$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0SSAw3OkqF1efXJZMUQ137NEBEA.cer File: 0SSAw3OkqF1efXJZMUQ137NEBEA.cer (raw, json) Hash identifier: rNi980l8tKqtAbmjpFCadQY9/qhptQW4StmcHegf6bQ= Subject key identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:00 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 18043 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15456 (0x3c60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:15:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D12480C373A4A85D5E7D7259314435DFB3440440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:97:33:72:99:25:93:68:76:6c:82:8b:5e: 33:b4:e5:e0:df:39:56:c1:24:d7:26:3d:02:51:c1: e7:af:b2:e3:3a:5d:80:71:26:85:e1:8f:0e:a6:9f: 40:b5:d2:c0:da:b2:fe:c5:8f:b3:80:3b:51:71:d1: 4b:1d:a1:c6:6d:31:77:65:55:d2:81:cc:2b:59:a6: 7b:34:7f:af:56:5e:fb:15:f3:2f:38:ba:b1:24:d7: 9e:e4:d3:cf:f7:60:2b:31:9e:2c:be:0c:c1:43:71: e2:73:73:6d:da:85:f9:59:3b:42:a0:92:c1:76:ed: 33:a6:0c:23:78:a4:d0:5a:a6:de:38:26:83:3a:f3: 00:3b:10:cd:d9:2a:6e:f5:66:ea:a8:61:60:1e:44: 14:46:c6:2f:c9:2b:29:79:66:27:38:83:87:45:67: f8:89:2b:dc:53:b6:f9:45:fe:02:7b:1b:c0:f3:1e: 89:dd:76:18:fa:79:37:7a:4d:27:02:df:3f:2b:72: 37:27:7e:ad:cb:94:7f:b6:fa:65:89:cc:1c:2d:d8: 66:99:54:6c:8f:ad:4d:85:80:ef:34:0a:62:20:ca: 9a:c7:a9:41:e5:9a:ae:db:e4:26:0e:46:00:27:a7: 34:18:27:17:4a:56:a6:f6:fe:3e:84:0e:93:1e:b9: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18043 Signature Algorithm: sha256WithRSAEncryption 84:00:d7:7d:51:e7:08:8d:f0:e5:fc:af:b4:66:e2:c2:2b:f9: 8b:7c:b7:fb:ae:02:a0:ef:3a:3a:27:fe:85:ef:44:00:9c:d8: 4b:ee:9f:55:3a:b0:31:69:ff:7b:7f:d7:94:4c:67:a1:6d:a1: 32:e1:69:12:96:45:e9:48:92:a0:a0:a5:66:1b:4f:3a:19:6c: e1:e7:4b:4f:b7:e4:e8:65:b6:a3:e7:92:79:5c:02:e0:8d:fe: de:58:51:c8:bc:ed:76:18:ed:31:c7:57:9f:8d:21:08:13:d0: 5e:d4:9a:42:ca:2f:fe:42:48:a0:a9:01:92:2c:b9:36:d3:e8: 19:c5:c6:a0:5d:51:0d:a3:e6:5f:d8:d8:25:a7:90:0c:8c:7e: f8:4c:e1:af:9f:0d:90:72:a5:45:53:a3:92:ac:a8:79:22:43: 0a:21:2b:58:63:27:9c:79:58:c1:e7:aa:5e:69:ea:c9:e4:ee: 9b:38:38:94:74:28:32:af:38:05:fd:21:aa:fd:04:d9:1b:6c: 17:a1:ef:e0:0f:a9:2a:81:b9:5b:23:fe:dc:41:75:3c:38:fd: c8:92:70:ee:16:9a:d5:67:48:26:f9:ad:6e:ab:54:b2:56:ef: 56:95:87:d0:8e:18:94:dd:46:ce:85:84:8a:98:88:b1:6c:42: 4a:22:31:ce -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgICPGAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTUwMFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRDEyNDgwQzM3M0E0QTg1RDVFN0Q3MjU5MzE0NDM1REZCMzQ0MDQ0 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMH3lzNymSWTaHZsgote M7Tl4N85VsEk1yY9AlHB56+y4zpdgHEmheGPDqafQLXSwNqy/sWPs4A7UXHRSx2h xm0xd2VV0oHMK1mmezR/r1Ze+xXzLzi6sSTXnuTTz/dgKzGeLL4MwUNx4nNzbdqF +Vk7QqCSwXbtM6YMI3ik0Fqm3jgmgzrzADsQzdkqbvVm6qhhYB5EFEbGL8krKXlm JziDh0Vn+Ikr3FO2+UX+AnsbwPMeid12GPp5N3pNJwLfPytyNyd+rcuUf7b6ZYnM HC3YZplUbI+tTYWA7zQKYiDKmsepQeWartvkJg5GACenNBgnF0pWpvb+PoQOkx65 fjMCAwEAAaOCAkgwggJEMB0GA1UdDgQWBBTRJIDDc6SoXV59clkxRDXfs0QEQDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0VUT1AvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev R0VUT1AvMFNTQXczT2txRjFlZlhKWk1VUTEzN05FQkVBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJGezANBgkqhkiG9w0BAQsFAAOCAQEAhADXfVHnCI3w 5fyvtGbiwiv5i3y3+64CoO86Oif+he9EAJzYS+6fVTqwMWn/e3/XlExnoW2hMuFp EpZF6UiSoKClZhtPOhls4edLT7fk6GW2o+eSeVwC4I3+3lhRyLztdhjtMcdXn40h CBPQXtSaQsov/kJIoKkBkiy5NtPoGcXGoF1RDaPmX9jYJaeQDIx++Ezhr58NkHKl RVOjkqyoeSJDCiErWGMnnHlYweeqXmnqyeTumzg4lHQoMq84Bf0hqv0E2RtsF6Hv 4A+pKoG5WyP+3EF1PDj9yJJw7haa1WdIJvmtbqtUslbvVpWH0I4YlN1GzoWEipiI sWxCSiIxzg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:54 2025 by rpki-client