$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.cer (raw, json) Hash identifier: gzLu7trO5j2/7dL6vF1/9weADG6y5pBcQSDxtN0Jlk0= Subject key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 034213ED70B4C32E5109FD58BF1FCF8139B89CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft caRepository: rsync://rpkica.twnic.tw/rpki/TCSKY/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:40 +0000 Certificate not after: Mon 10 May 2027 16:02:40 +0000 Subordinate resources: IP: 2401:d620::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:42:13:ed:70:b4:c3:2e:51:09:fd:58:bf:1f:cf:81:39:b8:9c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:40 2026 GMT Not After : May 10 16:02:40 2027 GMT Subject: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:84:e6:6c:96:2c:32:9c:ee:2b:ae:64:72: 0f:2b:fc:99:c8:3e:59:ba:d4:9c:4a:9d:7c:56:3a: 0d:d3:86:77:e7:00:de:8b:e9:0f:aa:e8:9d:16:73: 92:ab:54:bf:ca:46:66:df:fb:6e:6a:c4:13:51:4d: 58:22:d5:36:44:75:ec:84:b2:cb:88:6e:d5:97:e4: ee:60:9b:1a:86:70:37:5c:e9:67:7f:6e:00:a1:69: eb:81:aa:ee:b9:e2:67:ec:6c:e2:7b:bf:ae:50:64: 98:85:b9:54:5c:6a:fd:d3:17:c4:d7:47:61:ed:6e: bb:8d:84:a1:e7:9b:10:33:a1:43:0b:6d:87:81:b9: 8c:59:2c:12:de:04:21:06:a1:14:55:1e:2e:5f:f8: 16:ec:6c:05:4e:de:fd:21:49:e7:ca:b5:c9:10:73: 05:f1:14:3b:40:39:43:e9:b9:56:ef:79:77:1c:fc: da:d4:d0:e0:8f:b2:06:fc:b9:c8:d8:24:5d:b9:88: cc:8c:70:4d:04:de:24:38:52:75:d0:ce:5b:a7:78: 41:65:e3:87:dc:e8:d6:55:55:e3:89:90:87:32:bb: db:e4:2b:2d:9e:41:2e:3f:ee:55:ee:64:fd:d0:ff: dd:e8:33:b0:78:0d:81:a7:0d:74:ac:5d:d0:17:25: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:d620::/32 Signature Algorithm: sha256WithRSAEncryption 4e:5b:ff:5e:77:64:1e:85:b0:30:c9:fd:85:6e:73:05:b6:e3: fc:91:5a:d1:64:df:88:81:26:a6:15:b6:87:f2:12:00:66:3f: 61:28:ee:a2:5a:d2:c1:2b:71:37:11:44:a3:27:34:a4:17:85: 0f:ae:cc:86:95:f0:67:62:60:cf:e9:79:68:33:c3:2f:13:44: 25:df:4a:17:99:6b:08:a1:36:3b:1c:4e:eb:0f:33:c1:26:60: a0:f8:06:1b:72:49:0d:c1:f3:d9:b7:9b:4a:60:d0:f9:15:58: d0:73:49:40:15:5a:c8:b3:84:b4:c6:68:71:cf:60:50:74:c5: af:ca:c7:3d:0d:3d:ce:f2:b8:b3:bf:90:74:9b:ef:e9:e4:1b: d6:09:e0:89:a3:ca:d4:9e:4f:13:d0:e7:88:16:09:da:7e:7c: e9:5c:0f:bf:e7:a2:d7:63:fe:65:2b:d1:43:1a:2d:ec:f1:8d: 68:9c:0a:ab:1b:c5:a8:7b:39:19:0d:e4:0b:f2:f1:f0:33:8b: 9c:b8:7f:55:49:52:ae:b3:47:70:ec:13:b4:5a:e0:7e:c4:2d: 2f:81:06:8d:a2:5c:67:b1:b9:ff:ab:59:66:8a:f3:24:16:09: 11:b7:5c:0a:ef:f0:e3:51:69:5a:16:10:b4:57:aa:4a:80:4f: 78:e9:33:56 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIUA0IT7XC0wy5RCf1Yvx/PgTm4nN0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTc0MFoX DTI3MDUxMDE2MDI0MFowMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1 MjQ5QjFEODRCQTM5OTdDNkU4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMk0hOZsliwynO4rrmRyDyv8mcg+WbrUnEqdfFY6DdOGd+cA3ovpD6ronRZz kqtUv8pGZt/7bmrEE1FNWCLVNkR17ISyy4hu1Zfk7mCbGoZwN1zpZ39uAKFp64Gq 7rniZ+xs4nu/rlBkmIW5VFxq/dMXxNdHYe1uu42EoeebEDOhQwtth4G5jFksEt4E IQahFFUeLl/4FuxsBU7e/SFJ58q1yRBzBfEUO0A5Q+m5Vu95dxz82tTQ4I+yBvy5 yNgkXbmIzIxwTQTeJDhSddDOW6d4QWXjh9zo1lVV44mQhzK72+QrLZ5BLj/uVe5k /dD/3egzsHgNgacNdKxd0BclHqcCAwEAAaOCAmUwggJhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCHKqSlEt0Ax57BSSbHYS6OZfG6CMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8w LzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAdYgMA0GCSqGSIb3DQEBCwUAA4IBAQBOW/9ed2QehbAw yf2FbnMFtuP8kVrRZN+IgSamFbaH8hIAZj9hKO6iWtLBK3E3EUSjJzSkF4UPrsyG lfBnYmDP6XloM8MvE0Ql30oXmWsIoTY7HE7rDzPBJmCg+AYbckkNwfPZt5tKYND5 FVjQc0lAFVrIs4S0xmhxz2BQdMWvysc9DT3O8rizv5B0m+/p5BvWCeCJo8rUnk8T 0OeIFgnafnzpXA+/56LXY/5lK9FDGi3s8Y1onAqrG8WoezkZDeQL8vHwM4ucuH9V SVKus0dw7BO0WuB+xC0vgQaNolxnsbn/q1lmivMkFgkRt1wK7/DjUWlaFhC0V6pK gE946TNW -----END CERTIFICATE-----Generated at Wed May 13 19:58:14 2026 by rpki-client