$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer File: GrLnpA7IH96KYX6fq15hgkeczCs.cer (raw, json) Hash identifier: TSjTidvR1MlkaGsjHhxrylQ5SzuCY8d34Y//N5A5mAg= Subject key identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:38 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 18421 IP: 202.6.104.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14994 (0x3a92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:2b:46:2f:8a:6b:1d:c6:f9:6a:d6:0a:9f: 07:f2:8b:ed:12:3e:09:ff:94:ff:ad:4d:6a:f8:3f: c0:9d:d2:8c:b0:98:56:62:72:43:09:7d:91:48:df: fd:08:50:ce:11:b4:56:55:c7:2d:ee:72:1d:9f:5c: ab:74:fc:87:a3:c1:ca:ae:a5:0a:db:dc:64:27:4f: ff:8a:3e:c7:77:d6:9d:97:a6:ef:ac:7c:12:9c:cc: 93:96:2d:96:9b:e5:e5:2d:7d:4c:60:bc:e2:f9:3e: 45:6b:bd:01:bd:06:eb:90:b8:71:12:b7:7c:8c:c1: 16:12:cb:12:96:33:51:20:6b:c4:3d:1d:de:b9:03: 7c:c0:42:ab:ac:cd:06:2a:5b:33:93:f2:53:cd:45: 5e:93:92:5b:e3:07:d9:07:8e:b9:bb:7c:6e:59:9f: 3b:a9:44:6e:03:ff:77:24:7f:e3:11:2a:40:28:ea: f9:d2:84:a8:ff:83:6e:46:13:43:d1:2c:09:1b:80: 6c:61:b5:34:5a:48:12:2b:f8:10:ea:7f:ed:58:8d: 52:0a:8d:79:c1:53:1c:e7:36:82:ee:7d:4c:59:20: 6f:6a:a9:2c:45:2e:ce:f3:e6:15:02:0b:04:d3:4c: d2:21:7c:ce:5b:30:40:7b:2b:01:95:e4:e6:3f:73: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18421 sbgp-ipAddrBlock: critical IPv4: 202.6.104.0/23 Signature Algorithm: sha256WithRSAEncryption 78:9f:9b:ff:73:27:7b:0a:3a:26:b4:85:f9:49:7c:56:d1:9e: 91:17:ea:66:80:c4:7c:46:77:ba:eb:c3:6e:61:f4:80:12:72: 0f:d2:29:a4:bb:8e:2b:c7:23:99:4e:cd:3e:e1:0a:2d:88:0b: 20:6c:75:45:07:41:6d:3b:f8:bf:32:e3:58:90:2c:e8:b9:d5: f7:bf:d4:03:b8:f3:71:8b:f6:d6:43:7a:b4:39:ba:a1:8a:62: 37:25:76:d5:3d:b7:ec:fa:84:ea:fe:d5:db:77:15:85:68:8e: 5f:ba:1d:41:8a:38:d8:40:15:82:25:f4:84:e3:61:eb:70:42: a6:d4:a6:bb:37:5a:b1:74:40:05:a9:ee:d4:ec:49:7b:7e:5b: 2a:04:fa:6e:d8:c9:f3:19:0d:46:75:aa:04:1c:8f:a3:be:29: aa:cb:13:df:4d:17:33:da:5c:ea:d2:52:95:b0:7b:12:34:7d: c5:a1:26:88:2a:c5:d8:4a:dc:9b:a6:a4:c2:7a:d3:6b:2b:a1: 2c:c1:da:05:d7:28:7c:54:8c:12:ad:bc:e9:dd:4e:8c:1d:77: c4:5a:eb:fc:12:e0:60:b4:9d:89:05:a6:5a:96:39:c7:11:0f: 0f:f8:55:f7:29:86:25:67:d4:b5:dd:60:60:00:ac:2c:31:b2: e2:56:34:ae -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICOpIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQzOFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMUFCMkU3QTQwRUM4MUZERThBNjE3RTlGQUI1RTYxODI0NzlDQ0My QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYOK0Yvimsdxvlq1gqf B/KL7RI+Cf+U/61Navg/wJ3SjLCYVmJyQwl9kUjf/QhQzhG0VlXHLe5yHZ9cq3T8 h6PByq6lCtvcZCdP/4o+x3fWnZem76x8EpzMk5Ytlpvl5S19TGC84vk+RWu9Ab0G 65C4cRK3fIzBFhLLEpYzUSBrxD0d3rkDfMBCq6zNBipbM5PyU81FXpOSW+MH2QeO ubt8blmfO6lEbgP/dyR/4xEqQCjq+dKEqP+DbkYTQ9EsCRuAbGG1NFpIEiv4EOp/ 7ViNUgqNecFTHOc2gu59TFkgb2qpLEUuzvPmFQILBNNM0iF8zlswQHsrAZXk5j9z WpkCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBQasuekDsgf3ophfp+rXmGCR5zMKzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgeAGCCsGAQUFBwELBIHTMIHQMD0GCCsGAQUFBzAF hjFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJU0hJTkJB TksvMFwGCCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvVEFJU0hJTkJBTksvR3JMbnBBN0lIOTZLWVg2ZnExNWhna2VjekNzLm1m dDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5 LnhtbDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJH9TAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcoGaDANBgkqhkiG9w0BAQsFAAOCAQEAeJ+b/3Mnewo6JrSF +Ul8VtGekRfqZoDEfEZ3uuvDbmH0gBJyD9IppLuOK8cjmU7NPuEKLYgLIGx1RQdB bTv4vzLjWJAs6LnV97/UA7jzcYv21kN6tDm6oYpiNyV21T237PqE6v7V23cVhWiO X7odQYo42EAVgiX0hONh63BCptSmuzdasXRABanu1OxJe35bKgT6btjJ8xkNRnWq BByPo74pqssT300XM9pc6tJSlbB7EjR9xaEmiCrF2Ercm6akwnrTayuhLMHaBdco fFSMEq286d1OjB13xFrr/BLgYLSdiQWmWpY5xxEPD/hV9ymGJWfUtd1gYACsLDGy 4lY0rg== -----END CERTIFICATE-----Generated at Sat Aug 23 22:27:17 2025 by rpki-client