$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer File: 7NL9w4Uip0pCLee9HAJtVeCNnpo.cer (raw, json) Hash identifier: SVGJznmTiDFxhnzswIS5PRO1PbmHW5RBt0kU1OQBv6M= Subject key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:43 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 7534 IP: 202.160.64.0/19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15090 (0x3af2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:a6:78:eb:ac:0e:9f:a2:21:90:a0:0f:a6: 72:90:b5:82:1e:0f:45:57:16:d8:a6:9e:ab:91:78: ef:8d:39:f1:f7:67:b5:15:20:69:98:37:77:e1:d1: 78:f0:cb:8e:cf:c5:e8:ca:b5:14:f8:1b:9a:fb:64: 4e:7c:bf:48:1c:ee:d9:87:b1:e5:8c:2d:31:56:64: 3f:55:4f:d9:98:47:b4:c3:ed:92:0f:5e:b9:92:51: 31:7f:6a:7f:b4:c0:52:91:c5:1e:a7:be:95:72:1c: 0f:d2:56:67:6a:95:ab:b1:8f:0c:67:cd:d1:da:2d: b5:49:10:39:3b:aa:87:d8:ba:0a:a2:2b:e5:92:c5: 09:24:19:99:e1:0b:c3:4c:b1:93:00:cd:aa:15:1b: 8a:f4:c7:00:cd:f4:29:75:29:17:6a:a8:40:40:60: 50:d9:a6:aa:47:ef:22:55:88:17:0a:3f:43:2c:ba: 13:c1:ad:5f:73:15:2d:50:94:32:2e:f6:e1:42:d7: d1:c3:f9:3d:41:d0:dd:af:8b:f5:1d:8c:88:b4:d9: 21:20:24:7b:0a:b3:ca:2b:3f:b2:71:3a:6f:32:46: 25:93:ae:07:4f:aa:7d:c5:bd:28:a5:20:c5:88:53: 10:11:af:4f:45:e0:5b:6b:b3:ac:1e:51:23:9c:9d: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7534 sbgp-ipAddrBlock: critical IPv4: 202.160.64.0/19 Signature Algorithm: sha256WithRSAEncryption 35:26:eb:83:15:ef:1d:c1:4c:4a:f9:49:c4:4f:17:bc:ef:dc: 49:03:75:b9:a6:67:f9:8f:02:ae:59:f5:cc:ed:54:47:be:69: 39:b0:13:32:b5:4b:c8:1f:6c:61:cf:d5:dc:59:30:40:94:ea: 17:53:8e:84:1d:c0:26:db:f1:60:19:31:f6:90:7f:8b:a4:94: 51:29:8e:04:72:b7:98:33:fc:8a:c5:de:df:8e:d3:a8:4c:5c: 23:9e:62:8b:a0:c8:1e:86:7a:30:93:4e:b6:c8:26:9f:f2:16: 88:3b:20:96:ee:6b:4f:9d:a1:cf:33:f7:b0:b3:aa:85:e5:a3: 00:65:04:16:44:ec:d2:8f:ab:35:32:52:eb:23:ab:e8:f7:35: 36:89:70:bb:e6:68:18:4a:45:fa:f4:d5:24:39:9a:ed:1e:d6: 06:50:f3:62:ba:14:98:98:4d:32:a1:9f:77:62:94:ac:77:4a: 4c:50:6f:4b:46:ba:ce:0f:28:28:f4:f1:f9:de:ee:70:14:97: b9:75:29:a5:d9:77:41:35:f6:0b:c7:e3:69:00:85:d0:cd:94: 95:b8:e6:90:56:e5:44:5b:61:df:60:8d:0d:b9:c6:f0:74:22: 04:fa:28:e3:0e:1d:e9:83:9e:f7:04:b5:1e:bb:32:ca:b5:d1: ac:61:34:bf -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICOvIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ0M1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRUNEMkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYmpnjrrA6foiGQoA+m cpC1gh4PRVcW2Kaeq5F474058fdntRUgaZg3d+HRePDLjs/F6Mq1FPgbmvtkTny/ SBzu2Yex5YwtMVZkP1VP2ZhHtMPtkg9euZJRMX9qf7TAUpHFHqe+lXIcD9JWZ2qV q7GPDGfN0dottUkQOTuqh9i6CqIr5ZLFCSQZmeELw0yxkwDNqhUbivTHAM30KXUp F2qoQEBgUNmmqkfvIlWIFwo/Qyy6E8GtX3MVLVCUMi724ULX0cP5PUHQ3a+L9R2M iLTZISAkewqzyis/snE6bzJGJZOuB0+qfcW9KKUgxYhTEBGvT0XgW2uzrB5RI5yd 9PcCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTs0v3DhSKnSkIt570cAm1V4I2emjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJB LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1RQU0lMS0VSQS83Tkw5dzRVaXAwcENMZWU5SEFKdFZlQ05ucG8ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAh1uMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyqBAMA0GCSqGSIb3DQEBCwUAA4IBAQA1JuuDFe8dwUxK+UnETxe8 79xJA3W5pmf5jwKuWfXM7VRHvmk5sBMytUvIH2xhz9XcWTBAlOoXU46EHcAm2/Fg GTH2kH+LpJRRKY4EcreYM/yKxd7fjtOoTFwjnmKLoMgehnowk062yCaf8haIOyCW 7mtPnaHPM/ews6qF5aMAZQQWROzSj6s1MlLrI6vo9zU2iXC75mgYSkX69NUkOZrt HtYGUPNiuhSYmE0yoZ93YpSsd0pMUG9LRrrODygo9PH53u5wFJe5dSml2XdBNfYL x+NpAIXQzZSVuOaQVuVEW2HfYI0NucbwdCIE+ijjDh3pg573BLUeuzLKtdGsYTS/ -----END CERTIFICATE-----Generated at Sun Aug 24 02:47:12 2025 by rpki-client