$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer File: 2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer (raw, json) Hash identifier: nexRmy5/bQJFb2V8FIxypQef5GfYLYhEi/0oJdGeqUw= Subject key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DA5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:40 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 157.66.166.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7589 (0x1da5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:db:76:f8:d6:c8:dd:65:c9:9f:56:e0:1c: 83:c1:b7:eb:74:8f:8a:8a:63:3b:53:f9:30:ff:4d: ca:2b:5c:54:6c:45:9f:06:00:af:58:fb:bc:60:ab: 21:c8:86:28:29:f0:c0:b4:77:bd:4a:e4:fc:a6:54: 86:c6:db:fc:5e:c4:46:53:a8:11:a9:8c:79:54:d1: 4c:fa:2e:c6:23:e1:a7:a8:fb:62:cf:50:a4:74:6d: 4f:8c:37:8b:b5:9e:8a:45:29:c5:6c:3c:5d:97:01: 3e:9b:f0:ab:8e:eb:a8:be:da:88:6e:52:6e:83:6d: db:88:74:25:16:45:bb:6d:54:3d:e2:19:a7:c8:09: 9f:42:6f:2f:86:88:aa:6a:1f:78:72:65:c2:7e:e4: f1:37:c2:38:73:5a:79:c1:72:b8:f7:96:55:5b:17: d5:ab:dc:da:35:e7:90:9d:d8:aa:bd:8f:b6:e2:6e: 47:b5:43:2a:3c:ad:c7:42:7e:46:b5:49:40:f6:59: a1:1c:2d:48:b4:71:e2:db:eb:24:6d:26:9e:18:ff: 81:09:01:bb:dc:5a:56:0c:47:0a:2d:77:33:f6:5e: 2a:64:5d:7f:43:3b:f2:be:72:8a:37:b3:67:23:d9: 85:f3:bb:af:24:c1:38:d8:c0:3a:cb:5d:ad:bf:1c: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.166.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:a3:d9:68:b9:98:98:ed:cc:ee:ac:4a:58:14:bb:d2:f9:1a: 6e:f4:f1:15:60:32:09:13:65:35:49:55:36:ee:c3:22:b7:5a: 8f:f8:97:27:be:d8:fc:d5:b5:5b:de:14:4d:05:1b:c8:53:95: e5:e8:a0:98:a4:e8:86:0b:9c:92:2f:17:eb:e6:24:7f:94:d8: ce:dd:f0:57:35:f7:7f:63:2c:7a:97:7f:a0:84:05:d1:87:82: 86:fa:fb:ff:13:c4:50:67:07:63:d7:8d:59:10:fc:a2:8b:c6: a4:f5:0e:31:62:76:23:a6:bc:2a:74:39:eb:e0:dc:34:e6:68: 87:49:ad:30:ce:75:b5:a4:02:e1:2c:a0:a9:d5:35:ec:51:a5: 11:f6:c7:d2:fc:cf:d2:d8:93:82:6a:dc:cc:1c:a6:78:2e:2f: 9e:34:c2:05:5c:82:5f:11:82:38:26:72:48:74:19:f7:a1:e8: 82:e1:19:a6:0b:63:9f:3a:c4:e1:24:a7:61:96:2d:4f:26:2a: 4f:5b:5e:6f:ed:ba:8f:5c:6b:ae:b1:12:78:1a:3a:4f:a9:e4: d4:b4:b6:99:9c:da:ac:f5:e0:40:c1:61:22:06:3f:7b:4c:62: 48:f5:6b:79:7c:6c:c8:ec:b0:4c:ed:6b:d1:ed:b3:c4:e0:7f: d1:1c:74:6e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICHaUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQ0MFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRDk2NkI1NTkwOTMyNDE4MEE4OEE0NUUxRjY4M0NGNEQyRUQ5QkNB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANDl23b41sjdZcmfVuAc g8G363SPiopjO1P5MP9NyitcVGxFnwYAr1j7vGCrIciGKCnwwLR3vUrk/KZUhsbb /F7ERlOoEamMeVTRTPouxiPhp6j7Ys9QpHRtT4w3i7WeikUpxWw8XZcBPpvwq47r qL7aiG5SboNt24h0JRZFu21UPeIZp8gJn0JvL4aIqmofeHJlwn7k8TfCOHNaecFy uPeWVVsX1avc2jXnkJ3Yqr2PtuJuR7VDKjytx0J+RrVJQPZZoRwtSLRx4tvrJG0m nhj/gQkBu9xaVgxHCi13M/ZeKmRdf0M78r5yijezZyPZhfO7ryTBONjAOstdrb8c 8B8CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBTZZrVZCTJBgKiKReH2g89NLtm8pTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElSVU4vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TElSVU4vMldhMVdRa3lRWUNvaWtYaDlvUFBUUzdadktVLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CpjANBgkqhkiG9w0BAQsFAAOCAQEALqPZ aLmYmO3M7qxKWBS70vkabvTxFWAyCRNlNUlVNu7DIrdaj/iXJ77Y/NW1W94UTQUb yFOV5eigmKTohgucki8X6+Ykf5TYzt3wVzX3f2Msepd/oIQF0YeChvr7/xPEUGcH Y9eNWRD8oovGpPUOMWJ2I6a8KnQ56+DcNOZoh0mtMM51taQC4SygqdU17FGlEfbH 0vzP0tiTgmrczBymeC4vnjTCBVyCXxGCOCZySHQZ96HoguEZpgtjnzrE4SSnYZYt TyYqT1teb+26j1xrrrESeBo6T6nk1LS2mZzarPXgQMFhIgY/e0xiSPVreXxsyOyw TO1r0e2zxOB/0Rx0bg== -----END CERTIFICATE-----Generated at Sat Aug 23 22:28:46 2025 by rpki-client