$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer File: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (raw, json) Hash identifier: CYV8Frr84MYU894Dyx4QOlgt9lD9TehTTTBkOT5Zw1s= Subject key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DA3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:40 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 157.20.248.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7587 (0x1da3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F33A72AAF798105BB277F094458E464B4659F803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:c2:dd:57:d3:dd:7f:21:f7:ae:20:1f:c0: f8:39:68:62:a8:78:7a:a6:aa:f4:50:01:23:6c:aa: e2:90:d2:28:6f:7d:dd:9a:89:35:83:b2:fc:f5:2a: d5:a1:92:c9:fe:e2:ee:a8:34:e2:da:5d:7e:93:5e: b2:26:60:c9:2f:2a:67:e2:30:ed:38:d1:bd:99:33: fc:e4:d3:e1:cf:cb:4b:b4:a3:a9:8f:97:b1:56:a7: 7c:32:44:02:80:6a:43:a1:29:1b:11:99:ee:38:4b: 6f:12:43:0d:72:15:07:d8:d2:f4:54:c6:ea:ee:f7: 8c:47:52:3e:34:02:ba:06:69:f0:9a:90:5f:84:00: 01:02:8d:e4:95:67:22:cd:02:d2:7f:6f:85:f5:af: 06:64:2a:6d:f8:d8:ec:08:95:5a:b2:74:6e:be:c6: 39:67:4a:c7:be:74:fb:e8:06:b9:b1:c4:3b:f3:05: 59:e0:e7:b5:e3:67:b0:d9:3c:1b:ca:64:78:ea:09: db:a4:ed:c0:41:e8:84:8c:aa:06:c3:a4:ea:2b:cf: 8f:cf:2d:8e:7b:be:ae:f8:b5:51:67:fe:1f:7c:7b: 86:bd:1f:04:e4:f6:4a:82:e3:fd:2a:93:fe:8b:0d: 15:a1:98:2a:e9:61:8c:d6:cc:0b:08:3c:54:08:0e: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:38:b0:c1:c3:53:45:6c:71:0e:02:1f:e8:10:46:ab:7c:0c: 7f:0a:60:69:b3:fe:06:ec:a7:2a:a0:fb:05:52:01:00:71:ca: 2f:e9:77:1a:2f:38:03:00:bb:12:eb:fb:3f:0d:83:b1:53:fe: 39:f4:41:f4:b0:b6:a7:ce:1d:b7:2f:96:20:bc:93:5d:b6:89: 52:a5:33:1b:95:43:a6:c0:73:b6:1c:cc:2c:73:0e:8d:ef:96: c8:9e:53:3e:ba:59:ff:89:a1:ae:ce:50:be:07:23:c6:98:eb: d7:b5:e6:3c:24:1b:bf:10:12:67:4b:94:a4:4f:98:33:7f:1a: 46:ba:73:eb:1e:7b:8b:2d:3b:3c:01:a5:33:18:ca:f3:ec:10: 92:79:01:62:a4:08:03:f1:27:1c:b5:a1:35:d5:43:f2:22:7e: c8:58:16:44:80:a6:58:26:0c:39:02:a1:cc:1e:32:e6:12:11: de:c1:52:de:82:7b:3a:20:97:fb:25:01:96:a2:77:8e:da:bd: 2c:7d:16:9c:b7:b1:fc:72:9a:ee:ab:cb:ef:fb:21:f1:15:ea: 99:36:d5:09:2e:78:9f:1e:5b:7c:96:73:18:06:b0:99:46:8c: b5:3e:86:2c:6f:8c:43:4d:55:5e:85:13:32:c8:7e:0a:0d:00: 87:4d:1b:0b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICHaMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQ0MFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRjMzQTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5Rjgw MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqiwt1X091/IfeuIB/A +DloYqh4eqaq9FABI2yq4pDSKG993ZqJNYOy/PUq1aGSyf7i7qg04tpdfpNesiZg yS8qZ+Iw7TjRvZkz/OTT4c/LS7SjqY+XsVanfDJEAoBqQ6EpGxGZ7jhLbxJDDXIV B9jS9FTG6u73jEdSPjQCugZp8JqQX4QAAQKN5JVnIs0C0n9vhfWvBmQqbfjY7AiV WrJ0br7GOWdKx750++gGubHEO/MFWeDnteNnsNk8G8pkeOoJ26TtwEHohIyqBsOk 6ivPj88tjnu+rvi1UWf+H3x7hr0fBOT2SoLj/SqT/osNFaGYKulhjNbMCwg8VAgO 7pMCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTzOnKq95gQW7J38JRFjkZLRln4AzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9J QU1ULzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFPgwDQYJKoZIhvcNAQELBQADggEBAGs4sMHD U0VscQ4CH+gQRqt8DH8KYGmz/gbspyqg+wVSAQBxyi/pdxovOAMAuxLr+z8Ng7FT /jn0QfSwtqfOHbcvliC8k122iVKlMxuVQ6bAc7YczCxzDo3vlsieUz66Wf+Joa7O UL4HI8aY69e15jwkG78QEmdLlKRPmDN/Gka6c+see4stOzwBpTMYyvPsEJJ5AWKk CAPxJxy1oTXVQ/IifshYFkSAplgmDDkCocweMuYSEd7BUt6Cezogl/slAZaid47a vSx9Fpy3sfxymu6ry+/7IfEV6pk21QkueJ8eW3yWcxgGsJlGjLU+hixvjENNVV6F EzLIfgoNAIdNGws= -----END CERTIFICATE-----Generated at Sun Aug 24 02:47:43 2025 by rpki-client