:30:20 +0000 Subordinate resources: IP: 2402:4de0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 03:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16756 (0x4174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 13 01:49:01 2026 GMT Not After : Feb 10 15:30:20 2027 GMT Subject: CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:1d:b8:26:3e:8e:58:90:5c:a1:1f:3a:7a: 6d:72:b4:89:47:5a:45:91:10:9c:b1:5d:81:19:85: da:de:f5:88:48:82:c9:31:bc:7b:46:1b:38:56:a6: d6:66:2a:07:5d:0a:51:62:9f:45:ea:58:86:80:db: eb:7a:4c:e9:36:ee:92:f9:41:b5:8c:f6:e3:6e:04: 7c:b3:10:e2:2a:93:21:6e:f0:8f:b5:48:7e:b7:cb: 82:d0:a2:b6:2d:1b:70:eb:88:b4:30:40:4d:76:1c: 32:d3:e7:c3:d0:d3:b2:d1:2a:19:de:4e:65:a9:b7: 4d:18:82:76:f4:67:de:e0:0c:04:57:cc:21:83:91: 79:01:bd:aa:d2:90:f8:b7:e8:92:4c:97:0f:cc:a0: 7c:39:c5:6c:c8:86:8a:b4:9b:1b:e6:e2:36:bd:99: b0:46:85:da:9c:ee:b8:59:02:a1:5f:a7:2c:bb:86: ad:53:8b:51:01:22:de:a6:4d:09:39:05:71:38:39: c4:0f:67:54:2a:ee:6f:d4:f6:65:37:3b:88:34:f5: e7:24:5e:bf:60:5d:33:e1:65:65:d2:18:15:60:24: b9:0d:28:36:36:97:0e:b2:47:04:da:6f:2b:9d:75: 26:95:34:6c:0e:38:2b:0f:74:0a:23:f0:88:9c:55: 4f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:4de0::/32 Signature Algorithm: sha256WithRSAEncryption 94:a5:6b:48:c4:5d:53:ae:63:62:a3:47:be:21:d0:ec:57:60: fe:45:37:fc:9b:a0:9c:61:ba:54:91:81:b4:62:b3:a4:86:f7: 1e:59:94:ea:ee:c0:23:5e:eb:ac:fc:ee:dd:0c:f7:e4:5a:a2: a7:aa:16:35:db:3a:68:78:b0:8d:1b:cb:b8:91:fa:ef:ec:f2: 86:d3:8a:98:5f:55:ab:6b:c1:86:76:1b:3e:19:a9:29:00:89: 28:08:41:34:84:b2:9d:90:ad:d6:93:d0:72:d7:5e:f4:23:87: 9d:6d:57:dc:09:33:4b:61:c5:4a:19:b3:27:6e:eb:ec:6b:a8: 02:da:40:cc:56:ad:89:10:59:15:54:2a:bb:7b:f9:57:11:78: 11:bc:1d:87:31:0c:f5:9f:bb:e5:be:f7:be:48:19:1d:d9:db: 3b:69:9a:0b:c0:60:ed:07:dc:78:c1:fc:2b:46:6e:76:f3:37: ac:be:6c:04:21:73:08:ef:a2:0a:ec:78:51:ef:96:33:fb:a0: e9:42:20:88:71:f9:44:8a:03:96:65:93:44:4d:6c:4f:bf:5f: db:cd:49:5c:34:41:af:b3:4b:f6:ad:ea:89:77:7e:f0:bf:de: 21:2d:06:3e:8b:96:6e:5e:d9:47:da:fe:5d:91:e1:44:dc:2f: da:1a:88:23 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICQXQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI2MDIxMzAxNDkwMVoXDTI3MDIxMDE1MzAyMFowMzEx MC8GA1UEAxMoNjg5M0I3QTAyMzREMEU2REJGNDJFQTYwNTVBNzE0NTY4QkZERjhB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALrZHbgmPo5YkFyhHzp6 bXK0iUdaRZEQnLFdgRmF2t71iEiCyTG8e0YbOFam1mYqB10KUWKfRepYhoDb63pM 6TbukvlBtYz2424EfLMQ4iqTIW7wj7VIfrfLgtCiti0bcOuItDBATXYcMtPnw9DT stEqGd5OZam3TRiCdvRn3uAMBFfMIYOReQG9qtKQ+LfokkyXD8ygfDnFbMiGirSb G+biNr2ZsEaF2pzuuFkCoV+nLLuGrVOLUQEi3qZNCTkFcTg5xA9nVCrub9T2ZTc7 iDT15yRev2BdM+FlZdIYFWAkuQ0oNjaXDrJHBNpvK511JpU0bA44Kw90CiPwiJxV T8sCAwEAAaOCAlEwggJNMB0GA1UdDgQWBBRok7egI00Obb9C6mBVpxRWi/34pTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFcxMDMzLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1RXMTAzMy9hSk8zb0NOTkRtMl9RdXBnVmFjVVZvdjktS1UubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsG AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJN4DANBgkqhkiG9w0BAQsFAAOCAQEA lKVrSMRdU65jYqNHviHQ7Fdg/kU3/JugnGG6VJGBtGKzpIb3HlmU6u7AI17rrPzu 3Qz35Fqip6oWNds6aHiwjRvLuJH67+zyhtOKmF9Vq2vBhnYbPhmpKQCJKAhBNISy nZCt1pPQctde9COHnW1X3AkzS2HFShmzJ27r7GuoAtpAzFatiRBZFVQqu3v5VxF4 EbwdhzEM9Z+75b73vkgZHdnbO2maC8Bg7QfceMH8K0ZudvM3rL5sBCFzCO+iCux4 Ue+WM/ug6UIgiHH5RIoDlmWTRE1sT79f281JXDRBr7NL9q3qiXd+8L/eIS0GPouW bl7ZR9r+XZHhRNwv2hqIIw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:58:10 2026 by rpki-client