$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer File: DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer (raw, json) Hash identifier: KgYkZ4Bam3jKTlAitovb7htGvq/59VWQNHI+3VCr6io= Subject key identifier: DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5A70932DE1932502713F258B7B459D1FFCF92408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft caRepository: rsync://rpkica.twnic.tw/rpki/TISNET/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:57:50 +0000 Certificate not after: Mon 10 May 2027 16:02:50 +0000 Subordinate resources: AS: 7535 IP: 2404:e40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:70:93:2d:e1:93:25:02:71:3f:25:8b:7b:45:9d:1f:fc:f9:24:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:57:50 2026 GMT Not After : May 10 16:02:50 2027 GMT Subject: CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:91:79:48:72:7e:fd:36:68:3c:5a:9f:e5: 6b:23:ff:9c:e1:70:12:44:f7:a3:90:69:72:13:d3: 6b:5c:5c:cb:a8:fd:63:34:43:d4:1b:b6:3f:bb:ee: 64:e9:3e:f0:8d:b9:38:c0:6c:46:38:b6:65:d7:02: d3:70:57:c1:25:de:b6:56:d0:a1:c0:50:79:00:c1: e3:2f:58:73:ed:e6:5a:e3:00:4a:bd:2b:b2:1c:c9: 77:88:55:91:f2:f8:73:60:5a:d0:fd:97:07:fb:b5: 0f:9d:b9:15:4e:4d:11:65:dc:46:fc:50:f5:4d:a3: b4:ea:93:b0:0b:07:1b:c1:5a:3c:90:6e:ca:60:27: e8:b5:0c:10:72:58:d9:91:be:03:f4:a6:90:18:3e: 6e:f9:e5:39:ee:bd:a5:c1:10:da:76:53:b1:bc:13: 10:db:b5:3f:cf:cd:b0:34:bd:1a:a4:19:bf:a4:22: f8:5e:ae:ca:79:f2:fb:2b:a5:d5:66:d0:d2:55:9e: 4f:3b:df:15:9b:d9:b6:8f:fe:3c:0d:19:f7:bd:22: 33:37:cc:07:4a:62:3a:f2:9d:93:19:ee:3b:11:18: 0d:8f:f6:fd:43:7f:9c:c1:10:77:3b:e8:26:77:d1: 6e:6e:0c:43:6f:cc:41:eb:ad:8b:c8:f6:85:4b:5c: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7535 Signature Algorithm: sha256WithRSAEncryption 6f:d4:d3:a9:b3:b1:20:b8:ae:50:b0:d6:d8:6a:cf:1d:a5:cd: 26:7d:82:b1:48:75:77:45:b4:bb:8d:ed:32:75:52:7b:d5:36: 01:66:80:69:7a:99:de:39:90:10:e5:94:10:5d:5f:f0:8b:3f: ed:e2:8a:45:45:99:b3:f6:7f:76:1d:6f:72:d0:fb:2a:2f:76: ef:c4:3d:e0:10:91:ee:dc:39:18:d1:6e:9a:60:51:65:c8:8b: ba:83:e9:7c:df:ca:05:07:48:0c:b9:59:f1:4e:60:b7:a6:68: 28:f3:5c:5c:6d:2c:a5:67:15:f3:0e:f9:97:73:39:67:ed:21: 59:22:2d:2e:66:e8:69:12:3e:ca:7b:c4:60:77:b0:b8:14:ef: 58:2d:86:b9:94:fa:36:98:62:22:5e:6c:c2:72:ec:08:e4:b1: 2c:36:c1:79:b2:46:e8:2d:d9:a5:1d:0f:27:5d:b3:5e:d4:8e: 74:b1:01:a2:7a:23:f8:ed:48:20:cb:17:29:3d:47:9c:b5:4f: bb:ed:1a:36:9e:6c:c2:44:70:52:c5:90:1c:d7:9d:3b:e6:3c: 82:75:ff:ac:b2:cc:ad:25:0d:4d:bd:7b:6c:4c:a5:a0:6d:60: 61:fa:9c:99:8c:d6:ed:1d:6c:71:03:9f:98:e3:2c:32:5c:85: dd:81:24:05 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUWnCTLeGTJQJxPyWLe0WdH/z5JAgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTc1MFoX DTI3MDUxMDE2MDI1MFowMzExMC8GA1UEAxMoREIyNDY3RkQwQTkxNEY5QTc5RDMz NjYzN0FBQjhGMUFFRkFEQUFCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUZkXlIcn79Nmg8Wp/layP/nOFwEkT3o5BpchPTa1xcy6j9YzRD1Bu2P7vu ZOk+8I25OMBsRji2ZdcC03BXwSXetlbQocBQeQDB4y9Yc+3mWuMASr0rshzJd4hV kfL4c2Ba0P2XB/u1D525FU5NEWXcRvxQ9U2jtOqTsAsHG8FaPJBuymAn6LUMEHJY 2ZG+A/SmkBg+bvnlOe69pcEQ2nZTsbwTENu1P8/NsDS9GqQZv6Qi+F6uynny+yul 1WbQ0lWeTzvfFZvZto/+PA0Z970iMzfMB0piOvKdkxnuOxEYDY/2/UN/nMEQdzvo JnfRbm4MQ2/MQeuti8j2hUtcsOkCAwEAAaOCAoIwggJ+MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNskZ/0KkU+aedM2Y3qrjxrvraq9MB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHdBggrBgEFBQcBCwSB0DCBzTAyBggr BgEFBQcwBYYmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9USVNORVQvMC8w XgYIKwYBBQUHMAqGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElTTkVU LzAvREIyNDY3RkQwQTkxNEY5QTc5RDMzNjYzN0FBQjhGMUFFRkFEQUFCRC5tZnQw NwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFACQEDkAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICHW8w DQYJKoZIhvcNAQELBQADggEBAG/U06mzsSC4rlCw1thqzx2lzSZ9grFIdXdFtLuN 7TJ1UnvVNgFmgGl6md45kBDllBBdX/CLP+3iikVFmbP2f3Ydb3LQ+yovdu/EPeAQ ke7cORjRbppgUWXIi7qD6XzfygUHSAy5WfFOYLemaCjzXFxtLKVnFfMO+ZdzOWft IVkiLS5m6GkSPsp7xGB3sLgU71gthrmU+jaYYiJebMJy7AjksSw2wXmyRugt2aUd Dydds17UjnSxAaJ6I/jtSCDLFyk9R5y1T7vtGjaebMJEcFLFkBzXnTvmPIJ1/6yy zK0lDU29e2xMpaBtYGH6nJmM1u0dbHEDn5jjLDJchd2BJAU= -----END CERTIFICATE-----Generated at Tue May 12 22:03:05 2026 by rpki-client