$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer File: 2730CF9F132716F178F88FB1F268CE51CA264C9F.cer (raw, json) Hash identifier: 0u7OEWN9OXHx/tDE8EQCNMFgazQAQslN4/tLS7vqxeM= Subject key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 32B152A239F621C2A622E1FEC9C09368BF73A82A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft caRepository: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Fri 04 Sep 2026 07:19:11 +0000 Certificate not after: Fri 03 Sep 2027 07:24:11 +0000 Subordinate resources: AS: 152627 AS: 154878 IP: 103.127.216.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b1:52:a2:39:f6:21:c2:a6:22:e1:fe:c9:c0:93:68:bf:73:a8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 4 07:19:11 2026 GMT Not After : Sep 3 07:24:11 2027 GMT Subject: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:04:65:91:f9:7c:68:48:8f:56:28:fc:80: c2:84:46:ec:d0:57:cb:53:ae:3f:00:bb:b0:08:30: a7:0d:26:c3:07:ef:52:23:cb:1c:f8:de:cd:07:e3: 54:b3:f4:cf:4a:c0:9c:6e:e0:42:f5:ca:5d:f3:1f: 31:18:f0:3f:c5:f8:f0:c5:1b:9c:26:6d:75:2e:17: 2e:70:f3:3d:0b:a3:0a:bf:33:2d:07:2a:c8:ce:62: 2d:08:a2:4c:a8:bf:d6:83:f6:1a:35:a2:85:f3:bf: 33:b1:f6:41:96:9e:f2:f4:2f:22:64:41:92:c2:5d: c0:08:b7:a0:c2:a2:c6:a0:ba:06:b9:9b:c7:16:71: c0:68:cf:1d:b1:70:88:39:9c:3f:d4:e0:9b:ff:fb: f5:99:cd:c8:6a:13:1f:71:bb:e7:8c:ae:c3:1c:5c: c0:80:6f:cf:5e:a5:c9:59:fc:3a:6e:ec:94:6e:b5: 42:90:57:39:d5:ba:2d:c3:69:4c:be:06:fd:36:23: 22:91:6d:2d:e4:bb:97:fe:c2:f2:65:83:ad:c3:7b: d8:ce:a7:4c:59:23:c4:2d:81:c3:e0:f2:08:3e:ee: 86:b9:23:f3:22:ec:29:fe:69:66:03:d7:d2:bb:4f: 04:14:b3:dc:05:fe:7d:95:e9:87:db:56:5f:b8:de: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.216.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 152627 154878 Signature Algorithm: sha256WithRSAEncryption 5c:31:d5:2c:76:2b:b4:6f:72:76:4a:c6:e5:ac:0f:00:5f:ea: c1:e7:82:17:8c:7f:f7:11:e3:a4:47:3a:d9:55:7a:75:26:85: 62:9e:b4:8d:9f:31:6d:1c:41:f8:e8:29:e4:8c:9a:5d:e1:56: 70:24:d0:e1:54:5f:58:d6:c9:fb:15:64:12:f0:33:84:bc:9e: 1f:1d:6a:85:e1:97:ab:46:b7:ac:7b:16:bb:d3:4d:90:d7:80: d8:8f:22:6c:a0:78:6b:d5:f1:77:20:0c:7d:e5:96:3d:8b:92: e0:cd:26:a4:2b:f2:b6:f5:20:a1:83:5f:28:84:7c:62:90:63: 0b:1b:12:df:b0:32:91:2c:64:9e:27:65:08:c8:fd:ff:e5:39: 1f:cb:69:9b:56:36:c5:d9:5b:79:70:9a:c4:cf:70:cc:17:55: 64:22:9b:ed:2d:0e:b2:c3:46:e3:50:d7:3c:e7:fb:8d:d0:e3: 2d:a9:37:f8:bf:b3:92:cf:20:c2:03:62:a1:81:e2:e1:37:f4: 5e:91:4d:c5:8a:da:25:a3:fe:20:21:64:cf:ed:ab:d2:4f:2b: 53:90:6f:c0:a9:9e:16:a9:95:5d:92:07:ed:3a:fa:18:56:86: d6:a4:13:1b:e4:bc:d2:a5:55:81:20:2f:18:a8:83:35:2e:e3: ef:dc:c4:b0 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUMrFSojn2IcKmIuH+ycCTaL9zqCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwNDA3MTkxMVoX DTI3MDkwMzA3MjQxMVowMzExMC8GA1UEAxMoMjczMENGOUYxMzI3MTZGMTc4Rjg4 RkIxRjI2OENFNTFDQTI2NEM5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMGBGWR+XxoSI9WKPyAwoRG7NBXy1OuPwC7sAgwpw0mwwfvUiPLHPjezQfj VLP0z0rAnG7gQvXKXfMfMRjwP8X48MUbnCZtdS4XLnDzPQujCr8zLQcqyM5iLQii TKi/1oP2GjWihfO/M7H2QZae8vQvImRBksJdwAi3oMKixqC6BrmbxxZxwGjPHbFw iDmcP9Tgm//79ZnNyGoTH3G754yuwxxcwIBvz16lyVn8Om7slG61QpBXOdW6LcNp TL4G/TYjIpFtLeS7l/7C8mWDrcN72M6nTFkjxC2Bw+DyCD7uhrkj8yLsKf5pZgPX 0rtPBBSz3AX+fZXph9tWX7je4AcCAwEAAaOCAo8wggKLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCcwz58TJxbxePiPsfJozlHKJkyfMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IVVNIRU5HWElO LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hV U0hFTkdYSU4vMC8yNzMwQ0Y5RjEzMjcxNkYxNzhGODhGQjFGMjY4Q0U1MUNBMjY0 QzlGLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3/YMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwJUMwIDAlz+MA0GCSqGSIb3DQEBCwUAA4IBAQBcMdUsdiu0b3J2SsblrA8A X+rB54IXjH/3EeOkRzrZVXp1JoVinrSNnzFtHEH46CnkjJpd4VZwJNDhVF9Y1sn7 FWQS8DOEvJ4fHWqF4ZerRresexa7002Q14DYjyJsoHhr1fF3IAx95ZY9i5LgzSak K/K29SChg18ohHxikGMLGxLfsDKRLGSeJ2UIyP3/5Tkfy2mbVjbF2Vt5cJrEz3DM F1VkIpvtLQ6yw0bjUNc85/uN0OMtqTf4v7OSzyDCA2KhgeLhN/RekU3Fitolo/4g IWTP7avSTytTkG/AqZ4WqZVdkgftOvoYVobWpBMb5LzSpVWBIC8YqIM1LuPv3MSw -----END CERTIFICATE-----Generated at Tue Sep 22 03:07:50 2026 by rpki-client