$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer File: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (raw, json) Hash identifier: RPUcg21H+fDf53OSUzk9bhmuEcwlVD/x2Zu9FtTVA1M= Subject key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DA9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:47 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 139.223.0.0/16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7593 (0x1da9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:ec:7c:fc:c1:a8:cf:cc:b1:e4:0d:b1:20: 9b:fa:75:ac:85:35:eb:5c:6d:bb:64:57:1b:0a:98: b7:99:2d:e0:80:6a:b2:f6:69:98:ac:c3:f9:7e:57: f4:7b:e3:84:d0:b9:7b:a9:5f:83:df:c4:33:53:9f: 40:35:d0:f3:7c:c9:9f:ce:81:ef:e2:02:b2:cc:15: 5b:d3:be:59:1f:97:27:b0:6b:28:9d:b6:76:3b:22: 16:2f:1a:24:fc:c7:b4:04:da:6d:55:a9:f3:6c:f1: 21:92:b3:e2:88:a6:e0:42:58:3a:04:ff:be:b3:ee: d4:41:c4:4a:16:00:83:cc:04:e8:f8:c4:13:85:8f: 93:67:2d:de:91:21:74:35:25:1b:fd:fb:d8:0f:78: 0f:99:a7:4e:b4:86:fc:6e:56:ac:09:ae:6b:c6:ac: 43:a0:21:64:21:e5:86:23:87:50:92:a4:6b:bb:12: d7:c1:4b:db:4a:58:38:11:51:56:ab:e7:d8:71:78: 37:69:38:62:a0:c7:df:da:b3:12:9f:50:ec:6f:6b: 45:90:6e:a4:7c:f9:07:80:41:92:ca:0b:97:9a:82: 4a:20:cc:e5:29:35:29:82:f8:54:08:7e:a2:50:dd: 2d:7a:5a:a6:97:c9:43:74:93:95:5f:61:8a:fa:b2: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption cd:03:75:95:88:a3:67:40:6b:8d:57:94:60:7e:c9:94:66:a8: cf:36:f0:fa:0c:55:d5:92:d8:c9:b2:eb:4d:8b:85:2a:39:34: d9:aa:4a:34:24:3e:6d:e8:b6:e2:b5:14:e0:c9:a5:42:0c:34: 13:e1:18:45:7e:39:8b:1f:96:85:af:06:70:d9:17:a7:56:7d: 0e:0e:e6:68:21:eb:3c:17:bc:09:6a:9b:50:dd:b6:24:be:f1: 8b:ec:cb:0d:20:49:c7:11:19:77:69:b2:24:5f:ed:e9:52:f1: 70:b9:04:37:0a:e0:23:24:9c:d7:8c:57:e2:2a:f5:0a:54:34: 07:1d:49:76:90:d5:7c:50:15:61:8e:d4:62:ba:a5:ca:ea:b3: 2c:fd:8a:c6:9a:04:1b:d0:f6:17:3e:7c:7a:f0:e3:69:96:e3: 3b:60:0e:fa:39:1b:74:93:d7:e9:e3:35:fc:0e:d2:56:e0:a4: 36:ec:fa:04:00:fd:25:71:4a:37:cf:10:be:eb:14:6c:3c:4b: 89:9e:f9:6e:07:71:41:35:93:d7:f4:83:dc:f7:b9:3c:98:78: cf:f9:64:e7:f2:e1:38:30:d9:d2:ee:68:e4:cc:36:d5:35:61: af:23:5e:ef:91:f6:74:10:96:6c:41:b6:61:aa:5b:9e:17:1f: d7:ae:05:e3 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICHakwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQ0N1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMDZBRTE0ODBDRUZDNUNFMDgwMjkyOTdGNEQ0OUNCQ0FCRDZDRTJG MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6W7Hz8wajPzLHkDbEg m/p1rIU161xtu2RXGwqYt5kt4IBqsvZpmKzD+X5X9HvjhNC5e6lfg9/EM1OfQDXQ 83zJn86B7+ICsswVW9O+WR+XJ7BrKJ22djsiFi8aJPzHtATabVWp82zxIZKz4oim 4EJYOgT/vrPu1EHEShYAg8wE6PjEE4WPk2ct3pEhdDUlG/372A94D5mnTrSG/G5W rAmua8asQ6AhZCHlhiOHUJKka7sS18FL20pYOBFRVqvn2HF4N2k4YqDH39qzEp9Q 7G9rRZBupHz5B4BBksoLl5qCSiDM5Sk1KYL4VAh+olDdLXpappfJQ3STlV9hivqy o4kCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBQGrhSAzvxc4IApKX9NScvKvWzi8jAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElTTkVULzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1RJU05FVC9CcTRVZ003OFhPQ0FLU2xfVFVuTHlyMXM0dkkubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi98wDQYJKoZIhvcNAQELBQADggEBAM0D dZWIo2dAa41XlGB+yZRmqM828PoMVdWS2Mmy602LhSo5NNmqSjQkPm3otuK1FODJ pUIMNBPhGEV+OYsfloWvBnDZF6dWfQ4O5mgh6zwXvAlqm1DdtiS+8Yvsyw0gSccR GXdpsiRf7elS8XC5BDcK4CMknNeMV+Iq9QpUNAcdSXaQ1XxQFWGO1GK6pcrqsyz9 isaaBBvQ9hc+fHrw42mW4ztgDvo5G3ST1+njNfwO0lbgpDbs+gQA/SVxSjfPEL7r FGw8S4me+W4HcUE1k9f0g9z3uTyYeM/5ZOfy4Tgw2dLuaOTMNtU1Ya8jXu+R9nQQ lmxBtmGqW54XH9euBeM= -----END CERTIFICATE-----Generated at Sat Aug 23 22:27:11 2025 by rpki-client