$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer File: gCumEj6hI_Q52pHKPeWlrgqkE3g.cer (raw, json) Hash identifier: B0Q5eWcb83nr6yyUzHhiPiZFjKNTCDJrpn+7GoTh+l4= Subject key identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:03 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 131610 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15520 (0x3ca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:15:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:19:e0:ff:3b:32:ba:f8:02:1c:c1:2c:fd: cc:e1:be:fa:f5:32:f2:ac:53:db:3c:a6:9f:88:6b: d9:33:d8:1d:92:07:79:5e:3d:a2:4a:01:56:fa:c7: ce:34:46:27:40:7a:7c:0b:9a:5d:99:73:54:cb:1a: eb:97:a4:16:f4:16:3d:f0:fc:be:5b:b4:16:a0:05: 2b:41:23:e8:93:dd:c4:4c:1f:ce:5a:51:0c:e6:fd: 8c:ed:42:61:1e:1d:48:61:44:8f:44:a3:6b:5c:51: 40:d0:bf:d7:b2:85:53:85:10:6e:31:94:2c:d3:da: 84:8e:2f:eb:d1:50:a0:a5:56:4b:e2:31:70:46:a0: ba:b2:67:8a:3c:72:51:7f:92:d9:5e:c8:8b:04:e6: 17:22:61:2f:33:4a:0e:73:33:9e:78:04:55:8f:d4: c9:c7:1e:17:17:78:2e:25:26:77:5c:f5:30:37:5d: 95:84:0c:79:04:1a:74:19:b2:eb:13:11:a8:5c:03: 1a:e2:bb:f1:b9:e0:88:6c:14:26:23:c0:2f:f3:d8: 49:f1:ab:fc:10:da:b5:61:54:4d:05:97:38:a7:ea: 36:c7:cf:5a:54:25:6f:dc:df:1f:44:a6:d3:58:5a: 91:4e:c9:87:9d:a9:44:d1:ac:25:9a:30:3f:41:dc: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131610 Signature Algorithm: sha256WithRSAEncryption 80:f0:0c:e1:4c:c3:7f:ab:30:98:62:6c:50:49:c6:9b:e5:52: c0:b3:f9:0d:82:d1:15:66:8c:6e:c0:5a:ae:92:39:ae:a1:70: 86:d1:79:9b:d7:d9:aa:ec:05:2c:34:cf:ae:53:c6:41:7f:c6: ee:eb:74:9a:b5:72:93:69:49:ec:b4:79:6c:ae:c8:4f:ea:b7: 15:d2:36:4d:12:69:f7:79:20:47:0a:ca:9b:b1:db:69:f6:b9: 4d:6a:b6:63:ec:b4:9a:ea:61:33:0b:3b:e0:c2:3d:62:80:27: 3f:17:9f:a3:98:d7:a8:15:88:07:60:bd:c3:73:92:26:ef:5b: fc:46:39:ac:a4:b9:57:35:d1:1e:2c:6e:59:f8:7a:65:f9:a5: 9e:64:ad:83:9c:46:93:95:07:0e:27:85:9f:dd:72:ca:c1:81: f7:01:0a:64:a8:6a:89:aa:16:9f:5a:41:c0:1e:f1:9e:d3:f7: 5c:33:46:e9:32:0c:04:ee:04:1e:cf:d4:fe:32:6f:31:46:e4: 21:85:cb:67:c7:d3:fe:6b:1f:37:b2:dc:b9:4e:2a:99:6f:34: b9:a1:29:c8:ac:a1:ea:7e:5d:64:72:22:27:2a:8b:67:00:36: be:d4:98:12:5f:5d:8d:6b:9b:f5:f4:a8:7d:9a:04:5d:7c:8f: b1:7e:d6:b0 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICPKAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTUwM1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoODAyQkE2MTIzRUExMjNGNDM5REE5MUNBM0RFNUE1QUUwQUE0MTM3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/mGeD/OzK6+AIcwSz9 zOG++vUy8qxT2zymn4hr2TPYHZIHeV49okoBVvrHzjRGJ0B6fAuaXZlzVMsa65ek FvQWPfD8vlu0FqAFK0Ej6JPdxEwfzlpRDOb9jO1CYR4dSGFEj0Sja1xRQNC/17KF U4UQbjGULNPahI4v69FQoKVWS+IxcEagurJnijxyUX+S2V7IiwTmFyJhLzNKDnMz nngEVY/UycceFxd4LiUmd1z1MDddlYQMeQQadBmy6xMRqFwDGuK78bngiGwUJiPA L/PYSfGr/BDatWFUTQWXOKfqNsfPWlQlb9zfH0Sm01hakU7Jh52pRNGsJZowP0Hc sAcCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBSAK6YSPqEj9Dnakco95aWuCqQTeDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU5TT05ORVQv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQU5TT05ORVQvZ0N1bUVqNmhJX1E1MnBIS1BlV2xyZ3FrRTNnLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCAhowDQYJKoZIhvcNAQELBQADggEBAIDw DOFMw3+rMJhibFBJxpvlUsCz+Q2C0RVmjG7AWq6SOa6hcIbReZvX2arsBSw0z65T xkF/xu7rdJq1cpNpSey0eWyuyE/qtxXSNk0Safd5IEcKypux22n2uU1qtmPstJrq YTMLO+DCPWKAJz8Xn6OY16gViAdgvcNzkibvW/xGOaykuVc10R4sbln4emX5pZ5k rYOcRpOVBw4nhZ/dcsrBgfcBCmSoaomqFp9aQcAe8Z7T91wzRukyDATuBB7P1P4y bzFG5CGFy2fH0/5rHzey3LlOKplvNLmhKcisoep+XWRyIicqi2cANr7UmBJfXY1r m/X0qH2aBF18j7F+1rA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:50 2025 by rpki-client