$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/uwEkrGU_tzHr6tIQXJv2E2-LJJo.cer File: uwEkrGU_tzHr6tIQXJv2E2-LJJo.cer (raw, json) Hash identifier: Q/8tPM2/hBEStbNk3IpsKOxpwkBYA5dYnVijmcrfYKk= Subject key identifier: BB:01:24:AC:65:3F:B7:31:EB:EA:D2:10:5C:9B:F6:13:6F:8B:24:9A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3B90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:50 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 24160 IP: 203.160.144.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 23:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15248 (0x3b90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BB0124AC653FB731EBEAD2105C9BF6136F8B249A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:d7:01:35:b4:14:b7:08:cd:59:9c:8a:cf: 7e:67:7b:5d:cc:d3:7a:d3:35:66:2a:61:65:c9:7f: d9:4d:de:ff:13:56:c4:5e:8d:5e:15:56:c5:fa:33: 1d:dc:d3:3b:20:96:db:7a:e7:66:11:c3:8d:2a:fa: 50:3a:4d:65:78:12:c9:25:5d:cc:40:94:92:9b:35: da:5a:2c:b1:14:c1:6c:ee:ba:ad:15:20:bc:23:5d: e4:39:16:e6:70:8e:76:06:d8:52:83:63:ba:13:fe: bb:6c:1e:a0:0d:7e:8d:4f:08:a3:3e:fc:f6:a7:27: e1:36:ee:49:37:a0:bb:66:10:e8:4e:0c:24:7b:ff: a3:5e:f2:45:65:92:41:f3:09:1f:33:40:6c:ff:a8: 9d:db:fb:9b:23:4b:63:de:34:bc:10:47:fc:7d:e2: 2b:31:b1:f8:35:e5:19:83:b3:3f:da:47:76:22:ad: f3:c0:01:ee:37:91:96:ce:36:c5:44:9a:d0:ef:65: ec:5b:fb:53:c2:73:8e:95:d2:71:d2:1f:45:50:46: ac:3d:40:5a:a8:5e:1a:ce:ec:25:a8:34:75:08:fc: 85:70:ca:60:4f:10:e6:39:f8:91:a0:a4:1b:3a:4e: 2a:ca:c9:e6:20:2d:3d:c9:4f:2a:eb:66:d3:57:82: 53:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:01:24:AC:65:3F:B7:31:EB:EA:D2:10:5C:9B:F6:13:6F:8B:24:9A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24160 sbgp-ipAddrBlock: critical IPv4: 203.160.144.0/20 Signature Algorithm: sha256WithRSAEncryption 74:43:72:40:46:2a:e8:75:9d:ac:af:61:b4:5b:00:e1:89:4d: 33:ba:09:3e:c2:40:6d:4b:b9:c9:20:fb:e8:1e:79:70:68:d0: 4c:cf:be:fe:e4:51:c4:27:7c:96:a3:d9:77:77:0b:12:8a:49: 3c:57:3d:d9:db:a7:28:c9:5e:84:a4:ae:b2:23:b1:b8:e4:3a: 3d:f8:f7:2c:a8:34:43:2c:2f:b9:2a:22:0c:8f:e8:d2:ca:7a: 40:9f:4b:fe:77:2a:04:c6:85:7a:ec:53:21:08:4b:a8:94:20: 5a:2f:62:a4:8a:7a:11:46:70:4b:1c:17:db:78:c6:a4:c1:79: e2:7c:2b:cb:c7:2b:3f:cc:ff:c6:76:38:9e:13:f8:db:60:ad: fb:ce:95:fb:8d:bd:e4:71:47:a7:1d:16:86:05:ee:c8:4f:0d: 00:0a:a3:25:b9:44:e9:05:c2:a2:b9:c1:b3:8e:d5:1d:d0:a4: 7c:02:6c:18:fd:29:23:00:86:3c:b3:31:f8:f2:f3:08:32:92: 1f:86:63:4e:55:e5:a6:7a:a3:ef:69:c0:64:5e:1c:c6:19:a4: a6:3e:ff:a7:15:e7:37:4c:74:d1:7d:3e:40:a2:5f:b3:d5:9d: 20:61:e7:a4:24:50:e1:8a:1c:5b:d5:0b:97:10:a9:e2:d6:07: 00:db:6b:fe -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICO5AwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ1MFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQkIwMTI0QUM2NTNGQjczMUVCRUFEMjEwNUM5QkY2MTM2RjhCMjQ5 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL611wE1tBS3CM1ZnIrP fmd7XczTetM1ZiphZcl/2U3e/xNWxF6NXhVWxfozHdzTOyCW23rnZhHDjSr6UDpN ZXgSySVdzECUkps12lossRTBbO66rRUgvCNd5DkW5nCOdgbYUoNjuhP+u2weoA1+ jU8Ioz789qcn4TbuSTegu2YQ6E4MJHv/o17yRWWSQfMJHzNAbP+ondv7myNLY940 vBBH/H3iKzGx+DXlGYOzP9pHdiKt88AB7jeRls42xUSa0O9l7Fv7U8JzjpXScdIf RVBGrD1AWqheGs7sJag0dQj8hXDKYE8Q5jn4kaCkGzpOKsrJ5iAtPclPKutm01eC U8ECAwEAAaOCAmswggJnMB0GA1UdDgQWBBS7ASSsZT+3Mevq0hBcm/YTb4skmjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTUVJLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0NISU1FSS91d0VrckdVX3R6SHI2dElRWEp2MkUyLUxKSm8ubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAl5gMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEy6CQMA0GCSqGSIb3DQEBCwUAA4IBAQB0Q3JARirodZ2sr2G0WwDhiU0zugk+ wkBtS7nJIPvoHnlwaNBMz77+5FHEJ3yWo9l3dwsSikk8Vz3Z26coyV6EpK6yI7G4 5Do9+PcsqDRDLC+5KiIMj+jSynpAn0v+dyoExoV67FMhCEuolCBaL2KkinoRRnBL HBfbeMakwXnifCvLxys/zP/GdjieE/jbYK37zpX7jb3kcUenHRaGBe7ITw0ACqMl uUTpBcKiucGzjtUd0KR8AmwY/SkjAIY8szH48vMIMpIfhmNOVeWmeqPvacBkXhzG GaSmPv+nFec3THTRfT5Aol+z1Z0gYeekJFDhihxb1QuXEKni1gcA22v+ -----END CERTIFICATE-----Generated at Wed Sep 17 21:55:15 2025 by rpki-client