$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/bmsET_NbmDETHzm4ME_oyv3jmQk.cer File: bmsET_NbmDETHzm4ME_oyv3jmQk.cer (raw, json) Hash identifier: cBaerl3oM6dhLTs9kpMTDlKt1L5poYStFP9+7An8L78= Subject key identifier: 6E:6B:04:4F:F3:5B:98:31:13:1F:39:B8:30:4F:E8:CA:FD:E3:99:09 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3EF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 31 Oct 2025 01:28:04 +0000 Certificate not after: Wed 09 Sep 2026 15:30:29 +0000 Subordinate resources: AS: 18427 IP: 122.50.12.0/23 IP: 2402:2860::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 20:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16114 (0x3ef2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Oct 31 01:28:04 2025 GMT Not After : Sep 9 15:30:29 2026 GMT Subject: CN=6E6B044FF35B9831131F39B8304FE8CAFDE39909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:fd:57:7e:29:70:ee:1c:9a:d8:da:c7:a8: 4f:55:85:80:82:90:c2:a6:a9:df:8b:9a:2e:fe:fc: a4:bd:7e:5e:d9:c6:b1:80:13:50:ab:38:c7:e7:36: be:26:d3:b1:c7:e8:a8:04:9d:ff:f4:58:bd:a1:7b: 0a:7a:41:b3:76:4b:1a:f1:ef:d6:ed:52:da:ec:f0: 26:cd:69:91:e4:1e:29:9f:ed:4a:74:2b:b7:bb:4c: 08:ba:08:7f:cb:97:a1:ba:96:f9:08:09:ae:8e:89: 6c:67:7b:6a:38:c9:b7:64:65:dd:9e:9d:4d:be:b9: ab:e7:08:c2:38:f8:ce:8e:10:ff:6f:14:60:04:6e: c8:e9:fe:19:63:e1:26:f5:d6:4e:94:7a:58:da:d1: 10:24:80:19:d9:83:61:0a:65:02:b0:e8:ba:30:26: 9e:22:d9:e8:60:74:7e:08:7b:06:60:d2:4d:b9:85: 15:82:b3:fe:a8:9d:f6:e1:4e:17:3e:01:1d:16:6f: bb:c8:4b:b5:87:1e:63:87:ef:3d:dc:26:56:bb:78: c6:26:8d:4a:18:da:70:a3:36:b8:af:c1:4a:b5:b5: d9:93:16:09:5d:88:8a:5f:96:3e:3f:94:83:12:10: 25:f5:23:13:c2:8d:1f:eb:8a:92:6a:ed:46:f3:f2: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6B:04:4F:F3:5B:98:31:13:1F:39:B8:30:4F:E8:CA:FD:E3:99:09 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WARNERLINK/bmsET_NbmDETHzm4ME_oyv3jmQk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18427 sbgp-ipAddrBlock: critical IPv4: 122.50.12.0/23 IPv6: 2402:2860::/32 Signature Algorithm: sha256WithRSAEncryption 2a:80:27:a4:55:90:c7:e6:30:cc:d3:74:49:1d:1f:bc:8e:5b: 38:63:0d:14:53:2f:d2:95:9f:b8:e5:7f:51:9e:cf:e4:49:b7: 13:6d:22:9c:46:f4:19:1a:b2:15:99:bd:9c:90:97:7d:5d:70: 48:b5:0d:af:ee:28:01:ba:cb:43:ab:05:8d:57:f3:46:9f:2d: 52:82:37:94:4d:32:17:c4:a6:ce:ac:cd:ac:3e:b4:5d:d7:1c: 2d:7a:e9:ef:c3:80:59:b2:65:f1:84:19:e0:55:c3:d1:11:44: 87:9f:21:aa:f3:e0:36:7f:57:2f:a2:47:65:24:68:dc:4d:25: 1f:c3:2d:27:29:d1:b4:80:40:8b:cc:1d:ff:74:b2:15:ca:75: e9:b0:06:d7:4d:12:8e:38:ed:a9:41:dd:64:df:4c:ed:ed:e7: 0f:f7:fe:a3:4b:59:91:1d:46:23:89:99:15:05:66:76:8f:14: 5e:8a:fa:ee:8b:82:a9:00:ff:25:41:02:02:20:98:aa:5b:7d: e3:c7:a4:8d:f3:87:63:80:c6:c1:32:c9:77:e9:43:d2:fb:4b: 3b:bc:60:20:b1:84:a6:eb:21:75:ab:1f:cc:36:cf:bf:ec:07: cc:74:c8:cd:5b:59:c2:d3:34:dd:4b:8c:45:ef:7c:c7:c8:9e: b2:bc:92:86 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICPvIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MTAzMTAxMjgwNFoXDTI2MDkwOTE1MzAyOVowMzEx MC8GA1UEAxMoNkU2QjA0NEZGMzVCOTgzMTEzMUYzOUI4MzA0RkU4Q0FGREUzOTkw OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcg/Vd+KXDuHJrY2seo T1WFgIKQwqap34uaLv78pL1+XtnGsYATUKs4x+c2vibTscfoqASd//RYvaF7CnpB s3ZLGvHv1u1S2uzwJs1pkeQeKZ/tSnQrt7tMCLoIf8uXobqW+QgJro6JbGd7ajjJ t2Rl3Z6dTb65q+cIwjj4zo4Q/28UYARuyOn+GWPhJvXWTpR6WNrRECSAGdmDYQpl ArDoujAmniLZ6GB0fgh7BmDSTbmFFYKz/qid9uFOFz4BHRZvu8hLtYceY4fvPdwm Vrt4xiaNShjacKM2uK/BSrW12ZMWCV2Iil+WPj+UgxIQJfUjE8KNH+uKkmrtRvPy pwsCAwEAAaOCAoIwggJ+MB0GA1UdDgQWBBRuawRP81uYMRMfObgwT+jK/eOZCTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FSTkVSTElO Sy8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9XQVJORVJMSU5LL2Jtc0VUX05ibURFVEh6bTRNRV9veXYzam1Ray5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICR/swLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAF6MgwwDQQCAAIwBwMFACQCKGAwDQYJKoZIhvcNAQELBQADggEB ACqAJ6RVkMfmMMzTdEkdH7yOWzhjDRRTL9KVn7jlf1Gez+RJtxNtIpxG9BkashWZ vZyQl31dcEi1Da/uKAG6y0OrBY1X80afLVKCN5RNMhfEps6szaw+tF3XHC166e/D gFmyZfGEGeBVw9ERRIefIarz4DZ/Vy+iR2UkaNxNJR/DLScp0bSAQIvMHf90shXK demwBtdNEo447alB3WTfTO3t5w/3/qNLWZEdRiOJmRUFZnaPFF6K+u6LgqkA/yVB AgIgmKpbfePHpI3zh2OAxsEyyXfpQ9L7Szu8YCCxhKbrIXWrH8w2z7/sB8x0yM1b WcLTNN1LjEXvfMfInrK8koY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:07:35 2025 by rpki-client