$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer File: 5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer (raw, json) Hash identifier: EPPETo05ypmaVRtwI+2/evr9klJwpUKh3nlPBnY1Iv8= Subject key identifier: 5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 390AF41F6D36D6E69A9BF74DA5DA130CD5BBB5D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft caRepository: rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:52 +0000 Certificate not after: Mon 10 May 2027 15:48:52 +0000 Subordinate resources: AS: 7536 IP: 122.50.14.0/23 IP: 2402:28a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0a:f4:1f:6d:36:d6:e6:9a:9b:f7:4d:a5:da:13:0c:d5:bb:b5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:52 2026 GMT Not After : May 10 15:48:52 2027 GMT Subject: CN=5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:a0:72:8c:86:97:1a:f3:f0:c7:97:a2:04: a6:5c:f7:ec:cd:43:a2:aa:f9:e8:5a:cc:e7:f5:6b: 0f:cc:fa:c5:d5:1e:21:cf:15:dc:3d:52:b4:df:50: 3c:c1:b8:60:3f:02:0f:2b:c9:f5:bd:31:93:3c:28: 2f:a9:ee:ae:c9:b9:20:c7:63:5d:7d:6f:a0:de:7f: b0:09:f9:ba:3b:35:b3:bf:a3:71:b6:5f:1f:df:32: 45:ea:f1:ca:f9:a1:eb:bb:8d:be:a6:b9:e3:1f:bc: d6:62:29:70:69:36:54:22:8f:16:ba:81:0a:75:19: ae:59:1a:f2:b7:1f:52:f9:e3:71:81:9e:71:13:ab: c2:48:4c:87:b8:fb:32:27:53:86:90:a7:78:ea:da: 86:30:eb:87:ce:52:22:67:6a:25:48:bb:8a:2f:96: dd:a8:1e:ef:b4:10:59:c7:89:9a:26:d9:19:27:25: c3:1a:84:66:e6:2c:87:30:e6:22:5e:c8:67:b2:19: ed:b9:6e:0e:03:ea:7d:ee:e3:93:fa:ea:9e:ba:e0: a4:21:78:32:e0:1a:7b:e3:3e:fc:2e:eb:71:ca:26: a3:b6:3d:de:e3:27:91:4d:4a:c7:47:36:05:07:56: 13:01:d0:d5:dd:6e:27:2e:30:c3:27:d3:eb:e9:5f: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.50.14.0/23 IPv6: 2402:28a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7536 Signature Algorithm: sha256WithRSAEncryption b5:c2:a6:18:10:fc:6a:b3:af:5a:52:a8:aa:ab:8f:26:82:97: f5:11:62:fa:6f:01:47:80:38:43:e3:0f:e6:b2:84:e7:bc:7a: 41:09:96:6a:43:b8:d0:f8:12:93:12:27:d7:3b:96:ed:42:51: 11:5b:4a:40:2c:1a:f9:52:61:66:0e:df:41:84:b8:32:f7:b3: 30:ce:fe:1f:e4:70:5f:62:82:0c:4f:cd:8f:a0:d0:f1:5e:a1: 2c:20:bd:9a:12:27:45:06:e5:1b:89:8c:a3:f3:70:78:2f:ef: e3:54:20:98:28:71:b3:4e:d8:71:2b:a9:4b:e2:9f:18:bd:0c: f3:e7:83:17:da:c8:18:70:c3:e7:1a:3c:e9:92:ec:89:20:15: d9:1b:1a:da:49:3b:ff:d3:86:3b:21:ad:e7:b7:d7:c4:b3:74: 28:dc:8d:8c:05:58:8b:f2:27:29:00:7b:e4:4f:67:3f:d0:47: da:36:c0:02:20:d9:8d:4d:b1:28:04:f8:09:6a:3b:89:80:84: fb:52:f2:9d:57:76:da:68:4b:20:69:9b:68:b2:ec:22:3a:c3: c0:15:9f:5c:5e:51:f4:d0:2f:3d:39:80:3e:49:0a:cf:b4:1e: 22:e8:7f:9a:ad:70:03:be:fb:93:9c:cc:44:2b:60:4d:58:69: 0c:79:62:04 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIUOQr0H2021uaam/dNpdoTDNW7tdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDM1MloX DTI3MDUxMDE1NDg1MlowMzExMC8GA1UEAxMoNUE1OUVERjgzREIzRDlGQzNBREI3 NUQxREJGQjc4MzYyOTI4NDBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRuoHKMhpca8/DHl6IEplz37M1Doqr56FrM5/VrD8z6xdUeIc8V3D1StN9Q PMG4YD8CDyvJ9b0xkzwoL6nursm5IMdjXX1voN5/sAn5ujs1s7+jcbZfH98yRerx yvmh67uNvqa54x+81mIpcGk2VCKPFrqBCnUZrlka8rcfUvnjcYGecROrwkhMh7j7 MidThpCneOrahjDrh85SImdqJUi7ii+W3age77QQWceJmibZGSclwxqEZuYshzDm Il7IZ7IZ7bluDgPqfe7jk/rqnrrgpCF4MuAae+M+/C7rccomo7Y93uMnkU1Kx0c2 BQdWEwHQ1d1uJy4wwyfT6+lfP40CAwEAAaOCApYwggKSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFpZ7fg9s9n8Ott10dv7eDYpKEDJMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElBT0NPUlAv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJ QU9DT1JQLzAvNUE1OUVERjgzREIzRDlGQzNBREI3NUQxREJGQjc4MzYyOTI4NDBD OS5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAXoyDjANBAIAAjAHAwUAJAIooDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIdcDANBgkqhkiG9w0BAQsFAAOCAQEAtcKmGBD8arOv WlKoqquPJoKX9RFi+m8BR4A4Q+MP5rKE57x6QQmWakO40PgSkxIn1zuW7UJREVtK QCwa+VJhZg7fQYS4MvezMM7+H+RwX2KCDE/Nj6DQ8V6hLCC9mhInRQblG4mMo/Nw eC/v41QgmChxs07YcSupS+KfGL0M8+eDF9rIGHDD5xo86ZLsiSAV2Rsa2kk7/9OG OyGt57fXxLN0KNyNjAVYi/InKQB75E9nP9BH2jbAAiDZjU2xKAT4CWo7iYCE+1Ly nVd22mhLIGmbaLLsIjrDwBWfXF5R9NAvPTmAPkkKz7QeIuh/mq1wA777k5zMRCtg TVhpDHliBA== -----END CERTIFICATE-----Generated at Tue May 12 22:45:44 2026 by rpki-client