$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer File: 3135985A244571EE521F17A73A1F0D6341A35ED5.cer (raw, json) Hash identifier: icayd+xS/HQFoLNVn0eUHZ6putfS/Fr4T7MfTyM+d0c= Subject key identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 240B5BDC7417E6EF5537FEB6A55B136BD019FCBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft caRepository: rsync://rpkica.twnic.tw/rpki/COLIN/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Fri 04 Sep 2026 07:19:10 +0000 Certificate not after: Fri 03 Sep 2027 07:24:10 +0000 Subordinate resources: AS: 140700 IP: 103.6.124.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0b:5b:dc:74:17:e6:ef:55:37:fe:b6:a5:5b:13:6b:d0:19:fc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 4 07:19:10 2026 GMT Not After : Sep 3 07:24:10 2027 GMT Subject: CN=3135985A244571EE521F17A73A1F0D6341A35ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:33:8a:3a:37:50:af:4c:b4:eb:c0:48:ed:4a: 33:c4:19:4b:29:70:19:6d:a4:f1:b6:e9:56:f3:0f: 03:f5:28:ce:03:30:11:d8:0d:ca:d3:bb:2a:a4:88: c3:93:97:fb:2a:48:c3:90:56:bc:8f:d8:84:10:96: ed:12:d2:95:28:42:f2:76:4a:a7:15:dd:8c:30:e5: c2:b5:82:e3:65:04:b6:31:f5:a5:3e:97:b5:1b:bb: 21:cf:78:5e:ab:be:5b:e0:a1:2d:f6:25:d4:ce:90: 7b:3b:91:0d:2e:bb:bc:6e:80:b7:65:7f:31:de:ac: 75:63:e8:e1:e1:3c:c4:5f:4c:9f:18:50:4d:c7:9a: 2e:bd:6c:11:0b:fb:25:63:dd:1e:e0:b8:c5:58:43: 67:2b:9f:06:12:33:36:ec:df:bf:c9:40:2e:cf:82: 70:25:94:89:93:aa:72:ac:31:6c:90:e3:ee:e4:a2: 79:75:9a:a9:80:fc:1d:b4:da:03:aa:6d:c0:0a:90: 5c:ca:49:d7:7c:d4:82:68:be:06:70:d7:44:03:49: 21:69:49:70:08:74:65:c4:0d:34:ee:31:d1:3b:04: 9f:9b:84:92:02:da:70:54:88:c7:fe:c5:23:c3:28: 0a:2a:79:56:bd:ea:09:bf:08:88:b6:95:f5:a8:97: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.124.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 140700 Signature Algorithm: sha256WithRSAEncryption a4:a8:84:a4:f1:cb:98:cc:61:bf:d1:eb:9e:1f:9a:a4:15:0b: d9:9a:b7:9f:a8:ec:54:06:8d:36:31:c9:3f:f2:f8:5a:42:8a: c3:5d:54:e1:78:9c:03:12:87:e7:ca:44:75:2d:bc:fd:6d:5e: d1:18:0d:3b:da:33:00:1b:06:bb:84:e1:6a:95:7d:12:57:59: 15:a5:ad:e9:17:d3:e8:f4:d6:2c:c4:65:3d:42:fe:9c:e8:71: bc:5f:56:9a:ff:fa:fd:d1:84:f4:27:1d:fd:4b:4d:8c:d8:ed: e6:f9:12:09:91:a8:22:13:0e:06:32:af:4a:0b:97:29:cb:a6: 31:35:6e:04:7b:d0:21:9f:5f:d2:ad:3d:e3:f5:2d:ef:d0:91: 4a:1e:d8:fd:76:cf:bb:83:cf:ba:ad:e6:66:c0:42:68:9d:81: 5d:80:53:71:e9:0b:51:46:4f:7b:66:94:4e:c9:f0:36:bc:7b: d2:0a:9c:f6:cb:14:71:e9:52:ba:cd:fd:64:00:79:ba:e8:f3: c7:7a:08:9f:1b:31:83:cd:82:ff:69:cf:77:17:d6:0b:a7:69: 43:67:70:14:90:c3:ea:3e:09:95:d3:26:d6:da:f2:dd:30:2d: 19:cd:94:a3:93:f6:bd:a8:f8:81:8f:19:40:03:7d:de:f9:a2: d0:dc:53:65 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIUJAtb3HQX5u9VN/62pVsTa9AZ/LowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkwNDA3MTkxMFoX DTI3MDkwMzA3MjQxMFowMzExMC8GA1UEAxMoMzEzNTk4NUEyNDQ1NzFFRTUyMUYx N0E3M0ExRjBENjM0MUEzNUVENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOczijo3UK9MtOvASO1KM8QZSylwGW2k8bbpVvMPA/UozgMwEdgNytO7KqSI w5OX+ypIw5BWvI/YhBCW7RLSlShC8nZKpxXdjDDlwrWC42UEtjH1pT6XtRu7Ic94 Xqu+W+ChLfYl1M6QezuRDS67vG6At2V/Md6sdWPo4eE8xF9MnxhQTceaLr1sEQv7 JWPdHuC4xVhDZyufBhIzNuzfv8lALs+CcCWUiZOqcqwxbJDj7uSieXWaqYD8HbTa A6ptwAqQXMpJ13zUgmi+BnDXRANJIWlJcAh0ZcQNNO4x0TsEn5uEkgLacFSIx/7F I8MoCip5Vr3qCb8IiLaV9aiXaN0CAwEAAaOCAoAwggJ8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDE1mFokRXHuUh8XpzofDWNBo17VMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHbBggrBgEFBQcBCwSBzjCByzAxBggr BgEFBQcwBYYlcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DT0xJTi8wLzBd BggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DT0xJTi8w LzMxMzU5ODVBMjQ0NTcxRUU1MjFGMTdBNzNBMUYwRDYzNDFBMzVFRDUubWZ0MDcG CCsGAQUFBzANhitodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnBnwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAiWcMA0G CSqGSIb3DQEBCwUAA4IBAQCkqISk8cuYzGG/0eueH5qkFQvZmrefqOxUBo02Mck/ 8vhaQorDXVTheJwDEofnykR1Lbz9bV7RGA072jMAGwa7hOFqlX0SV1kVpa3pF9Po 9NYsxGU9Qv6c6HG8X1aa//r90YT0Jx39S02M2O3m+RIJkagiEw4GMq9KC5cpy6Yx NW4Ee9Ahn1/SrT3j9S3v0JFKHtj9ds+7g8+6reZmwEJonYFdgFNx6QtRRk97ZpRO yfA2vHvSCpz2yxRx6VK6zf1kAHm66PPHegifGzGDzYL/ac93F9YLp2lDZ3AUkMPq PgmV0ybW2vLdMC0ZzZSjk/a9qPiBjxlAA33e+aLQ3FNl -----END CERTIFICATE-----Generated at Tue Sep 22 17:20:04 2026 by rpki-client