$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/3E438AFEAFDFBE10E430AFC88401765DAE595626.cer File: 3E438AFEAFDFBE10E430AFC88401765DAE595626.cer (raw, json) Hash identifier: WPELVSAmCpZ5O9sKkhP1pRWsCtshSBBydU8ehG2TLmU= Subject key identifier: 3E:43:8A:FE:AF:DF:BE:10:E4:30:AF:C8:84:01:76:5D:AE:59:56:26 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 2D874A8ED8EAA1CA7E52F7FB441CDA5002A6BFEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TAICOM/0/3E438AFEAFDFBE10E430AFC88401765DAE595626.mft caRepository: rsync://rpkica.twnic.tw/rpki/TAICOM/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Tue 11 Aug 2026 09:56:21 +0000 Certificate not after: Tue 10 Aug 2027 10:01:21 +0000 Subordinate resources: AS: 63896 IP: 2400:71a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 03:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:87:4a:8e:d8:ea:a1:ca:7e:52:f7:fb:44:1c:da:50:02:a6:bf:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Aug 11 09:56:21 2026 GMT Not After : Aug 10 10:01:21 2027 GMT Subject: CN=3E438AFEAFDFBE10E430AFC88401765DAE595626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:28:54:f9:88:a6:a2:c2:05:05:af:ec:90: f9:24:10:d9:96:f6:c2:36:a4:e7:7f:1c:ae:e5:e9: 7d:f6:de:be:8c:5f:fd:01:32:c6:28:5a:3d:cb:69: d8:4d:94:7f:11:d3:ec:d8:59:36:8d:6e:e6:95:fb: 84:ef:bf:c6:07:da:35:85:94:b3:b4:66:b2:00:74: ed:eb:53:1f:42:cb:26:2c:e2:9e:b9:c0:a5:0b:d9: 10:53:e7:79:ac:47:9d:c5:ed:63:c6:eb:21:31:be: f2:aa:48:ca:1a:59:1c:d1:f2:fe:d3:a7:41:f5:3e: 30:c6:b9:30:d8:f3:bc:74:e6:bf:02:4f:50:0b:fa: 81:b2:ea:03:0a:c3:4d:6f:74:3f:7e:e0:6b:05:ef: cb:49:fa:32:52:c0:0b:6c:a5:75:71:29:f5:d3:07: 48:03:cb:31:16:df:21:3e:7d:dd:5c:98:9a:d5:5b: fc:69:bf:f7:10:7a:ed:a7:5c:c1:24:e2:9e:89:3c: 2e:bb:94:f7:38:b8:82:a3:53:81:c7:75:0c:84:90: d8:f4:af:7e:40:92:3f:1a:2a:03:dc:df:47:6d:58: 71:fa:e3:53:77:29:61:ae:b9:a6:07:a8:53:0e:7b: ec:9e:77:44:16:50:4f:c7:4f:d0:a2:21:c5:27:15: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:43:8A:FE:AF:DF:BE:10:E4:30:AF:C8:84:01:76:5D:AE:59:56:26 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TAICOM/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TAICOM/0/3E438AFEAFDFBE10E430AFC88401765DAE595626.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:71a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63896 Signature Algorithm: sha256WithRSAEncryption a7:14:30:ac:e6:9e:7e:90:c5:ff:33:b1:8a:d5:92:b5:79:96: 4a:0d:a2:f0:1e:4b:f2:8d:30:7b:ec:12:1b:c9:e3:7c:18:73: e6:c6:8f:5d:61:cc:38:2b:26:c0:1d:4b:86:fd:67:77:1e:c8: d0:4d:29:2b:95:12:01:50:22:28:1a:e6:bc:f1:5c:a1:08:d1: 7d:e7:77:63:2a:bb:de:4e:ee:6f:87:a5:13:2d:72:54:bb:db: 76:b8:a7:99:6a:95:8d:b6:1d:c0:84:32:30:4e:a9:dc:51:dd: 67:a8:6f:74:f2:6e:a3:e9:37:01:d2:d9:61:5b:2a:c0:46:ae: 53:06:e5:7c:62:d4:fa:5b:e0:4e:21:c8:27:c8:1a:41:e1:e7: e7:c8:2f:e0:58:37:0a:90:59:b2:2a:3d:a6:98:77:a9:4f:16: 94:1c:a2:c9:d8:53:1a:39:6f:e3:f6:fa:1c:f5:f0:cd:50:88: 1c:a7:d9:0e:be:e4:d7:bc:e0:d3:d8:1b:66:c9:2e:56:7a:11: 55:94:8d:88:f4:f7:50:f6:b9:f4:f7:0d:81:5e:c6:cd:f1:f7: b9:55:de:39:d3:9b:dc:a8:10:73:13:76:d5:eb:e4:8a:a7:c4: ef:9b:fd:d7:20:25:b5:e4:cf:b5:4f:0d:8d:84:a2:29:e5:4d: 10:53:80:06 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIULYdKjtjqocp+Uvf7RBzaUAKmv+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDgxMTA5NTYyMVoX DTI3MDgxMDEwMDEyMVowMzExMC8GA1UEAxMoM0U0MzhBRkVBRkRGQkUxMEU0MzBB RkM4ODQwMTc2NURBRTU5NTYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL86KFT5iKaiwgUFr+yQ+SQQ2Zb2wjak538cruXpffbevoxf/QEyxihaPctp 2E2UfxHT7NhZNo1u5pX7hO+/xgfaNYWUs7RmsgB07etTH0LLJizinrnApQvZEFPn eaxHncXtY8brITG+8qpIyhpZHNHy/tOnQfU+MMa5MNjzvHTmvwJPUAv6gbLqAwrD TW90P37gawXvy0n6MlLAC2yldXEp9dMHSAPLMRbfIT593VyYmtVb/Gm/9xB67adc wSTinok8LruU9zi4gqNTgcd1DISQ2PSvfkCSPxoqA9zfR21YcfrjU3cpYa65pgeo Uw577J53RBZQT8dP0KIhxScVRAkCAwEAAaOCAoMwggJ/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD5Div6v374Q5DCvyIQBdl2uWVYmMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQUlDT00vMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJQ09N LzAvM0U0MzhBRkVBRkRGQkUxMEU0MzBBRkM4ODQwMTc2NURBRTU5NTYyNi5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACQAcaAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPmY MA0GCSqGSIb3DQEBCwUAA4IBAQCnFDCs5p5+kMX/M7GK1ZK1eZZKDaLwHkvyjTB7 7BIbyeN8GHPmxo9dYcw4KybAHUuG/Wd3HsjQTSkrlRIBUCIoGua88VyhCNF953dj KrveTu5vh6UTLXJUu9t2uKeZapWNth3AhDIwTqncUd1nqG908m6j6TcB0tlhWyrA Rq5TBuV8YtT6W+BOIcgnyBpB4efnyC/gWDcKkFmyKj2mmHepTxaUHKLJ2FMaOW/j 9voc9fDNUIgcp9kOvuTXvODT2BtmyS5WehFVlI2I9PdQ9rn09w2BXsbN8fe5Vd45 05vcqBBzE3bV6+SKp8Tvm/3XICW15M+1Tw2NhKIp5U0QU4AG -----END CERTIFICATE-----Generated at Sat Aug 15 04:35:57 2026 by rpki-client