$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/1/4115181D72CC034A7B256A0C7F9D7DA86F222523.cer File: 4115181D72CC034A7B256A0C7F9D7DA86F222523.cer (raw, json) Hash identifier: F+O0buU0uQCJm9b8GTHTuVHOzMZAaKW4TRRNWu8LckI= Subject key identifier: 41:15:18:1D:72:CC:03:4A:7B:25:6A:0C:7F:9D:7D:A8:6F:22:25:23 Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Certificate serial: 240BC4A478CC769201191E4CBFA8C87BEEEB0ED2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Manifest: rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.mft caRepository: rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/ Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml Certificate not before: Thu 10 Sep 2026 21:19:01 +0000 Certificate not after: Thu 09 Sep 2027 21:24:01 +0000 Subordinate resources: AS: 154902 IP: 163.52.140.0/23 IP: 2402:74e0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0b:c4:a4:78:cc:76:92:01:19:1e:4c:bf:a8:c8:7b:ee:eb:0e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D Validity Not Before: Sep 10 21:19:01 2026 GMT Not After : Sep 9 21:24:01 2027 GMT Subject: CN=4115181D72CC034A7B256A0C7F9D7DA86F222523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:16:6b:b3:e8:0c:db:7b:1e:d2:33:03:47: b9:38:50:9a:6b:85:1d:75:c9:1a:ce:b2:f4:95:3e: ef:8f:87:83:65:40:c0:21:44:20:23:05:0f:07:41: 88:2a:e7:43:99:7a:21:aa:ff:11:a8:28:7b:89:da: 37:82:03:14:80:c3:61:0f:8c:9a:f4:e2:2f:be:e0: 3f:99:d3:a1:32:bc:47:ef:8e:e9:de:ae:5e:2c:fa: 9e:19:3e:ba:9b:57:a7:ec:1f:77:4b:07:3b:cc:26: 8f:b6:46:e5:73:82:d0:31:99:f9:e8:a5:33:cc:09: 87:0a:85:0d:09:52:c9:74:d1:19:f9:43:c3:be:e3: 2b:ce:5e:4f:d7:88:8f:95:c8:cc:5f:ee:21:7e:7d: 4e:79:02:e2:7c:00:ae:e5:a1:c6:95:fb:3f:76:98: c2:e8:d8:1c:a2:71:14:de:0e:64:3f:c6:58:c1:3e: 2d:a4:ae:c0:c3:a3:c3:fb:69:26:e7:cb:65:69:7e: b5:08:a6:c8:22:59:25:de:23:e9:df:b9:79:7e:30: f6:aa:7c:12:40:29:c1:b8:74:04:f3:bd:a7:4a:d6: 61:3e:b0:cd:fd:06:38:a5:8a:f2:27:42:22:61:e1: a6:9f:fd:3b:0c:ca:ad:65:cd:95:9f:10:56:13:90: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:15:18:1D:72:CC:03:4A:7B:25:6A:0C:7F:9D:7D:A8:6F:22:25:23 X509v3 Authority Key Identifier: keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.140.0/23 IPv6: 2402:74e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 154902 Signature Algorithm: sha256WithRSAEncryption 32:64:76:30:d5:b0:e0:53:46:86:83:30:80:ec:bf:c5:d1:a1: 1c:e3:fe:5f:86:d6:65:05:f2:04:7e:83:86:ba:a8:17:70:d9: e6:d6:c5:1e:07:74:cd:77:53:91:61:56:c8:72:11:79:3d:29: 7b:8e:4b:11:48:8f:7a:51:71:fc:43:86:9e:cf:80:8a:55:ac: 24:56:09:7b:97:19:96:06:21:1e:74:e6:e9:e8:74:de:ba:75: 73:b3:13:f1:73:59:d0:4e:94:3e:3a:81:f1:c6:48:f2:a7:62: 9f:2a:eb:7a:6b:1c:59:b3:bd:c1:e2:a2:31:56:05:cd:65:72: ad:03:0c:17:d5:d7:4b:79:ac:67:91:02:6d:ff:4d:8b:47:6d: 7d:b6:77:31:4a:2c:c1:89:25:5b:1d:37:f8:5b:88:81:43:50: 73:d9:34:9c:c2:96:03:fd:94:95:2c:6a:ce:b2:d4:d0:a3:ef: 20:33:1a:65:da:aa:24:a6:38:3c:e8:54:03:97:59:85:ee:17: 7d:01:69:02:c2:02:78:40:1c:76:d7:c8:57:8a:b6:c6:77:b2: 62:8a:f9:3b:fa:2a:5c:2c:94:a2:f5:b3:33:97:95:fd:c2:f3: 42:09:bf:b2:6c:cc:33:70:69:6c:0c:b9:95:5d:83:01:44:3f: 43:0b:36:72 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIUJAvEpHjMdpIBGR5Mv6jIe+7rDtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2 NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDkxMDIxMTkwMVoX DTI3MDkwOTIxMjQwMVowMzExMC8GA1UEAxMoNDExNTE4MUQ3MkNDMDM0QTdCMjU2 QTBDN0Y5RDdEQTg2RjIyMjUyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0PFmuz6Azbex7SMwNHuThQmmuFHXXJGs6y9JU+74+Hg2VAwCFEICMFDwdB iCrnQ5l6Iar/Eagoe4naN4IDFIDDYQ+MmvTiL77gP5nToTK8R++O6d6uXiz6nhk+ uptXp+wfd0sHO8wmj7ZG5XOC0DGZ+eilM8wJhwqFDQlSyXTRGflDw77jK85eT9eI j5XIzF/uIX59TnkC4nwAruWhxpX7P3aYwujYHKJxFN4OZD/GWME+LaSuwMOjw/tp JufLZWl+tQimyCJZJd4j6d+5eX4w9qp8EkApwbh0BPO9p0rWYT6wzf0GOKWK8idC ImHhpp/9OwzKrWXNlZ8QVhOQUzkCAwEAAaOCApcwggKTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEEVGB1yzANKeyVqDH+dfahvIiUjMB8GA1UdIwQYMBaAFNpj JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHjBggrBgEFBQcBCwSB1jCB0zA1Bggr BgEFBQcwBYYpcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdOQUxQUk8v MC8wYQYIKwYBBQUHMAqGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lH TkFMUFJPLzAvNDExNTE4MUQ3MkNDMDM0QTdCMjU2QTBDN0Y5RDdEQTg2RjIyMjUy My5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAaM0jDANBAIAAjAHAwUAJAJ04DAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMCXRYwDQYJKoZIhvcNAQELBQADggEBADJkdjDVsOBT RoaDMIDsv8XRoRzj/l+G1mUF8gR+g4a6qBdw2ebWxR4HdM13U5FhVshyEXk9KXuO SxFIj3pRcfxDhp7PgIpVrCRWCXuXGZYGIR505unodN66dXOzE/FzWdBOlD46gfHG SPKnYp8q63prHFmzvcHiojFWBc1lcq0DDBfV10t5rGeRAm3/TYtHbX22dzFKLMGJ JVsdN/hbiIFDUHPZNJzClgP9lJUsas6y1NCj7yAzGmXaqiSmODzoVAOXWYXuF30B aQLCAnhAHHbXyFeKtsZ3smKK+Tv6KlwslKL1szOXlf3C80IJv7JszDNwaWwMuZVd gwFEP0MLNnI= -----END CERTIFICATE-----Generated at Mon Sep 21 17:35:59 2026 by rpki-client