$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer File: HpTC6b92VEpaAMOici0QgCJOwA4.cer (raw, json) Hash identifier: 3KF8YSTrO+WRDEaoZJYJYWytVg6z07LCOuV1hohmqlk= Subject key identifier: 1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3D24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:49:43 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 152628 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 16:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15652 (0x3d24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:49:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1E94C2E9BF76544A5A00C3A2722D1080224EC00E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:3a:07:96:1a:76:45:a4:94:1d:c0:6c:db: 12:18:70:2e:ff:9b:d4:4f:82:30:5f:ad:92:53:fd: 55:e3:fe:3b:cb:84:da:38:37:e8:23:e4:9f:55:c9: 19:79:05:ed:6d:fa:b7:0e:a7:a4:6a:dd:7e:ee:c7: 92:36:bf:42:dc:80:06:dd:12:1b:d3:42:97:c3:48: 60:87:b4:d9:27:1e:08:0c:2c:d7:8e:aa:bf:53:59: f0:bb:1a:16:e5:5c:9a:2f:9d:fd:2b:5d:d5:92:59: 0f:ed:45:9c:3b:da:a9:00:07:7c:79:7f:55:e8:5b: 47:3c:57:92:66:f9:dc:b8:bc:9e:57:5c:16:07:05: 8d:de:d1:74:fe:07:d3:41:22:8b:9c:7f:29:9d:11: 7c:67:46:d5:e0:2d:b4:b7:99:38:74:48:1c:2f:f0: 3f:e9:0e:6d:7c:d7:5d:be:e4:84:d2:46:63:e5:7b: 71:73:c7:49:8f:99:2d:a7:09:a7:23:08:8a:53:0c: ff:b7:b6:e3:51:0d:ea:f1:5b:16:ed:69:90:da:03: 90:07:54:62:f7:e6:7c:40:bc:ce:f2:93:41:f2:bf: 09:ec:6d:23:dc:29:84:fd:c3:11:0d:d3:8a:d9:a4: 3f:a2:16:45:9b:44:f6:10:aa:40:9a:38:9f:7d:77: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152628 Signature Algorithm: sha256WithRSAEncryption 58:cb:d7:a9:fd:89:c8:a9:46:3b:8d:a3:fb:d5:a7:75:23:51: 76:64:ff:11:8e:a3:5d:b1:b1:e2:ff:6b:a1:70:1f:57:a4:b8: 14:a9:66:33:89:73:c5:69:51:04:f8:a8:8e:59:7b:00:c4:82: 73:6c:28:ff:09:99:4d:0c:91:20:fe:11:98:31:8f:dc:d1:dd: fe:60:15:1b:1c:1b:7b:a2:c3:78:7d:68:1c:41:73:c6:25:d3: 12:24:f8:ac:a4:1c:99:9f:89:a4:82:ab:3b:26:a2:b6:85:3f: bc:83:6f:b9:cb:40:10:75:8f:31:36:c3:bb:8c:7c:5e:7d:f5: 56:5d:95:1d:33:3f:a8:1b:63:ec:d5:1d:01:cb:e0:98:b1:d5: d7:5c:69:f8:ee:a2:ae:3c:dd:f2:6d:1f:ce:5c:f8:37:68:6f: ae:0d:d4:85:ed:9a:4f:33:78:16:b6:d7:ad:23:85:84:73:60: 3a:29:5e:9a:d7:dd:3e:5e:2b:30:4a:40:35:eb:cd:11:de:dd: db:b0:14:22:a1:ec:8b:af:62:3e:36:d0:e6:3e:a6:17:4f:96: 3a:a5:ee:01:88:9c:85:6a:24:2c:f4:3b:43:43:8e:39:4c:ad: 5f:2c:46:57:b9:95:40:c4:dc:34:7a:d3:4b:81:7f:cc:b9:9e: ee:0a:d9:aa -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICPSQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4NDk0M1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMUU5NEMyRTlCRjc2NTQ0QTVBMDBDM0EyNzIyRDEwODAyMjRFQzAw RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALySOgeWGnZFpJQdwGzb EhhwLv+b1E+CMF+tklP9VeP+O8uE2jg36CPkn1XJGXkF7W36tw6npGrdfu7Hkja/ QtyABt0SG9NCl8NIYIe02SceCAws146qv1NZ8LsaFuVcmi+d/Std1ZJZD+1FnDva qQAHfHl/VehbRzxXkmb53Li8nldcFgcFjd7RdP4H00Eii5x/KZ0RfGdG1eAttLeZ OHRIHC/wP+kObXzXXb7khNJGY+V7cXPHSY+ZLacJpyMIilMM/7e241EN6vFbFu1p kNoDkAdUYvfmfEC8zvKTQfK/CextI9wphP3DEQ3TitmkP6IWRZtE9hCqQJo4n313 c1ECAwEAAaOCAlEwggJNMB0GA1UdDgQWBBQelMLpv3ZUSloAw6JyLRCAIk7ADjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREJTQkFOS1RX LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0RCU0JBTktUVy9IcFRDNmI5MlZFcGFBTU9pY2kwUWdDSk93QTQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJUNDANBgkqhkiG9w0BAQsFAAOCAQEA WMvXqf2JyKlGO42j+9WndSNRdmT/EY6jXbGx4v9roXAfV6S4FKlmM4lzxWlRBPio jll7AMSCc2wo/wmZTQyRIP4RmDGP3NHd/mAVGxwbe6LDeH1oHEFzxiXTEiT4rKQc mZ+JpIKrOyaitoU/vINvuctAEHWPMTbDu4x8Xn31Vl2VHTM/qBtj7NUdAcvgmLHV 11xp+O6irjzd8m0fzlz4N2hvrg3Uhe2aTzN4FrbXrSOFhHNgOilemtfdPl4rMEpA NevNEd7d27AUIqHsi69iPjbQ5j6mF0+WOqXuAYichWokLPQ7Q0OOOUytXyxGV7mV QMTcNHrTS4F/zLme7grZqg== -----END CERTIFICATE-----Generated at Tue Oct 28 14:53:05 2025 by rpki-client