$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.cer (raw, json) Hash identifier: 5bze+ynPm/f3TpHco4PIrbIdZmvCQ2365OxEx9pb+ro= Subject key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 58A6EF12209ABA2C267720173EDB1911257EE9C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft caRepository: rsync://rpkica.twnic.tw/rpki/BHIS/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:43:17 +0000 Certificate not after: Mon 10 May 2027 15:48:17 +0000 Subordinate resources: AS: 152616 IP: 2402:4760::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a6:ef:12:20:9a:ba:2c:26:77:20:17:3e:db:19:11:25:7e:e9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:43:17 2026 GMT Not After : May 10 15:48:17 2027 GMT Subject: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:70:46:0d:de:50:24:01:64:06:ac:91:20: e3:7a:e5:69:8b:ef:f0:8d:74:57:8d:a0:dc:31:31: aa:b7:36:f3:a8:79:0f:30:5b:26:9e:38:dc:2d:f7: bd:c5:42:95:12:07:06:18:b9:31:58:55:5d:f4:ea: fc:9c:cc:42:cf:04:76:06:6c:ee:7f:9a:de:e6:89: 87:06:ed:96:16:01:ff:e5:9e:dc:f6:45:35:5d:d6: 3f:fb:f8:e8:2c:04:a5:18:54:80:77:ce:12:3d:5d: 49:7f:b6:42:fe:c2:13:a1:1b:69:56:f2:17:b4:3c: 1a:7a:1b:ef:7c:57:a1:36:bc:a9:d3:a8:fd:eb:c6: 15:94:97:7b:b4:99:b6:37:a9:86:df:3f:0b:53:8d: b2:35:7f:04:a5:02:80:cd:9f:0a:2d:30:7a:15:a5: 74:f4:bd:d5:ea:49:11:82:3d:a0:02:68:47:b5:9d: 98:c8:54:44:38:8d:cd:cd:23:fc:92:5c:13:00:65: fe:63:aa:48:8c:d0:9a:9e:60:38:b2:99:29:7e:f3: 40:f2:8f:58:09:31:63:e3:9b:ff:f5:30:6d:3b:5b: 41:9e:21:bf:5e:b2:26:ce:f5:d3:9f:c0:62:f6:21: 9a:2f:a0:db:32:a3:4b:d3:76:97:12:7c:59:05:47: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4760::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 152616 Signature Algorithm: sha256WithRSAEncryption 94:8b:57:ef:de:a5:b4:13:4f:ce:2f:18:9e:89:a8:ad:99:7b: 9b:cf:76:af:9b:0d:a6:9a:89:40:3d:3e:d0:6f:f1:73:78:66: 55:b0:85:44:24:78:68:a5:0c:3b:38:9f:60:d7:15:47:c2:a9: 60:e3:32:42:06:aa:34:4a:20:1f:7c:46:27:8d:39:05:01:20: f5:d0:5b:68:36:d3:3c:1a:44:80:4e:f3:e0:a5:01:14:ec:e1: ae:cc:81:c9:8a:32:e0:f7:53:d0:ec:4c:be:33:52:fe:43:86: c2:aa:b3:dc:ef:e6:79:b9:a7:96:2d:ab:a1:d1:d4:78:77:38: 63:8d:32:14:20:e8:85:59:b7:ae:ad:d7:f4:92:1d:66:f5:39: 8b:2a:45:73:11:cd:ce:55:38:96:4f:7d:f5:3c:85:7a:91:89: 70:86:73:40:66:3b:2d:04:e0:73:20:52:32:a2:16:48:bf:70: 90:41:54:12:a7:d4:61:7e:82:84:7a:b5:56:3c:2d:e6:d3:4b: d0:4b:8a:85:ac:a7:a5:27:e9:e7:11:17:51:78:6b:84:85:a5: c9:e1:b0:62:36:15:8a:b4:9f:f9:6a:46:b3:ad:69:e5:25:d3: f8:f9:79:02:ee:8a:eb:40:d5:89:e7:fb:ff:ef:a2:d4:58:c9: 33:e1:8c:c1 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIUWKbvEiCauiwmdyAXPtsZESV+6cMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDMxN1oX DTI3MDUxMDE1NDgxN1owMzExMC8GA1UEAxMoNjcxREE5NUY2N0Q3MDNBOEVCQzMz MzBFNzgyNzE3Njc5QUU1RTlGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ01cEYN3lAkAWQGrJEg43rlaYvv8I10V42g3DExqrc286h5DzBbJp443C33 vcVClRIHBhi5MVhVXfTq/JzMQs8EdgZs7n+a3uaJhwbtlhYB/+We3PZFNV3WP/v4 6CwEpRhUgHfOEj1dSX+2Qv7CE6EbaVbyF7Q8Gnob73xXoTa8qdOo/evGFZSXe7SZ tjepht8/C1ONsjV/BKUCgM2fCi0wehWldPS91epJEYI9oAJoR7WdmMhURDiNzc0j /JJcEwBl/mOqSIzQmp5gOLKZKX7zQPKPWAkxY+Ob//UwbTtbQZ4hv16yJs7105/A YvYhmi+g2zKjS9N2lxJ8WQVH6q8CAwEAAaOCAn8wggJ7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGcdqV9n1wOo68MzDngnF2ea5en9MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9CSElTLzAvMFwG CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMC82 NzFEQTk1RjY3RDcwM0E4RUJDMzMzMEU3ODI3MTc2NzlBRTVFOUZELm1mdDA3Bggr BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAJAJHYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCVCgwDQYJ KoZIhvcNAQELBQADggEBAJSLV+/epbQTT84vGJ6JqK2Ze5vPdq+bDaaaiUA9PtBv 8XN4ZlWwhUQkeGilDDs4n2DXFUfCqWDjMkIGqjRKIB98RieNOQUBIPXQW2g20zwa RIBO8+ClARTs4a7MgcmKMuD3U9DsTL4zUv5DhsKqs9zv5nm5p5Ytq6HR1Hh3OGON MhQg6IVZt66t1/SSHWb1OYsqRXMRzc5VOJZPffU8hXqRiXCGc0BmOy0E4HMgUjKi Fki/cJBBVBKn1GF+goR6tVY8LebTS9BLioWsp6Un6ecRF1F4a4SFpcnhsGI2FYq0 n/lqRrOtaeUl0/j5eQLuiutA1Ynn+//votRYyTPhjME= -----END CERTIFICATE-----Generated at Tue May 12 22:49:45 2026 by rpki-client