$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer File: 5677B1A39333120442A665B3D25D187209211BAE.cer (raw, json) Hash identifier: sp/A9+tVlIrxcfvx0bm+VkfiWFeVQR6IIOlzPhBEfKc= Subject key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 4F092CAED9435202EEB782F2143EB42F5E8CE921 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft caRepository: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:49:03 +0000 Certificate not after: Mon 10 May 2027 15:54:03 +0000 Subordinate resources: IP: 103.158.186.0/23 IP: 2406:bfc0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:09:2c:ae:d9:43:52:02:ee:b7:82:f2:14:3e:b4:2f:5e:8c:e9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:49:03 2026 GMT Not After : May 10 15:54:03 2027 GMT Subject: CN=5677B1A39333120442A665B3D25D187209211BAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:62:2f:88:71:14:d5:43:64:7d:bd:84:13: fe:2c:21:53:3c:3d:67:23:0d:db:86:02:ce:52:db: 01:8d:ab:9f:1a:6e:10:63:cb:37:32:10:63:11:73: 7a:8a:7e:34:62:42:cd:30:3f:1d:e7:9a:a9:e4:12: ed:99:fb:1e:e5:61:be:16:dc:18:6f:b4:85:20:fc: 3a:95:48:02:77:8c:3e:cb:43:71:58:2c:5a:9b:f9: db:fc:7c:e3:96:a8:63:5d:d7:0b:10:7a:2f:a8:ea: e9:d8:ca:a3:bd:cf:25:9d:86:cd:34:cd:31:5d:27: 6c:7a:a8:e5:b5:9f:d8:75:d9:61:1f:51:3e:d4:82: bb:b2:fc:b3:a9:90:78:92:52:dd:81:a1:1c:e2:91: ed:6d:59:c1:32:24:66:25:7c:d9:d3:b4:4e:64:ae: 45:bf:c0:e7:7d:b3:08:be:47:1e:dc:a2:e6:0d:cd: a9:d2:82:aa:b3:5c:0f:5c:9d:87:ea:f8:35:c1:e8: f4:fd:11:53:59:74:4c:e2:f2:20:b4:50:9c:42:19: 84:04:69:9a:ef:3a:50:54:45:d8:6f:ec:4d:4b:87: 68:81:95:84:7e:66:0d:fe:b5:2d:82:be:a5:4b:65: 93:15:9a:03:a5:d7:70:a4:fa:c1:e0:e6:f8:78:90: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.186.0/23 IPv6: 2406:bfc0::/32 Signature Algorithm: sha256WithRSAEncryption 47:d3:53:8c:04:48:29:c3:4a:b5:db:31:b6:31:a6:b0:ae:dd: 06:00:a3:05:44:55:ad:c5:d4:cb:c6:da:2e:01:7c:18:26:93: 11:78:7f:f7:ba:81:ae:63:0b:20:82:1b:70:8c:87:94:a9:a8: f6:5e:5f:b4:2c:59:1a:d7:c3:28:9c:99:ca:f7:4d:40:aa:8a: 43:ca:55:42:55:fd:30:3b:5d:ee:fa:06:84:52:f4:d6:8e:41: c8:76:9d:3f:c1:9c:b2:5f:21:c3:13:3b:f8:9a:f8:63:3c:bf: ec:19:e2:e8:8c:07:c9:bb:32:6d:ad:c5:bc:bb:de:10:56:91: 0a:83:a3:c4:e5:50:58:4e:0b:bb:1c:1e:a8:7a:ce:5a:a5:c3: 61:7d:0c:aa:52:8b:e8:c6:50:d0:e0:a3:9f:13:1c:c3:2c:98: c6:47:ab:68:b5:95:80:d1:c7:bc:30:93:fd:a8:3c:8e:3a:46: 76:7f:50:62:2f:44:7f:5b:1d:64:47:8b:12:ad:5e:72:8b:3f: ad:22:a6:ef:f6:01:40:19:c4:5d:b3:aa:cd:1e:fc:a4:0e:0d: 8a:f0:ff:ba:af:38:3c:b1:fb:3d:5e:f1:f8:61:1d:91:de:19: 16:2f:02:67:1e:8c:d3:aa:08:22:98:e2:43:fb:a4:01:a6:87: e4:16:34:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUTwksrtlDUgLut4LyFD60L16M6SEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDkwM1oX DTI3MDUxMDE1NTQwM1owMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2 NUIzRDI1RDE4NzIwOTIxMUJBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN47Yi+IcRTVQ2R9vYQT/iwhUzw9ZyMN24YCzlLbAY2rnxpuEGPLNzIQYxFz eop+NGJCzTA/HeeaqeQS7Zn7HuVhvhbcGG+0hSD8OpVIAneMPstDcVgsWpv52/x8 45aoY13XCxB6L6jq6djKo73PJZ2GzTTNMV0nbHqo5bWf2HXZYR9RPtSCu7L8s6mQ eJJS3YGhHOKR7W1ZwTIkZiV82dO0TmSuRb/A532zCL5HHtyi5g3NqdKCqrNcD1yd h+r4NcHo9P0RU1l0TOLyILRQnEIZhARpmu86UFRF2G/sTUuHaIGVhH5mDf61LYK+ pUtlkxWaA6XXcKT6weDm+HiQnWMCAwEAAaOCAncwggJzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFZ3saOTMxIEQqZls9JdGHIJIRuuMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ORUJVTEFYLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVM QVgvMC81Njc3QjFBMzkzMzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ566MA0EAgACMAcDBQAkBr/AMA0GCSqGSIb3DQEB CwUAA4IBAQBH01OMBEgpw0q12zG2Maawrt0GAKMFRFWtxdTLxtouAXwYJpMReH/3 uoGuYwsgghtwjIeUqaj2Xl+0LFka18MonJnK901AqopDylVCVf0wO13u+gaEUvTW jkHIdp0/wZyyXyHDEzv4mvhjPL/sGeLojAfJuzJtrcW8u94QVpEKg6PE5VBYTgu7 HB6oes5apcNhfQyqUovoxlDQ4KOfExzDLJjGR6totZWA0ce8MJP9qDyOOkZ2f1Bi L0R/Wx1kR4sSrV5yiz+tIqbv9gFAGcRds6rNHvykDg2K8P+6rzg8sfs9XvH4YR2R 3hkWLwJnHozTqggimOJD+6QBpofkFjTk -----END CERTIFICATE-----Generated at Wed May 13 19:58:26 2026 by rpki-client