$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer File: BA2WgwOzZPdyp1NXgiDTU34WFm4.cer (raw, json) Hash identifier: 3CfJ/oky21VktSqjaC+cOksqB1VuQIoiDyxF06HGo/M= Subject key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:07 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.175.254.0/23 IP: 2400:1e20::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15602 (0x3cf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:15:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=040D968303B364F772A753578220D3537E16166E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:0c:d8:4a:49:9f:ff:f1:9f:9f:99:54:1d: 99:26:33:4f:2c:bd:1d:df:07:9b:d5:b2:1b:b7:8e: 4f:fb:30:66:41:f5:44:ca:55:9b:93:76:e9:09:8d: 31:46:33:73:ad:84:b2:c8:bc:0d:8d:25:c0:12:46: f7:f7:91:50:b8:e7:e7:e5:0c:31:b0:6b:14:7b:07: 9c:12:f8:2d:22:99:81:2a:5c:7a:55:e6:f1:bf:cd: cc:4a:75:d9:bb:ae:f4:90:41:21:0b:d2:b4:0c:99: 10:cd:6e:fa:f2:38:65:35:80:5f:79:45:22:00:7b: 0f:22:e5:03:af:86:ed:7b:97:27:3d:97:b0:da:c7: 30:82:0b:90:23:a5:82:3b:25:b9:b4:1b:f9:eb:60: 26:22:e7:10:c5:5f:fb:69:dd:e1:0b:e5:73:09:bf: 67:c4:db:50:97:d6:ed:28:19:73:bb:a0:1a:b1:70: cf:81:a3:c0:f5:6e:80:cc:fb:18:bf:67:de:64:c4: fa:7a:8a:f7:4d:6f:ab:ad:91:a0:dd:b3:b0:ad:0b: f0:95:1c:8d:ec:22:1d:d7:df:4c:6b:ce:d6:b1:d5: 62:4d:75:b7:6f:4e:1c:15:4e:22:f9:77:de:78:88: 49:34:a5:4a:89:c0:f3:a1:7a:c7:ec:90:2b:62:74: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.175.254.0/23 IPv6: 2400:1e20::/32 Signature Algorithm: sha256WithRSAEncryption 43:6f:27:4b:ce:9f:48:7e:38:68:06:55:0c:7d:5c:f7:50:8b: 00:e7:29:ad:bc:e1:2b:1b:42:5f:b1:82:a7:ab:e7:52:68:81: 37:8e:3f:f2:50:dc:9c:59:92:f1:ca:c0:1f:80:60:aa:96:75: b5:19:53:a9:58:77:6f:0e:8c:bc:ee:6c:a5:c7:ab:b8:b6:c6: fa:77:3c:7c:43:b1:04:11:21:30:6e:65:7a:ef:ef:7f:00:80: 43:f8:ae:ea:b3:9e:f2:bf:de:34:8b:3c:10:94:eb:ab:74:96: 47:5a:0c:06:39:aa:bf:8d:67:fc:bf:8f:df:63:92:f0:1c:cc: 10:70:d8:3b:23:18:47:1a:36:14:74:b4:b2:86:78:98:28:c7: 78:9f:bf:da:4b:36:4a:4f:5d:10:52:33:2c:22:07:7f:95:5f: 1b:0f:1f:f2:be:7d:db:2c:41:2e:3e:af:e3:84:08:af:e1:ff: 04:53:99:6e:30:e3:79:71:05:50:0f:77:59:55:4f:79:c2:32: 59:27:57:a3:62:f5:ef:13:51:e4:d6:88:f3:71:32:78:59:64: ec:ec:f1:80:a8:0d:e9:88:ec:26:30:ae:38:6e:42:0d:4a:26: 7e:25:54:95:ce:88:49:10:db:68:64:89:c7:e7:47:f6:eb:1e: ec:f4:2d:8d -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICPPIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTUwN1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMDQwRDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAONMDNhKSZ//8Z+fmVQd mSYzTyy9Hd8Hm9WyG7eOT/swZkH1RMpVm5N26QmNMUYzc62Essi8DY0lwBJG9/eR ULjn5+UMMbBrFHsHnBL4LSKZgSpcelXm8b/NzEp12buu9JBBIQvStAyZEM1u+vI4 ZTWAX3lFIgB7DyLlA6+G7XuXJz2XsNrHMIILkCOlgjslubQb+etgJiLnEMVf+2nd 4Qvlcwm/Z8TbUJfW7SgZc7ugGrFwz4GjwPVugMz7GL9n3mTE+nqK901vq62RoN2z sK0L8JUcjewiHdffTGvO1rHVYk11t29OHBVOIvl33niISTSlSonA86F6x+yQK2J0 dSUCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQEDZaDA7Nk93KnU1eCINNTfhYWbjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSUFOR1lVL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnr/4wDQQCAAIwBwMFACQAHiAwDQYJ KoZIhvcNAQELBQADggEBAENvJ0vOn0h+OGgGVQx9XPdQiwDnKa284SsbQl+xgqer 51JogTeOP/JQ3JxZkvHKwB+AYKqWdbUZU6lYd28OjLzubKXHq7i2xvp3PHxDsQQR ITBuZXrv738AgEP4ruqznvK/3jSLPBCU66t0lkdaDAY5qr+NZ/y/j99jkvAczBBw 2DsjGEcaNhR0tLKGeJgox3ifv9pLNkpPXRBSMywiB3+VXxsPH/K+fdssQS4+r+OE CK/h/wRTmW4w43lxBVAPd1lVT3nCMlknV6Ni9e8TUeTWiPNxMnhZZOzs8YCoDemI 7CYwrjhuQg1KJn4lVJXOiEkQ22hkicfnR/brHuz0LY0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:30:09 2025 by rpki-client