$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer File: 5EB6AF02551276002662D6C1ED9C35397EEA2DCF.cer (raw, json) Hash identifier: jKgdnAEQpamadplwTJS+lWssKG8Pwr6vuqL45ytKOR0= Subject key identifier: 5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 7E353337DF568131599CDAA11288546DACBCF17A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft caRepository: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:02 +0000 Certificate not after: Mon 10 May 2027 15:48:02 +0000 Subordinate resources: AS: 150769 IP: 2401:7ba0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:35:33:37:df:56:81:31:59:9c:da:a1:12:88:54:6d:ac:bc:f1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:02 2026 GMT Not After : May 10 15:48:02 2027 GMT Subject: CN=5EB6AF02551276002662D6C1ED9C35397EEA2DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:f8:bf:20:7c:40:7d:14:8b:63:5e:14:8d: f5:67:24:8f:57:c8:35:62:f9:5a:8e:83:83:bd:5b: 5d:1e:39:ef:59:75:e6:fc:ab:84:25:3d:31:fb:08: 98:7e:66:4a:0b:a2:22:86:57:4f:b2:f0:1e:32:0f: 9b:e0:f7:f5:da:00:9d:8a:79:86:3f:be:a7:4e:cd: f7:6a:a6:c9:2f:c3:3d:a2:c9:f3:1a:b2:43:97:c1: fa:81:44:c8:fd:25:55:00:0c:77:ca:50:10:aa:65: 13:4e:fc:1b:7f:67:72:e0:d4:f0:6b:e7:43:1a:6d: 57:a2:cb:a8:d1:59:4a:99:b3:95:95:a6:5e:da:dc: 4a:9e:73:77:1f:03:63:37:9d:6e:32:2a:a4:40:9d: b4:b1:12:46:28:fd:bc:69:81:0b:60:74:7f:d6:44: 5d:c6:19:c3:b3:7d:af:3e:9c:53:fe:14:f6:ce:b1: f3:f4:0c:fb:69:d4:9a:b1:e1:74:db:3d:a8:ae:3f: f4:af:ba:95:44:6c:6c:9a:cb:ad:c6:d1:03:8b:39: 5e:1f:0d:7e:07:f7:59:50:c8:7f:5b:a6:d6:b9:cf: 00:64:4e:9f:a0:05:4b:98:07:50:7f:8f:ee:c5:d8: 89:c4:2c:72:5a:57:a1:f3:f5:75:3d:43:76:dd:5b: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:B6:AF:02:55:12:76:00:26:62:D6:C1:ED:9C:35:39:7E:EA:2D:CF X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/0/5EB6AF02551276002662D6C1ED9C35397EEA2DCF.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:7ba0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 150769 Signature Algorithm: sha256WithRSAEncryption 09:ad:28:4f:09:fa:1f:9b:fd:aa:0a:1c:24:95:a5:ed:f2:e2: 13:16:67:26:c6:a1:2b:c5:d5:a5:ac:f4:54:65:af:6e:72:d2: 1e:4c:00:e3:bf:72:27:58:02:dd:91:58:ec:6a:e9:8c:88:d0: 2b:f2:bf:f0:5f:c9:f2:5c:bd:a7:02:e1:43:3f:f4:a3:48:0a: d9:7c:53:8a:1e:55:82:f0:6a:3c:18:25:82:25:f4:2f:e5:e4: 4b:b7:0f:6e:c1:66:e1:9d:03:b2:80:b5:c9:d4:06:a5:14:53: 10:35:ac:a7:0f:77:39:8a:1c:72:8c:d6:b0:d0:e3:c0:41:a2: 22:4d:2e:2e:c5:94:b1:6e:26:49:eb:7d:38:ca:9d:05:74:1b: 7e:45:e8:89:0a:50:cd:8c:8d:7e:ea:1f:f4:97:df:e1:13:85: 1f:eb:75:b1:53:7f:8c:e6:61:d0:73:8b:1d:a4:35:3a:bf:b7: ae:06:8a:8c:5e:55:d0:7a:9f:c1:22:8f:98:f8:be:d9:24:be: a0:5d:4e:6a:40:34:6c:cf:ff:1b:60:fc:61:a1:6c:c2:f6:73: c3:74:5e:e0:61:2d:8f:a3:de:75:fe:4f:be:1b:3c:5f:82:c6: 56:69:a6:f5:fb:fe:f7:7b:43:d9:47:88:72:f8:84:09:28:47: 78:63:15:03 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUfjUzN99WgTFZnNqhEohUbay88XowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDMwMloX DTI3MDUxMDE1NDgwMlowMzExMC8GA1UEAxMoNUVCNkFGMDI1NTEyNzYwMDI2NjJE NkMxRUQ5QzM1Mzk3RUVBMkRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANd2+L8gfEB9FItjXhSN9Wckj1fINWL5Wo6Dg71bXR4571l15vyrhCU9MfsI mH5mSguiIoZXT7LwHjIPm+D39doAnYp5hj++p07N92qmyS/DPaLJ8xqyQ5fB+oFE yP0lVQAMd8pQEKplE078G39ncuDU8GvnQxptV6LLqNFZSpmzlZWmXtrcSp5zdx8D YzedbjIqpECdtLESRij9vGmBC2B0f9ZEXcYZw7N9rz6cU/4U9s6x8/QM+2nUmrHh dNs9qK4/9K+6lURsbJrLrcbRA4s5Xh8Nfgf3WVDIf1um1rnPAGROn6AFS5gHUH+P 7sXYicQsclpXofP1dT1Ddt1bKCcCAwEAAaOCAokwggKFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF62rwJVEnYAJmLWwe2cNTl+6i3PMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BU1BJUkFQUFMv MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNQ SVJBUFBTLzAvNUVCNkFGMDI1NTEyNzYwMDI2NjJENkMxRUQ5QzM1Mzk3RUVBMkRD Ri5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBe6AwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAkzxMA0GCSqGSIb3DQEBCwUAA4IBAQAJrShPCfofm/2qChwklaXt8uITFmcm xqErxdWlrPRUZa9uctIeTADjv3InWALdkVjsaumMiNAr8r/wX8nyXL2nAuFDP/Sj SArZfFOKHlWC8Go8GCWCJfQv5eRLtw9uwWbhnQOygLXJ1AalFFMQNaynD3c5ihxy jNaw0OPAQaIiTS4uxZSxbiZJ6304yp0FdBt+ReiJClDNjI1+6h/0l9/hE4Uf63Wx U3+M5mHQc4sdpDU6v7euBoqMXlXQep/BIo+Y+L7ZJL6gXU5qQDRsz/8bYPxhoWzC 9nPDdF7gYS2Po951/k++GzxfgsZWaab1+/73e0PZR4hy+IQJKEd4YxUD -----END CERTIFICATE-----Generated at Tue May 12 22:38:47 2026 by rpki-client