$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer File: MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer (raw, json) Hash identifier: /QhBtpvGxgUxktFQvct3tHBGnXweuxGpXAuGkG0ETUU= Subject key identifier: 30:7E:1D:EA:08:C5:8B:5F:CE:C8:F5:7C:BB:77:4E:EE:8E:51:5C:99 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DC5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:49:45 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 165.99.168.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7621 (0x1dc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:49:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=307E1DEA08C58B5FCEC8F57CBB774EEE8E515C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:f8:7d:a0:21:22:f3:d2:66:17:f0:72:e3: f5:5b:9d:09:08:d6:35:3b:63:07:f4:0f:85:81:ec: 9d:a0:86:3d:25:07:1b:5d:52:00:8d:17:16:e6:37: b7:93:d7:c5:47:f5:eb:e8:88:b5:5f:8d:46:82:1a: f2:02:7a:9c:7e:83:ec:a6:28:c4:4f:95:38:80:85: 68:e5:28:c8:49:6e:9f:dd:4f:81:e0:39:48:66:ff: 1f:b6:f5:22:af:76:20:2d:e2:f2:c8:84:b7:64:3d: 07:33:33:f2:d8:a5:a8:44:4d:9c:9f:e4:84:62:17: 0e:bd:09:a5:eb:47:e7:68:6f:d3:66:37:4b:a1:af: 88:59:6d:5a:e8:b6:72:08:5e:a2:a2:d7:3e:5f:8f: 8f:18:78:82:93:82:ce:70:72:b7:2c:5b:98:78:92: f0:b7:e2:46:70:41:89:97:79:cf:bb:8a:2d:f3:14: ee:a8:01:41:24:a2:f1:9d:47:bc:67:34:2f:ac:e7: 83:25:dc:ab:5d:73:46:fa:d7:b9:fa:4a:25:aa:7b: db:17:71:db:8a:b3:1b:6d:3e:1c:a7:d5:3d:0e:d6: 32:cb:1c:59:c7:c5:16:14:b7:59:9f:34:99:63:d9: 6f:fd:63:a3:28:d5:b6:51:48:70:91:49:c2:5c:f5: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7E:1D:EA:08:C5:8B:5F:CE:C8:F5:7C:BB:77:4E:EE:8E:51:5C:99 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.99.168.0/23 Signature Algorithm: sha256WithRSAEncryption 33:e8:7e:49:6c:02:20:05:a1:fe:cd:04:d9:a5:0e:5e:87:df: 47:25:e5:f1:98:c2:9a:fc:96:4f:55:7f:b9:be:aa:70:d9:fd: 99:fd:d4:56:13:71:25:ca:90:fd:b0:02:26:79:41:50:8a:c5: 60:be:5d:23:cb:ae:d6:6d:e0:31:b6:25:2f:4f:df:0d:e0:cd: 4d:0b:a8:cd:b7:f0:90:c5:f8:bf:3a:29:a4:38:a2:84:bc:51: 3d:e3:4a:a0:9d:cc:87:70:ce:2a:2e:90:02:1f:98:bf:39:83: fa:25:20:eb:ed:ff:8d:88:e1:a9:e3:0b:f0:26:d1:cc:e0:29: 07:c6:ac:7f:b8:18:bf:55:3e:1c:56:b0:4f:dc:96:ea:92:55: 9b:5e:bb:86:4c:14:8a:38:ed:af:7b:c7:76:82:0a:ea:76:92: 86:65:75:33:16:b3:56:30:5a:4a:82:18:b5:de:1c:8d:4e:f0: 9b:9b:72:5d:ee:45:30:5a:46:21:a8:fd:cd:1b:51:21:a5:f2: 4d:98:22:1e:92:4a:ea:f1:ea:11:2a:55:a3:da:e1:eb:e3:ba: fe:d6:98:5b:fb:5f:c0:eb:00:14:a1:c0:d5:d3:94:0f:ad:b9: 8c:48:83:4d:c9:61:a2:91:ec:c5:5e:a6:a5:7c:99:81:a2:6f: 56:09:8f:ed -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHcUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NDk0NVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMzA3RTFERUEwOEM1OEI1RkNFQzhGNTdDQkI3NzRFRUU4RTUxNUM5 OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMk7+H2gISLz0mYX8HLj 9VudCQjWNTtjB/QPhYHsnaCGPSUHG11SAI0XFuY3t5PXxUf16+iItV+NRoIa8gJ6 nH6D7KYoxE+VOICFaOUoyElun91PgeA5SGb/H7b1Iq92IC3i8siEt2Q9BzMz8til qERNnJ/khGIXDr0JpetH52hv02Y3S6GviFltWui2cgheoqLXPl+Pjxh4gpOCznBy tyxbmHiS8LfiRnBBiZd5z7uKLfMU7qgBQSSi8Z1HvGc0L6zngyXcq11zRvrXufpK Jap72xdx24qzG20+HKfVPQ7WMsscWcfFFhS3WZ80mWPZb/1joyjVtlFIcJFJwlz1 xzMCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBQwfh3qCMWLX87I9Xy7d07ujlFcmTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREJTQkFOS1RX LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0RCU0JBTktUVy9NSDRkNmdqRmkxX095UFY4dTNkTzdvNVJYSmsubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpWOoMA0GCSqGSIb3DQEBCwUA A4IBAQAz6H5JbAIgBaH+zQTZpQ5eh99HJeXxmMKa/JZPVX+5vqpw2f2Z/dRWE3El ypD9sAImeUFQisVgvl0jy67WbeAxtiUvT98N4M1NC6jNt/CQxfi/OimkOKKEvFE9 40qgncyHcM4qLpACH5i/OYP6JSDr7f+NiOGp4wvwJtHM4CkHxqx/uBi/VT4cVrBP 3JbqklWbXruGTBSKOO2ve8d2ggrqdpKGZXUzFrNWMFpKghi13hyNTvCbm3Jd7kUw WkYhqP3NG1EhpfJNmCIekkrq8eoRKlWj2uHr47r+1phb+1/A6wAUocDV05QPrbmM SINNyWGikezFXqalfJmBom9WCY/t -----END CERTIFICATE-----Generated at Wed Oct 22 05:53:23 2025 by rpki-client