$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer File: e4JX_9x80ctBlhKc1ASTNSvIO7k.cer (raw, json) Hash identifier: R59vhydpNiHjIonm+vZYKodnceAfrXQpw8pcN2UG0S4= Subject key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:44 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 38853 IP: 103.169.46.0/23 IP: 2407:9a40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15112 (0x3b08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:a5:81:a9:45:60:5e:33:47:75:67:45:ad: e2:27:84:16:55:3c:d9:9f:ef:81:e2:a4:58:f9:46: 95:6b:81:fd:fe:86:6b:84:28:41:42:7d:7c:fe:1b: bc:78:24:1a:d2:3d:18:2b:1b:5f:a6:f5:3c:ae:16: ae:71:a7:a5:c1:b4:a8:40:42:4e:73:6b:cb:f5:06: 0f:5c:2f:52:3b:48:04:80:08:8b:5e:0e:58:0c:8b: 96:5e:9b:03:d8:56:f2:fa:1b:24:18:15:b4:80:5e: 49:46:78:4a:6f:bc:ff:8f:1e:11:7a:5b:8e:49:10: fa:17:30:ad:aa:f9:48:3f:09:5b:1c:dd:d8:a2:34: 08:e6:c1:14:35:67:80:62:3c:a8:cf:31:ad:82:17: 4b:e7:ce:91:37:19:ba:a1:e6:04:11:4b:51:30:1e: ab:bd:2d:aa:16:83:41:e5:7b:95:d0:c4:a9:4f:b7: ab:8a:4e:f0:ac:6f:75:be:59:9a:b7:62:6c:54:99: 46:b1:e1:30:6e:04:99:2e:9a:95:fc:19:19:e0:d6: d3:30:7b:d1:47:80:22:14:61:07:41:f2:5f:86:d5: f4:e1:9c:40:a9:7d:b2:15:7b:f9:aa:48:24:14:b0: cf:d3:fa:87:01:32:47:47:98:31:a7:8f:51:62:36: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38853 sbgp-ipAddrBlock: critical IPv4: 103.169.46.0/23 IPv6: 2407:9a40::/32 Signature Algorithm: sha256WithRSAEncryption 16:3a:27:a4:12:71:2f:38:5c:50:00:0d:43:a7:e4:c2:06:23: f7:29:68:19:13:71:08:3e:f7:3b:0c:11:94:72:a6:fd:5f:fd: 40:ea:b2:28:90:96:86:57:1d:1f:c6:4b:4b:f7:97:d3:33:38: a0:b0:b3:42:4e:5a:af:07:52:9b:c1:58:79:24:1b:ce:8e:c2: 35:d1:68:73:e0:bc:e1:91:5b:7f:8f:dd:24:10:5b:70:2f:23: dd:55:3b:ac:b3:20:70:1d:6d:cb:a1:ef:0b:cc:e0:09:fd:5e: f4:35:e2:c5:f0:f9:93:36:83:ad:ab:9a:3e:53:c1:b0:95:49: 8b:59:2d:c2:8c:5a:36:b9:98:7e:24:e4:e9:63:a9:ee:b6:fb: 31:a3:cd:e2:6a:db:6b:c9:90:00:43:94:2a:1c:bf:c4:b6:fd: 3d:0e:9b:92:63:75:f8:75:14:25:79:8a:b9:75:67:45:d7:f1: 79:00:85:db:41:e7:4d:6a:98:35:e9:0c:4e:5e:91:21:16:6c: 68:b9:51:c2:63:f7:a9:b5:aa:f9:f1:69:61:70:af:fc:46:2c: 3b:41:d4:55:99:77:69:31:69:84:5a:e6:86:1f:65:34:b6:19: ec:d5:b4:6c:36:d5:94:ae:22:8f:c5:9a:a9:8c:39:33:37:49: c0:2b:ae:7d -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICOwgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ0NFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoN0I4MjU3RkZEQzdDRDFDQjQxOTYxMjlDRDQwNDkzMzUyQkM4M0JC OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL12pYGpRWBeM0d1Z0Wt 4ieEFlU82Z/vgeKkWPlGlWuB/f6Ga4QoQUJ9fP4bvHgkGtI9GCsbX6b1PK4WrnGn pcG0qEBCTnNry/UGD1wvUjtIBIAIi14OWAyLll6bA9hW8vobJBgVtIBeSUZ4Sm+8 /48eEXpbjkkQ+hcwrar5SD8JWxzd2KI0CObBFDVngGI8qM8xrYIXS+fOkTcZuqHm BBFLUTAeq70tqhaDQeV7ldDEqU+3q4pO8Kxvdb5ZmrdibFSZRrHhMG4EmS6alfwZ GeDW0zB70UeAIhRhB0HyX4bV9OGcQKl9shV7+apIJBSwz9P6hwEyR0eYMaePUWI2 fnECAwEAAaOCAn8wggJ7MB0GA1UdDgQWBBR7glf/3HzRy0GWEpzUBJM1K8g7uTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFSQU1JVEEv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUEFSQU1JVEEvZTRKWF85eDgwY3RCbGhLYzFBU1ROU3ZJTzdrLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAl8UwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAFnqS4wDQQCAAIwBwMFACQHmkAwDQYJKoZIhvcNAQELBQADggEBABY6 J6QScS84XFAADUOn5MIGI/cpaBkTcQg+9zsMEZRypv1f/UDqsiiQloZXHR/GS0v3 l9MzOKCws0JOWq8HUpvBWHkkG86OwjXRaHPgvOGRW3+P3SQQW3AvI91VO6yzIHAd bcuh7wvM4An9XvQ14sXw+ZM2g62rmj5TwbCVSYtZLcKMWja5mH4k5Oljqe62+zGj zeJq22vJkABDlCocv8S2/T0Om5Jjdfh1FCV5irl1Z0XX8XkAhdtB501qmDXpDE5e kSEWbGi5UcJj96m1qvnxaWFwr/xGLDtB1FWZd2kxaYRa5oYfZTS2GezVtGw21ZSu Io/FmqmMOTM3ScArrn0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:45:32 2025 by rpki-client