$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer File: 9B5DA40B0F23621450755917A456431F689EB049.cer (raw, json) Hash identifier: hu07u1P7fiv4cCYL1F13IwMuVoToPTDwYysJMdKBA4I= Subject key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5599632F148FDBA3C973AEB77694C7092485D33C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft caRepository: rsync://rpkica.twnic.tw/rpki/CLARK/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:44:17 +0000 Certificate not after: Mon 10 May 2027 15:49:17 +0000 Subordinate resources: AS: 63910 IP: 103.130.236.0/23 IP: 2400:f420::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:99:63:2f:14:8f:db:a3:c9:73:ae:b7:76:94:c7:09:24:85:d3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:44:17 2026 GMT Not After : May 10 15:49:17 2027 GMT Subject: CN=9B5DA40B0F23621450755917A456431F689EB049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:b5:c3:62:d9:07:af:b0:83:6e:0e:4d:01: db:4e:3c:32:b5:ed:ab:0d:99:34:2a:9a:5e:90:3b: 0d:5f:59:ab:59:57:59:a8:71:a8:26:da:b1:84:0e: 59:38:9a:47:5a:98:18:77:5f:e9:de:dc:0b:7a:fb: 02:17:9b:a8:57:92:11:a3:24:da:f5:53:54:ef:22: 93:1a:86:b8:88:a3:d1:09:71:0a:72:ee:4d:e4:72: 0e:bb:9c:3a:77:7d:9d:22:b0:3e:32:d3:11:b8:41: eb:d6:93:8f:5a:5f:56:50:21:24:d7:fd:ed:6a:93: c8:63:1c:ff:a2:7c:f4:73:58:2a:d5:b7:34:d9:d3: cb:88:c2:f2:5d:85:68:ca:3e:f8:df:6d:11:83:de: b9:7d:55:64:58:ce:6d:a6:6d:dc:e5:a6:33:20:67: 0c:50:14:0d:69:1f:97:84:2a:ef:b5:d0:11:30:78: 80:ce:d8:f5:0e:e5:ac:54:ab:fd:24:3e:18:76:b7: 1f:a3:9f:0e:53:fe:a6:61:47:bf:4d:81:b8:63:8e: ca:e4:fd:83:04:ff:8f:87:aa:7c:11:53:0a:e0:72: f2:2e:ff:79:02:0b:97:d6:df:b2:0d:99:78:2f:4c: 23:4e:25:45:59:d3:75:30:07:a7:31:8a:b9:03:b6: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.236.0/23 IPv6: 2400:f420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63910 Signature Algorithm: sha256WithRSAEncryption 4f:dd:d8:9e:57:80:26:09:55:32:a3:1f:32:49:de:82:89:4e: d0:ea:62:73:77:0d:81:0c:a1:60:f9:95:b2:69:34:74:df:90: 15:df:36:99:7d:2e:8d:aa:18:fb:ec:72:30:19:61:d3:a3:4a: 17:5c:09:b1:0f:c3:8e:f3:67:40:68:b3:97:6f:78:be:d5:80: cb:74:e0:4d:d4:e0:a6:64:f8:98:bc:78:9c:0c:f9:33:06:fc: 0d:38:96:ff:d1:f3:47:34:3a:50:bd:00:9f:b3:47:83:2f:8f: 8e:c8:9c:b8:f0:98:5d:91:f6:3e:83:52:2b:bb:37:9d:ea:f3: fc:f6:cd:4c:e4:f9:25:39:7b:51:38:f2:97:7f:08:fe:f7:74: 57:df:bd:ea:13:15:0e:ff:c9:e0:54:81:be:61:92:76:8a:28: 83:27:cd:7b:25:c5:02:60:51:00:5a:69:9b:e2:c1:df:78:de: ce:8b:69:e0:3e:ec:90:98:10:54:58:c0:6a:ab:78:87:29:a3: 50:1a:fd:ab:78:9e:40:99:ad:e6:30:51:85:20:f0:b3:27:b1: 0c:fd:3a:72:c1:6b:34:e2:e1:53:ef:b8:72:56:2c:b5:01:c6: 0b:2b:64:ac:d8:a1:0a:0b:96:82:1b:61:05:ed:a5:1e:0b:fc: b1:e4:66:b5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUVZljLxSP26PJc663dpTHCSSF0zwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDQxN1oX DTI3MDUxMDE1NDkxN1owMzExMC8GA1UEAxMoOUI1REE0MEIwRjIzNjIxNDUwNzU1 OTE3QTQ1NjQzMUY2ODlFQjA0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYLtcNi2QevsINuDk0B2048MrXtqw2ZNCqaXpA7DV9Zq1lXWahxqCbasYQO WTiaR1qYGHdf6d7cC3r7AhebqFeSEaMk2vVTVO8ikxqGuIij0QlxCnLuTeRyDruc Ond9nSKwPjLTEbhB69aTj1pfVlAhJNf97WqTyGMc/6J89HNYKtW3NNnTy4jC8l2F aMo++N9tEYPeuX1VZFjObaZt3OWmMyBnDFAUDWkfl4Qq77XQETB4gM7Y9Q7lrFSr /SQ+GHa3H6OfDlP+pmFHv02BuGOOyuT9gwT/j4eqfBFTCuBy8i7/eQILl9bfsg2Z eC9MI04lRVnTdTAHpzGKuQO2e60CAwEAAaOCAo8wggKLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJtdpAsPI2IUUHVZF6RWQx9onrBJMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DTEFSSy8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DTEFSSy8w LzlCNURBNDBCMEYyMzYyMTQ1MDc1NTkxN0E0NTY0MzFGNjg5RUIwNDkubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnguwwDQQCAAIwBwMFACQA9CAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAPmmMA0GCSqGSIb3DQEBCwUAA4IBAQBP3dieV4AmCVUyox8ySd6C iU7Q6mJzdw2BDKFg+ZWyaTR035AV3zaZfS6Nqhj77HIwGWHTo0oXXAmxD8OO82dA aLOXb3i+1YDLdOBN1OCmZPiYvHicDPkzBvwNOJb/0fNHNDpQvQCfs0eDL4+OyJy4 8JhdkfY+g1Iruzed6vP89s1M5PklOXtROPKXfwj+93RX373qExUO/8ngVIG+YZJ2 iiiDJ817JcUCYFEAWmmb4sHfeN7Oi2ngPuyQmBBUWMBqq3iHKaNQGv2reJ5Ama3m MFGFIPCzJ7EM/TpywWs04uFT77hyViy1AcYLK2Ss2KEKC5aCG2EF7aUeC/yx5Ga1 -----END CERTIFICATE-----Generated at Tue May 12 22:33:20 2026 by rpki-client