$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer File: eUIuMOHL23lSK1Kq39Y39QnJJKU.cer (raw, json) Hash identifier: eQK4R9G92kKGWSWQ9GtmE7L10q3T0RHQlJfXD2ZB8ws= Subject key identifier: 79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 42CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 13 Apr 2026 01:01:35 +0000 Certificate not after: Sat 10 Apr 2027 15:30:19 +0000 Subordinate resources: IP: 163.128.192.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 06:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17099 (0x42cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Apr 13 01:01:35 2026 GMT Not After : Apr 10 15:30:19 2027 GMT Subject: CN=79422E30E1CBDB79522B52AADFD637F509C924A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:08:8d:e6:87:10:69:eb:53:60:19:95:7a: 70:b5:eb:a2:4b:7c:85:74:d5:2f:69:05:37:bb:f1: a3:a3:ec:4d:d4:ea:af:88:61:b7:c0:99:5c:79:ae: f5:ff:32:99:10:37:b3:2d:e3:61:f7:3f:1c:68:e6: 0b:1d:51:fb:a1:36:ae:a2:20:37:8a:79:ba:4a:28: da:ef:0b:08:ab:16:e2:dd:13:9a:85:c9:e3:de:55: b7:be:79:ae:bc:54:c8:d3:f5:3f:98:58:3c:3a:2b: bb:d1:22:21:01:9d:22:10:ab:cc:0c:19:cb:eb:06: 76:36:ca:e0:6a:f3:36:1f:8e:65:e8:b8:97:3e:37: 93:2b:5c:48:bf:7a:4d:be:13:df:4a:5f:a3:d7:22: 41:2c:63:3c:64:37:bd:5d:63:aa:db:2d:90:18:38: b9:bb:ba:d0:8a:dc:7b:ac:ef:fa:89:8a:a9:3c:4b: 57:d4:e2:b5:f0:b8:c7:2f:62:20:73:eb:b1:65:a3: cc:f8:04:e2:af:b0:e5:c2:b0:84:f0:84:2e:04:52: a1:17:1a:a3:2e:1c:2a:55:68:69:d2:ae:1d:25:eb: 0e:2a:1b:f8:16:c5:ff:ee:03:b5:8d:1e:e9:8d:96: 9c:13:85:d8:a9:58:d3:9f:ac:48:88:bc:b6:83:e2: 74:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.128.192.0/23 Signature Algorithm: sha256WithRSAEncryption 31:c3:d4:3a:8b:97:b6:11:8c:ac:64:2e:10:c6:e5:6e:ea:91: c8:94:d5:6f:ed:f6:c3:a4:0c:06:d8:b6:61:cd:7c:dc:fa:5c: fd:af:8a:d3:8d:6c:09:a9:d0:52:60:55:48:cf:4e:cf:75:82: 86:94:19:b5:38:24:15:35:a2:2b:8e:67:c9:92:e5:d6:95:0b: 5a:1c:17:b9:22:c0:fd:bc:fb:d2:0d:a1:ca:a8:37:0e:35:c3: 8b:ee:5f:04:15:56:9a:8d:1f:53:6f:45:63:65:b3:86:c7:40: 92:88:f0:d9:dc:b7:db:a1:d6:7a:6f:53:b4:88:ae:00:17:53: 49:7e:05:cc:1e:4b:2e:f0:37:1e:0c:64:52:f0:16:96:4c:eb: 16:f2:44:fd:1a:e3:7a:5a:8b:c6:41:2b:a0:43:e7:bd:bc:45: fc:c9:4b:e5:c8:74:65:74:19:30:78:f8:0b:d1:5a:fd:30:62: 00:44:f8:0a:d9:e5:11:31:c1:f0:4a:9a:cd:89:c2:41:4d:75: 12:bc:df:e0:58:5a:7d:91:e3:2c:0b:fa:62:25:b7:ab:86:f7: 6c:1d:23:4a:4f:6a:25:6b:18:b9:eb:dc:85:48:cd:84:6c:49: ab:e6:52:af:7d:b0:5a:02:8a:03:d0:36:39:cb:e0:52:fc:37: c3:d9:75:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICQsswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI2MDQxMzAxMDEzNVoXDTI3MDQxMDE1MzAxOVowMzEx MC8GA1UEAxMoNzk0MjJFMzBFMUNCREI3OTUyMkI1MkFBREZENjM3RjUwOUM5MjRB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHeCI3mhxBp61NgGZV6 cLXrokt8hXTVL2kFN7vxo6PsTdTqr4hht8CZXHmu9f8ymRA3sy3jYfc/HGjmCx1R +6E2rqIgN4p5ukoo2u8LCKsW4t0TmoXJ495Vt755rrxUyNP1P5hYPDoru9EiIQGd IhCrzAwZy+sGdjbK4GrzNh+OZei4lz43kytcSL96Tb4T30pfo9ciQSxjPGQ3vV1j qtstkBg4ubu60Irce6zv+omKqTxLV9TitfC4xy9iIHPrsWWjzPgE4q+w5cKwhPCE LgRSoRcaoy4cKlVoadKuHSXrDiob+BbF/+4DtY0e6Y2WnBOF2KlY05+sSIi8toPi dBUCAwEAAaOCAlQwggJQMB0GA1UdDgQWBBR5Qi4w4cvbeVIrUqrf1jf1CckkpTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElOR1VBTkcv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvTElOR1VBTkcvZVVJdU1PSEwyM2xTSzFLcTM5WTM5UW5KSktVLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaOAwDANBgkqhkiG9w0BAQsFAAOC AQEAMcPUOouXthGMrGQuEMblbuqRyJTVb+32w6QMBti2Yc183Ppc/a+K041sCanQ UmBVSM9Oz3WChpQZtTgkFTWiK45nyZLl1pULWhwXuSLA/bz70g2hyqg3DjXDi+5f BBVWmo0fU29FY2WzhsdAkojw2dy326HWem9TtIiuABdTSX4FzB5LLvA3HgxkUvAW lkzrFvJE/RrjelqLxkEroEPnvbxF/MlL5ch0ZXQZMHj4C9Fa/TBiAET4CtnlETHB 8EqazYnCQU11Erzf4FhafZHjLAv6YiW3q4b3bB0jSk9qJWsYuevchUjNhGxJq+ZS r32wWgKKA9A2OcvgUvw3w9l1eA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:01 2026 by rpki-client