$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer File: C2fHjjXSNjKiVTKu_otKn8q-O00.cer (raw, json) Hash identifier: au91Y0fH+512SPK7Hud8riJXHqmCATVR7eVHRDobom0= Subject key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1D9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:38 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.30.210.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7581 (0x1d9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:c3:97:64:ab:48:c0:cc:45:f8:50:b8:6f: 49:fd:b0:dd:f3:62:69:85:a4:33:62:3f:fc:fe:4b: f1:6c:65:4c:36:38:83:79:1a:97:09:a1:f7:da:42: b5:9c:07:7e:b8:26:bb:79:4b:f9:7c:a3:b9:3b:47: 4c:c4:8e:82:0f:08:ee:a4:4c:02:4e:90:42:d5:dd: 87:46:01:17:e0:df:8f:72:c9:cb:b1:5e:02:63:a8: 34:7c:f8:70:a3:2f:fc:17:2b:2e:7b:26:90:f7:fd: 21:48:c2:c7:a3:e1:ad:a0:3a:7f:74:80:b3:50:7f: 33:81:ba:e6:a3:ef:0a:03:8f:ec:3d:0a:7c:18:e6: e9:4c:46:b2:c1:ec:3e:a0:c2:fd:01:cf:4a:37:43: 13:b2:8e:3d:83:50:0e:11:bc:39:ba:50:5f:42:1a: ec:16:5c:9f:02:a0:dd:9e:6a:66:cd:8d:0f:07:87: 7b:57:e8:1b:31:d4:49:67:67:30:fb:7f:67:ca:e3: fb:42:e2:b1:af:d0:d0:64:d0:3b:7a:8e:68:74:27: 32:7a:f3:23:5e:81:64:1c:cd:bd:42:16:77:ac:d3: fc:e2:b0:3b:5c:27:be:66:ee:f5:aa:f0:52:8c:f1: 32:c6:98:bc:a9:95:3b:9a:43:8e:ca:f2:56:fa:35: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.210.0/23 Signature Algorithm: sha256WithRSAEncryption 49:b3:0f:11:12:bc:15:1a:47:f9:7c:0a:4e:47:14:31:bf:99: f7:9e:0b:fc:3d:2a:b4:54:6c:6c:80:ac:51:2f:72:e7:af:a3: 0c:dd:2a:f1:dc:7f:69:38:e0:90:ac:f8:83:ff:15:73:c8:79: 10:35:15:46:be:bb:9d:f5:3e:75:c3:d0:97:4e:60:03:3e:25: 15:f9:f1:f2:4c:d7:ab:3f:8b:4b:2b:95:22:cb:aa:bb:5e:ff: 87:53:a2:80:9e:b9:ce:58:67:47:13:78:a9:fa:27:cb:5a:19: cf:af:bc:56:70:17:80:ed:a3:0b:9c:f6:6a:4b:db:bb:a1:d3: 62:1c:9a:31:ab:54:6d:61:ab:43:16:4d:86:58:25:a4:ce:30: f3:7c:6a:ab:4c:ab:48:e5:d8:35:2a:57:a3:a9:06:f2:4f:79: 35:19:90:da:6f:f6:70:13:e8:1c:1c:93:2c:46:36:cc:b9:a5: 64:2f:32:73:63:13:f2:44:fc:6a:f1:49:36:b8:c4:0d:5c:c3: a5:3f:3d:98:d4:a0:f1:be:49:a4:78:20:ef:3c:69:93:54:f5: 5e:bb:ea:5f:70:65:e2:38:4c:d5:95:70:e8:de:c8:14:26:68: e9:90:7c:48:b0:b5:c2:f7:d5:c9:4e:c5:ec:d8:33:fd:68:03: 93:1c:27:5f -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICHZ0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQzOFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMEI2N0M3OEUzNUQyMzYzMkEyNTUzMkFFRkU4QjRBOUZDQUJFM0I0 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0bw5dkq0jAzEX4ULhv Sf2w3fNiaYWkM2I//P5L8WxlTDY4g3kalwmh99pCtZwHfrgmu3lL+XyjuTtHTMSO gg8I7qRMAk6QQtXdh0YBF+Dfj3LJy7FeAmOoNHz4cKMv/BcrLnsmkPf9IUjCx6Ph raA6f3SAs1B/M4G65qPvCgOP7D0KfBjm6UxGssHsPqDC/QHPSjdDE7KOPYNQDhG8 ObpQX0Ia7BZcnwKg3Z5qZs2NDweHe1foGzHUSWdnMPt/Z8rj+0Lisa/Q0GTQO3qO aHQnMnrzI16BZBzNvUIWd6zT/OKwO1wnvmbu9arwUozxMsaYvKmVO5pDjsryVvo1 MAUCAwEAAaOCAlgwggJUMB0GA1UdDgQWBBQLZ8eONdI2MqJVMq7+i0qfyr47TTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQVEVD SC8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9DT0RFVVBURUNIL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHtIwDQYJKoZIhvcNAQEL BQADggEBAEmzDxESvBUaR/l8Ck5HFDG/mfeeC/w9KrRUbGyArFEvcuevowzdKvHc f2k44JCs+IP/FXPIeRA1FUa+u531PnXD0JdOYAM+JRX58fJM16s/i0srlSLLqrte /4dTooCeuc5YZ0cTeKn6J8taGc+vvFZwF4Dtowuc9mpL27uh02IcmjGrVG1hq0MW TYZYJaTOMPN8aqtMq0jl2DUqV6OpBvJPeTUZkNpv9nAT6BwckyxGNsy5pWQvMnNj E/JE/GrxSTa4xA1cw6U/PZjUoPG+SaR4IO88aZNU9V676l9wZeI4TNWVcOjeyBQm aOmQfEiwtcL31clOxezYM/1oA5McJ18= -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:40 2025 by rpki-client