$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer File: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (raw, json) Hash identifier: KSBEMqsItMW0r+tHkOWPcUdFirEhhSy2vXWIDyXvAdM= Subject key identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1D99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:38 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 157.20.68.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7577 (0x1d99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:cf:e5:2e:90:f7:a1:8f:b4:6f:5e:2d:6b: eb:65:7b:bd:e4:2d:f3:ee:cc:80:eb:9a:ef:2d:e5: 40:1f:2b:b0:32:ca:d7:4d:71:dc:03:f6:c3:43:25: f4:da:06:ad:eb:46:c4:78:94:0c:8a:c7:41:c2:f7: a1:8b:7e:26:4e:14:cb:80:8c:36:30:24:f3:dc:f2: 1e:3d:9b:66:e6:26:c6:2f:56:cf:0a:8d:4d:ed:1c: 6e:66:07:24:89:7f:6f:23:21:9d:a2:39:2a:bd:53: 43:25:db:0d:54:1a:ac:82:72:dc:1a:4a:49:e9:81: dd:4a:c3:4b:46:af:71:d3:54:23:c6:08:3e:1c:ff: dc:90:17:72:9c:46:99:3f:71:1e:87:28:c4:ea:00: 12:4d:75:ae:57:ea:e7:25:bc:6a:03:3b:f6:75:e5: be:21:c8:36:b0:a8:b0:49:95:26:9d:fc:fe:96:d1: e6:b2:14:d6:70:e6:2a:28:e5:2d:48:e4:65:87:23: 7e:6f:60:53:70:68:23:62:16:11:89:47:a5:59:63: a7:68:1e:4d:3b:78:af:41:a0:f7:98:6c:94:5d:2c: 09:0b:ae:09:57:fd:41:e9:11:ec:c1:10:58:06:3f: 57:5d:02:64:dc:d9:dd:d7:d0:d8:c7:d9:b5:82:0e: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.68.0/23 Signature Algorithm: sha256WithRSAEncryption 29:98:c3:9e:90:6b:59:84:4e:af:8c:66:0d:de:56:1f:db:e0: 9a:c2:18:ff:ef:4a:d1:8c:97:23:52:5e:0c:28:5c:6a:33:c0: 02:8d:4c:cc:3d:cb:99:9f:47:63:40:0b:d8:10:5f:d8:58:e7: db:a3:b5:65:79:81:9c:aa:d1:20:6c:f7:77:e6:b5:00:a6:56: bf:7c:5b:ff:3a:29:2e:93:8b:1a:68:a6:7f:66:f6:e4:e2:24: f4:32:3e:e8:12:f2:f9:72:b3:8b:1f:21:05:b6:52:e7:f6:e1: b7:af:e0:f0:fb:9b:49:ac:bc:1e:75:70:65:e9:dd:ea:d1:c6: 6b:3a:48:f8:ed:2a:7e:71:ca:9e:cb:fa:6e:7b:64:b3:53:8b: c4:94:84:20:f4:2c:64:3a:36:77:56:64:77:2c:a4:b3:73:e3: 6c:a5:31:2e:c1:bb:c6:44:f0:31:7a:d9:58:a3:58:fd:4a:5f: b8:38:ac:54:d2:4f:d0:20:3c:07:3c:9e:05:f2:b3:68:4c:15: 1b:64:40:11:27:16:9e:2a:8e:fc:f2:44:bb:dc:d9:c3:58:78: c2:75:1c:cb:00:00:0e:7d:60:44:7b:d5:26:ed:f0:73:d6:82: 44:ca:ca:84:90:32:45:f0:88:5f:df:51:a1:83:77:f2:96:2d: fa:96:17:c4 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICHZkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQzOFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoREU4NzJCQUQyNjJEMThGMEE2NzQ5RTAyNzJEOTc1MjYxRDk0OUVD MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuQz+UukPehj7RvXi1r 62V7veQt8+7MgOua7y3lQB8rsDLK101x3AP2w0Ml9NoGretGxHiUDIrHQcL3oYt+ Jk4Uy4CMNjAk89zyHj2bZuYmxi9WzwqNTe0cbmYHJIl/byMhnaI5Kr1TQyXbDVQa rIJy3BpKSemB3UrDS0avcdNUI8YIPhz/3JAXcpxGmT9xHocoxOoAEk11rlfq5yW8 agM79nXlviHINrCosEmVJp38/pbR5rIU1nDmKijlLUjkZYcjfm9gU3BoI2IWEYlH pVljp2geTTt4r0Gg95hslF0sCQuuCVf9QekR7MEQWAY/V10CZNzZ3dfQ2MfZtYIO FbkCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTehyutJi0Y8KZ0ngJy2XUmHZSewzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRlVZVS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9G VVlVLzNvY3JyU1l0R1BDbWRKNENjdGwxSmgyVW5zTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFEQwDQYJKoZIhvcNAQELBQADggEBACmYw56Q a1mETq+MZg3eVh/b4JrCGP/vStGMlyNSXgwoXGozwAKNTMw9y5mfR2NAC9gQX9hY 59ujtWV5gZyq0SBs93fmtQCmVr98W/86KS6Tixpopn9m9uTiJPQyPugS8vlys4sf IQW2Uuf24bev4PD7m0msvB51cGXp3erRxms6SPjtKn5xyp7L+m57ZLNTi8SUhCD0 LGQ6NndWZHcspLNz42ylMS7Bu8ZE8DF62VijWP1KX7g4rFTST9AgPAc8ngXys2hM FRtkQBEnFp4qjvzyRLvc2cNYeMJ1HMsAAA59YER71Sbt8HPWgkTKyoSQMkXwiF/f UaGDd/KWLfqWF8Q= -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:48 2025 by rpki-client