$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer (raw, json) Hash identifier: p653fyhIJFbe6cgYcfwpPqlDMoUq3o4dYV0cPAQUbNg= Subject key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Certificate serial: 664A220A8A4EA029044B461ABD7646ACEC1618C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Manifest: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft caRepository: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:42:48 +0000 Certificate not after: Mon 10 May 2027 15:47:48 +0000 Subordinate resources: IP: 144.79.236.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4a:22:0a:8a:4e:a0:29:04:4b:46:1a:bd:76:46:ac:ec:16:18:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3 Validity Not Before: May 11 15:42:48 2026 GMT Not After : May 10 15:47:48 2027 GMT Subject: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:72:1b:70:12:10:02:65:bf:b2:c5:af:5b: ce:86:3d:ae:ce:e0:a3:49:21:3e:2b:1a:44:a3:18: 9c:b0:c0:24:0a:c7:58:62:9e:88:19:ac:da:23:90: 55:40:0c:bd:a8:7c:ae:32:7a:31:5e:69:77:9a:22: 5e:b8:cb:80:ec:49:74:17:e3:7e:a6:45:b3:4e:4e: f2:05:83:31:c5:1f:9f:9a:6d:00:8d:60:49:d1:e4: b0:43:52:3e:71:d0:ff:cb:c3:07:f1:8d:a5:bd:b0: 59:8c:90:bb:ad:d7:28:ff:d9:b2:d7:a8:ed:e5:48: ce:4e:99:4c:2b:27:27:62:43:af:75:e4:db:5e:1f: 91:6e:11:35:9a:54:b1:1f:23:b3:7c:ad:97:ed:a1: 6f:74:bf:b0:e8:df:4d:ac:e1:fa:51:0c:9a:c2:fa: 5b:d2:2b:3e:0e:2d:45:34:ff:28:84:6f:16:f9:d2: b4:01:21:61:f9:b7:9e:9b:05:37:2d:99:0a:65:8e: 55:5e:dd:66:7b:33:57:4f:87:0c:59:da:ab:42:d8: 7a:3e:a1:fb:f3:60:47:17:f6:dd:9d:ac:14:e0:32: 60:e1:95:85:8a:a6:c4:10:50:d8:94:c9:12:dc:27: 1b:d3:c3:81:ba:43:0f:15:66:67:d2:f8:4f:ae:4a: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Authority Key Identifier: keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.236.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:65:ce:18:01:e1:40:11:68:1f:5a:2f:29:bd:f6:4b:d5:79: a7:e4:26:ab:1a:dc:0f:81:54:d8:a6:f9:cf:cc:d3:bb:ae:c5: 51:0c:e8:52:f5:a6:a8:f6:29:96:72:8f:1d:23:30:a2:ba:d7: a9:70:0b:39:02:d7:24:c8:2b:27:eb:e2:a0:e2:7a:26:4b:f4: fa:33:fe:19:75:e0:ac:fb:81:e8:ef:1a:b1:44:3c:b3:7f:1f: 66:3c:8e:a1:0c:65:a0:2c:e0:f0:72:06:26:35:c1:a3:65:0f: 54:48:e3:99:e5:f3:94:ed:21:e3:d3:13:2b:50:20:c4:5b:1f: 3e:8e:20:7b:fc:f0:d5:4e:bb:21:e2:fc:3d:58:5e:de:75:a0: c1:2e:9b:f2:69:64:f3:dc:32:e9:ba:41:2a:63:9f:cb:a1:1b: 03:97:64:4b:55:06:35:69:dd:c9:dc:47:7c:31:12:71:df:5b: 74:3b:37:bf:8c:29:dc:29:58:49:7a:22:13:1c:15:e8:dd:9a: e6:7b:8d:7d:c0:eb:b6:90:6f:cd:bb:c2:fa:12:bf:96:2b:8a: 6e:b2:ab:58:2b:ec:78:a5:08:33:f4:b0:c1:25:cd:16:54:54: 20:21:4c:79:4c:b4:a8:60:9f:9e:e5:f0:1e:85:04:76:a3:50: c8:83:5d:d7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUZkoiCopOoCkES0YavXZGrOwWGMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0 MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDI0OFoX DTI3MDUxMDE1NDc0OFowMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0 ODdCNTBDNUVDRDNCNkRFMjM0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+VchtwEhACZb+yxa9bzoY9rs7go0khPisaRKMYnLDAJArHWGKeiBms2iOQ VUAMvah8rjJ6MV5pd5oiXrjLgOxJdBfjfqZFs05O8gWDMcUfn5ptAI1gSdHksENS PnHQ/8vDB/GNpb2wWYyQu63XKP/Zsteo7eVIzk6ZTCsnJ2JDr3Xk214fkW4RNZpU sR8js3ytl+2hb3S/sOjfTazh+lEMmsL6W9IrPg4tRTT/KIRvFvnStAEhYfm3npsF Ny2ZCmWOVV7dZnszV0+HDFnaq0LYej6h+/NgRxf23Z2sFOAyYOGVhYqmxBBQ2JTJ EtwnG9PDgbpDDxVmZ9L4T65K0uMCAwEAAaOCAmowggJmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNvgal/FpeKJrOtIe1DF7NO23iNMMB8GA1UdIwQYMBaAFMPy erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8x LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RF Uk5FVC8xL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGQT+wwDQYJKoZIhvcNAQELBQADggEBAFxlzhgB 4UARaB9aLym99kvVeafkJqsa3A+BVNim+c/M07uuxVEM6FL1pqj2KZZyjx0jMKK6 16lwCzkC1yTIKyfr4qDieiZL9Poz/hl14Kz7gejvGrFEPLN/H2Y8jqEMZaAs4PBy BiY1waNlD1RI45nl85TtIePTEytQIMRbHz6OIHv88NVOuyHi/D1YXt51oMEum/Jp ZPPcMum6QSpjn8uhGwOXZEtVBjVp3cncR3wxEnHfW3Q7N7+MKdwpWEl6IhMcFejd muZ7jX3A67aQb827wvoSv5Yrim6yq1gr7HilCDP0sMElzRZUVCAhTHlMtKhgn57l 8B6FBHajUMiDXdc= -----END CERTIFICATE-----Generated at Tue May 12 22:32:58 2026 by rpki-client