$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/FBBB115B18F0EDC3A5B698AC66B9F2746FB726C7.cer File: FBBB115B18F0EDC3A5B698AC66B9F2746FB726C7.cer (raw, json) Hash identifier: KDddjQ4EKZGwmqmmGiTbH2yoGpdh+rTVb2/wflX44aw= Subject key identifier: FB:BB:11:5B:18:F0:ED:C3:A5:B6:98:AC:66:B9:F2:74:6F:B7:26:C7 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 5B36ACD4F7AB3444432405D725A4E6FEE806C85F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/FUNCROWD/0/FBBB115B18F0EDC3A5B698AC66B9F2746FB726C7.mft caRepository: rsync://rpkica.twnic.tw/rpki/FUNCROWD/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:45:50 +0000 Certificate not after: Mon 10 May 2027 15:50:50 +0000 Subordinate resources: IP: 103.160.250.0/23 IP: 2406:f540::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:36:ac:d4:f7:ab:34:44:43:24:05:d7:25:a4:e6:fe:e8:06:c8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:45:50 2026 GMT Not After : May 10 15:50:50 2027 GMT Subject: CN=FBBB115B18F0EDC3A5B698AC66B9F2746FB726C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:09:69:1d:6f:59:db:42:83:4b:cb:75:44: fc:14:63:64:a0:de:8b:ec:9b:99:1c:fd:5c:fe:e7: c7:df:ea:b6:f2:59:3f:7d:f3:45:5e:03:16:cb:1f: 1c:70:a5:71:6d:61:bd:a2:22:5d:0f:29:b2:85:b7: 1b:94:7c:1c:76:73:cb:37:46:db:5b:1d:7c:57:8f: eb:4b:33:4b:5c:ac:ff:6d:ef:74:48:f4:18:97:29: 35:5f:64:e1:d0:b2:79:c8:2e:24:d3:8a:f9:e8:46: f3:82:3b:8a:5c:df:c6:8f:ba:45:f8:91:5d:a3:25: 67:9c:f0:5e:b5:5b:9a:17:49:a8:a1:15:44:ab:99: a5:2e:eb:e1:7e:0f:53:ed:cd:2a:3a:d9:04:3c:b8: ea:13:28:d3:b5:59:87:82:bc:ba:71:62:82:87:c5: 26:ca:f3:4d:4c:7c:1d:00:d4:f7:86:aa:d8:a9:96: 1c:c8:f4:3d:f5:6f:a5:1d:be:25:18:58:b0:dc:34: 83:f5:31:ee:ef:93:77:68:74:1d:f7:ff:75:d4:7b: b8:2f:d5:2c:99:06:bd:1a:f1:6c:ef:a1:f1:d8:d0: 7c:1e:be:0f:1f:fd:35:16:a8:4b:be:64:95:d3:ff: 6f:63:56:c1:59:3c:ef:03:ea:2f:df:12:22:0b:73: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:BB:11:5B:18:F0:ED:C3:A5:B6:98:AC:66:B9:F2:74:6F:B7:26:C7 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/FUNCROWD/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/FUNCROWD/0/FBBB115B18F0EDC3A5B698AC66B9F2746FB726C7.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.250.0/23 IPv6: 2406:f540::/32 Signature Algorithm: sha256WithRSAEncryption 87:05:37:0a:5b:6e:ee:fb:d5:9d:c3:ec:62:e6:8a:10:80:97: ca:1a:26:88:29:0e:7b:63:1e:bd:36:95:43:93:d4:1f:25:f0: 80:ef:47:94:c0:fe:a7:41:4e:89:34:e3:fc:22:72:38:1a:ac: 32:03:78:73:2b:08:ed:a9:0a:f4:71:c4:9b:5e:c8:b2:ab:5e: 76:b8:35:f3:94:ab:0b:b1:ab:52:03:9f:60:54:fc:08:67:0e: ba:9b:0f:ad:8e:25:2b:a0:36:ee:d2:56:f6:25:7f:a0:e4:6d: b2:bc:b7:d2:47:cc:53:07:ec:17:15:96:de:08:7e:c9:04:01: 2b:68:ce:08:97:25:2d:d9:4c:91:d7:70:23:e3:aa:fd:94:15: 5c:24:9e:21:55:fb:e4:fe:01:25:e6:57:c0:24:75:85:b6:ab: 1f:8a:de:f6:5b:14:e2:3e:36:3d:f8:6a:d3:61:2f:36:31:61: ba:ed:27:b4:24:4a:96:74:45:aa:b7:86:ba:b9:2a:f2:7b:ee: 25:ba:a8:95:26:0e:b2:b4:0f:b7:ca:7d:f1:5b:d3:b5:34:d2: 79:5f:cf:1f:bc:49:31:2b:3b:e2:5b:e3:14:36:1c:d9:3f:65: 21:f8:40:64:f2:d8:b3:77:81:d7:a8:79:cb:c1:b9:21:1c:79: d6:ad:a3:d2 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIUWzas1PerNERDJAXXJaTm/ugGyF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDU1MFoX DTI3MDUxMDE1NTA1MFowMzExMC8GA1UEAxMoRkJCQjExNUIxOEYwRURDM0E1QjY5 OEFDNjZCOUYyNzQ2RkI3MjZDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKyCWkdb1nbQoNLy3VE/BRjZKDei+ybmRz9XP7nx9/qtvJZP33zRV4DFssf HHClcW1hvaIiXQ8psoW3G5R8HHZzyzdG21sdfFeP60szS1ys/23vdEj0GJcpNV9k 4dCyecguJNOK+ehG84I7ilzfxo+6RfiRXaMlZ5zwXrVbmhdJqKEVRKuZpS7r4X4P U+3NKjrZBDy46hMo07VZh4K8unFigofFJsrzTUx8HQDU94aq2KmWHMj0PfVvpR2+ JRhYsNw0g/Ux7u+Td2h0Hff/ddR7uC/VLJkGvRrxbO+h8djQfB6+Dx/9NRaoS75k ldP/b2NWwVk87wPqL98SIgtzqQECAwEAAaOCAnkwggJ1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPu7EVsY8O3DpbaYrGa58nRvtybHMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHhBggrBgEFBQcBCwSB1DCB0TA0Bggr BgEFBQcwBYYocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9GVU5DUk9XRC8w LzBgBggrBgEFBQcwCoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9GVU5D Uk9XRC8wL0ZCQkIxMTVCMThGMEVEQzNBNUI2OThBQzY2QjlGMjc0NkZCNzI2Qzcu bWZ0MDcGCCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnoPowDQQCAAIwBwMFACQG9UAwDQYJKoZIhvcN AQELBQADggEBAIcFNwpbbu771Z3D7GLmihCAl8oaJogpDntjHr02lUOT1B8l8IDv R5TA/qdBTok04/wicjgarDIDeHMrCO2pCvRxxJteyLKrXna4NfOUqwuxq1IDn2BU /AhnDrqbD62OJSugNu7SVvYlf6DkbbK8t9JHzFMH7BcVlt4IfskEAStozgiXJS3Z TJHXcCPjqv2UFVwkniFV++T+ASXmV8AkdYW2qx+K3vZbFOI+Nj34atNhLzYxYbrt J7QkSpZ0Raq3hrq5KvJ77iW6qJUmDrK0D7fKffFb07U00nlfzx+8STErO+Jb4xQ2 HNk/ZSH4QGTy2LN3gdeoecvBuSEcedato9I= -----END CERTIFICATE-----Generated at Tue May 12 22:32:32 2026 by rpki-client