$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer File: 0mTRm5gGAj5HbgOcBf3OE3asbDw.cer (raw, json) Hash identifier: yhqx5aoY8Ej94KL9wwFK6mXGO6l8qpp7wPCO8nolxjI= Subject key identifier: D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DE7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:58:36 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 161.248.144.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7655 (0x1de7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:58:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D264D19B9806023E476E039C05FDCE1376AC6C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:2f:38:67:ee:42:aa:62:6f:1a:67:1b:2d: 26:73:23:68:ba:b9:af:27:09:69:3f:70:e9:79:aa: 6d:c5:f7:d0:e3:1c:6d:17:36:e4:b5:8c:52:1f:dd: 04:9b:85:59:5f:b9:a6:b2:bb:08:3d:27:42:65:68: d4:e9:3c:16:c7:f7:3b:f5:d4:36:bd:35:a9:55:53: 5a:b9:e8:35:03:49:c7:35:bb:5e:4c:67:8b:d0:17: be:22:5a:f5:67:de:c6:e2:5b:e1:0b:8b:64:a1:93: 2d:95:9f:e9:8c:97:0c:d1:a3:56:69:cd:14:e0:a3: 3b:dc:00:cf:65:53:f5:5d:d3:13:69:bc:94:d2:e6: 4f:ab:43:59:ac:16:bc:12:39:48:0d:38:c0:e4:6d: 66:64:fd:b9:02:9f:60:69:7d:66:4a:80:3f:78:fe: 7f:87:2c:a8:2f:6e:86:73:ed:dd:01:a0:35:c4:6f: 6f:e9:a2:cb:ae:c7:a6:b6:67:04:63:c5:1b:7e:e5: e8:ec:50:b1:a0:82:1b:05:b7:1c:88:5b:72:81:c1: 53:60:d3:e1:9a:40:d1:db:a8:20:3e:f6:27:78:b3: 77:03:24:2b:ea:9e:f5:16:6c:e0:75:df:eb:68:cf: 40:73:d1:b9:4b:c8:7a:0d:3e:ee:ec:4d:a3:e1:79: b1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.144.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:d5:d9:0d:88:6a:62:64:4c:25:0e:62:7f:7e:c8:02:87:15: dc:ae:82:0f:0d:62:0c:5d:43:d3:68:10:3f:ee:e5:a1:72:c6: b7:56:48:d7:6d:b8:55:84:0b:ca:e9:50:a4:f1:40:ef:74:16: ec:2e:97:33:94:d2:85:25:49:8e:6d:54:26:3a:ec:94:52:01: 79:e2:40:d5:ed:5a:9a:1c:3b:2a:b1:51:2c:71:89:fe:9f:c9: 46:72:4b:bf:2f:92:0d:3a:59:6e:e3:c6:e9:e5:9c:50:d7:c7: 6f:0b:46:27:72:06:f0:ae:6d:33:44:63:3c:a8:b6:36:8a:9c: f7:ae:a7:b4:ca:e2:c1:1f:85:ae:fe:b6:59:cc:72:55:e6:7e: 85:8a:92:44:7e:7d:b5:6a:ac:71:45:68:7b:16:4b:3c:d3:87: 58:0f:55:f6:dd:27:2e:6d:02:be:97:d0:ee:49:88:b2:46:f2: 20:12:d1:18:8e:30:a4:05:e8:9c:0c:b5:2f:3a:27:cd:51:18: ea:f9:66:c8:d9:3e:5c:b1:68:2c:9c:ca:cc:bb:2c:a4:1c:3e: 7b:3a:ae:1d:0c:29:02:5f:b3:13:18:16:33:50:ef:0a:b9:be: c6:24:6c:56:bb:28:f5:16:1a:5b:e6:32:84:30:e9:0b:b1:55: 8a:df:35:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHecwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTgzNloXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRDI2NEQxOUI5ODA2MDIzRTQ3NkUwMzlDMDVGRENFMTM3NkFDNkMz QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKTYLzhn7kKqYm8aZxst JnMjaLq5rycJaT9w6XmqbcX30OMcbRc25LWMUh/dBJuFWV+5prK7CD0nQmVo1Ok8 Fsf3O/XUNr01qVVTWrnoNQNJxzW7Xkxni9AXviJa9WfexuJb4QuLZKGTLZWf6YyX DNGjVmnNFOCjO9wAz2VT9V3TE2m8lNLmT6tDWawWvBI5SA04wORtZmT9uQKfYGl9 ZkqAP3j+f4csqC9uhnPt3QGgNcRvb+miy67HprZnBGPFG37l6OxQsaCCGwW3HIhb coHBU2DT4ZpA0duoID72J3izdwMkK+qe9RZs4HXf62jPQHPRuUvIeg0+7uxNo+F5 sV0CAwEAAaOCAlQwggJQMB0GA1UdDgQWBBTSZNGbmAYCPkduA5wF/c4TdqxsPDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOR1RJQU4v MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvV0FOR1RJQU4vMG1UUm01Z0dBajVIYmdPY0JmM09FM2FzYkR3Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaH4kDANBgkqhkiG9w0BAQsFAAOC AQEATtXZDYhqYmRMJQ5if37IAocV3K6CDw1iDF1D02gQP+7loXLGt1ZI1224VYQL yulQpPFA73QW7C6XM5TShSVJjm1UJjrslFIBeeJA1e1amhw7KrFRLHGJ/p/JRnJL vy+SDTpZbuPG6eWcUNfHbwtGJ3IG8K5tM0RjPKi2Noqc966ntMriwR+Frv62Wcxy VeZ+hYqSRH59tWqscUVoexZLPNOHWA9V9t0nLm0CvpfQ7kmIskbyIBLRGI4wpAXo nAy1LzonzVEY6vlmyNk+XLFoLJzKzLsspBw+ezquHQwpAl+zExgWM1DvCrm+xiRs Vrso9RYaW+YyhDDpC7FVit81jA== -----END CERTIFICATE-----Generated at Sat Aug 23 22:27:28 2025 by rpki-client