$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/694D566B900CA748266EF03C5A70F9F846AC9E9D.cer File: 694D566B900CA748266EF03C5A70F9F846AC9E9D.cer (raw, json) Hash identifier: P814YOxdRdnf965aIxN3T8urNXbO5SHFBR3UhbrIShM= Subject key identifier: 69:4D:56:6B:90:0C:A7:48:26:6E:F0:3C:5A:70:F9:F8:46:AC:9E:9D Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 0EFC10D8B20B10576D2A8EA19C4754F8317DDD51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.mft caRepository: rsync://rpkica.twnic.tw/rpki/NETEASE/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Mon 11 May 2026 15:49:04 +0000 Certificate not after: Mon 10 May 2027 15:54:04 +0000 Subordinate resources: AS: 131659 IP: 103.131.252.0/22 IP: 2403:d5c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fc:10:d8:b2:0b:10:57:6d:2a:8e:a1:9c:47:54:f8:31:7d:dd:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: May 11 15:49:04 2026 GMT Not After : May 10 15:54:04 2027 GMT Subject: CN=694D566B900CA748266EF03C5A70F9F846AC9E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:6b:b0:1d:10:52:49:d9:e2:f2:ed:63:da: 8a:f9:67:82:87:c9:36:e1:14:af:27:7b:8c:ef:37: 2a:ab:d3:79:e2:54:08:0b:5f:5f:04:c7:82:ca:e8: 27:5a:f6:67:8b:ac:3c:ea:73:37:b2:98:d5:54:5e: 29:99:39:78:0c:77:87:d2:bf:5e:cc:9f:18:51:e6: e1:8e:c0:bc:d9:bd:e6:27:55:17:f3:fd:3e:a9:99: 73:c6:5f:0f:cb:ca:e2:27:a6:4d:09:2d:ec:1e:cd: 4f:84:28:0c:9f:0b:34:a9:13:63:93:dc:94:e6:07: 70:da:0d:d6:a5:05:2b:9a:35:f7:2e:21:b6:70:5c: 4c:16:0b:61:cc:f7:01:fa:65:f2:25:aa:9e:bd:a8: 8d:98:49:8c:a9:fd:0c:29:ba:25:70:89:ac:ac:4d: 60:86:38:01:85:bc:e5:3f:30:79:37:e6:ef:66:21: 86:4c:1c:1d:f2:82:2f:28:c7:28:07:e1:20:9f:07: 92:75:43:90:9d:7a:0a:9b:83:6c:7d:94:f2:6c:45: a7:66:f4:6d:11:01:75:6c:63:2a:c1:94:44:9c:f3: c3:f2:7a:75:ee:2a:48:96:06:a2:ec:3d:b7:d8:1e: c1:d7:31:22:fa:fe:ed:59:10:12:3b:1b:89:f2:62: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:4D:56:6B:90:0C:A7:48:26:6E:F0:3C:5A:70:F9:F8:46:AC:9E:9D X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NETEASE/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NETEASE/0/694D566B900CA748266EF03C5A70F9F846AC9E9D.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.252.0/22 IPv6: 2403:d5c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131659 Signature Algorithm: sha256WithRSAEncryption a8:d3:14:9b:cc:16:fe:23:36:dd:45:2a:f2:87:bc:0e:5e:a2: b2:16:6f:d5:1f:87:ea:e9:d1:30:b7:d1:a3:de:61:ac:c6:a7: 53:3f:0a:37:8e:a0:12:9f:f1:77:ca:1e:8a:f7:4a:ac:ae:f5: 7f:e4:43:4c:94:0a:5b:69:35:39:8d:0f:9a:66:eb:84:6a:20: 28:7a:a4:3d:95:5b:7e:82:ef:97:be:29:13:c7:3d:ab:27:ea: 70:81:14:15:fe:21:58:2c:06:6d:db:e4:d0:ae:75:a3:30:ec: 67:f8:b4:0c:2a:7f:24:35:43:40:e8:4f:71:ad:12:ab:5a:4c: 2e:44:fe:8f:24:a8:d3:9a:52:c8:c2:f1:c1:37:b4:96:f3:98: 1d:7f:cd:6b:7a:91:dc:f5:f1:fb:d2:cb:bb:73:3a:de:97:5c: 41:6e:11:e3:d2:95:c0:b0:cd:75:48:24:bd:b8:ba:79:25:81: ca:7f:49:69:8e:51:4b:0f:d3:c0:89:d8:a6:10:93:65:c7:5a: 61:55:b9:22:01:1c:16:b8:f1:6c:f7:12:ef:2a:44:10:24:4a: 1a:b0:4e:9d:e1:8f:10:71:3f:76:10:96:aa:0f:ef:a9:eb:49: 7b:3d:c8:96:be:a0:bb:dc:16:18:9a:f7:17:be:d2:c3:d0:af: 24:cd:51:b2 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUDvwQ2LILEFdtKo6hnEdU+DF93VEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NDkwNFoX DTI3MDUxMDE1NTQwNFowMzExMC8GA1UEAxMoNjk0RDU2NkI5MDBDQTc0ODI2NkVG MDNDNUE3MEY5Rjg0NkFDOUU5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+Ca7AdEFJJ2eLy7WPaivlngofJNuEUryd7jO83KqvTeeJUCAtfXwTHgsro J1r2Z4usPOpzN7KY1VReKZk5eAx3h9K/XsyfGFHm4Y7AvNm95idVF/P9PqmZc8Zf D8vK4iemTQkt7B7NT4QoDJ8LNKkTY5PclOYHcNoN1qUFK5o19y4htnBcTBYLYcz3 Afpl8iWqnr2ojZhJjKn9DCm6JXCJrKxNYIY4AYW85T8weTfm72YhhkwcHfKCLyjH KAfhIJ8HknVDkJ16CpuDbH2U8mxFp2b0bREBdWxjKsGURJzzw/J6de4qSJYGouw9 t9gewdcxIvr+7VkQEjsbifJi9j0CAwEAAaOCApMwggKPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGlNVmuQDKdIJm7wPFpw+fhGrJ6dMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHfBggrBgEFBQcBCwSB0jCBzzAzBggr BgEFBQcwBYYncnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ORVRFQVNFLzAv MF8GCCsGAQUFBzAKhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FVEVB U0UvMC82OTRENTY2QjkwMENBNzQ4MjY2RUYwM0M1QTcwRjlGODQ2QUM5RTlELm1m dDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCZ4P8MA0EAgACMAcDBQAkA9XAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwICSzANBgkqhkiG9w0BAQsFAAOCAQEAqNMUm8wW/iM23UUq 8oe8Dl6ishZv1R+H6unRMLfRo95hrManUz8KN46gEp/xd8oeivdKrK71f+RDTJQK W2k1OY0PmmbrhGogKHqkPZVbfoLvl74pE8c9qyfqcIEUFf4hWCwGbdvk0K51ozDs Z/i0DCp/JDVDQOhPca0Sq1pMLkT+jySo05pSyMLxwTe0lvOYHX/Na3qR3PXx+9LL u3M63pdcQW4R49KVwLDNdUgkvbi6eSWByn9JaY5RSw/TwInYphCTZcdaYVW5IgEc FrjxbPcS7ypEECRKGrBOneGPEHE/dhCWqg/vqetJez3Ilr6gu9wWGJr3F77Sw9Cv JM1Rsg== -----END CERTIFICATE-----Generated at Wed May 13 19:58:28 2026 by rpki-client