$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer File: C9olxjD4_0bjB7GUzSqtHm0GMx0.cer (raw, json) Hash identifier: AzwyYgTOzpO6vnc1ed1ljg9lcFllhv+WKrASUxRMq84= Subject key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:44 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.126.88.0/22 IP: 2405:67c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15122 (0x3b12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:14:f1:c6:f0:0e:91:35:77:e3:0d:e5:78: 22:bf:76:47:b6:aa:20:9e:b4:df:c9:b5:7a:5a:38: 83:3a:c2:69:4d:42:1e:c0:26:ca:85:57:18:e1:4e: 3f:bf:78:84:89:11:fe:80:b7:6a:56:c6:f0:45:df: b9:a4:09:b6:27:83:99:72:3c:f0:c9:a6:04:a0:56: b7:a9:85:ff:fd:97:fd:ff:5a:9b:12:26:e5:98:ef: b3:15:ea:7c:bd:a1:38:6e:1e:91:be:9d:f4:fa:8d: ac:62:83:92:30:21:38:ad:cb:df:7d:9a:a7:f6:71: 5a:57:4f:56:3f:12:9b:cf:54:93:38:67:12:36:46: 67:bc:c3:74:1e:f7:23:f3:40:44:96:ea:ac:58:aa: 5d:ce:50:a1:a3:0e:87:fa:e9:ed:3d:06:84:a1:1d: 32:64:77:77:2a:20:10:35:12:74:88:16:e0:4a:2d: dc:1a:60:16:d6:c7:b0:d3:41:11:7c:5b:59:89:9b: 92:e4:c5:7a:b1:57:10:6b:f3:cd:a9:2e:86:4f:f1: 7a:1e:27:34:b4:82:f3:fe:11:05:ed:a5:33:24:b7: 83:e5:75:b1:0b:44:28:27:01:7a:91:d2:f8:7c:fe: f9:72:9a:7e:ce:ec:30:b6:3e:50:85:53:15:37:be: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.126.88.0/22 IPv6: 2405:67c0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:a3:66:d3:8a:66:24:ee:f1:e9:26:97:b8:0d:da:f9:68:62: 9c:f8:9c:c9:57:d7:a8:8c:bc:c2:59:28:18:8d:d0:25:c3:8d: f1:40:28:8f:fc:52:44:35:1e:7c:2d:40:e6:e1:f4:18:ab:86: 06:99:49:11:f5:ef:c5:0a:be:1a:33:66:14:03:4b:5b:a8:44: bf:22:72:ac:a0:3c:f5:8b:f2:3f:d4:6a:5e:6a:1e:81:f9:9c: 86:3d:22:7c:52:2c:f9:60:77:b8:9d:21:07:26:72:1b:d6:16: e8:d9:b5:d8:eb:38:48:90:19:3b:ab:82:68:7c:d7:11:47:5f: 9b:8d:de:38:84:5e:78:db:23:bd:b4:6a:c0:37:3f:4c:7b:3a: 65:0c:3e:60:fa:24:2f:91:b8:5d:d7:52:12:59:aa:08:ca:29: 9f:a5:df:e5:5e:e7:c0:4c:d0:71:9c:41:9f:e5:d0:04:f8:2c: 36:af:12:cf:d6:1b:15:cd:1c:74:1d:27:7b:2f:67:69:b0:3f: c2:2e:54:57:a5:35:9d:f7:9d:f8:a5:5f:7e:d5:22:db:eb:a7: 5a:e1:08:0f:94:f0:38:58:ff:1b:c1:3c:0c:8c:3b:2d:87:a2: ec:8d:64:0a:d3:d6:00:76:6c:9e:fa:fc:4c:aa:61:33:3f:cd: 7b:0d:c9:8f -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICOxIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ0NFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMEJEQTI1QzYzMEY4RkY0NkUzMDdCMTk0Q0QyQUFEMUU2RDA2MzMx RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqxFPHG8A6RNXfjDeV4 Ir92R7aqIJ6038m1elo4gzrCaU1CHsAmyoVXGOFOP794hIkR/oC3albG8EXfuaQJ tieDmXI88MmmBKBWt6mF//2X/f9amxIm5ZjvsxXqfL2hOG4ekb6d9PqNrGKDkjAh OK3L332ap/ZxWldPVj8Sm89UkzhnEjZGZ7zDdB73I/NARJbqrFiqXc5QoaMOh/rp 7T0GhKEdMmR3dyogEDUSdIgW4Eot3BpgFtbHsNNBEXxbWYmbkuTFerFXEGvzzaku hk/xeh4nNLSC8/4RBe2lMyS3g+V1sQtEKCcBepHS+Hz++XKafs7sMLY+UIVTFTe+ ZNMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQL2iXGMPj/RuMHsZTNKq0ebQYzHTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hBTkdGVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSEFOR0ZVL0M5b2x4akQ0XzBiakI3R1V6U3F0SG0wR014MC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnflgwDQQCAAIwBwMFACQFZ8AwDQYJ KoZIhvcNAQELBQADggEBABqjZtOKZiTu8ekml7gN2vloYpz4nMlX16iMvMJZKBiN 0CXDjfFAKI/8UkQ1HnwtQObh9BirhgaZSRH178UKvhozZhQDS1uoRL8icqygPPWL 8j/Ual5qHoH5nIY9InxSLPlgd7idIQcmchvWFujZtdjrOEiQGTurgmh81xFHX5uN 3jiEXnjbI720asA3P0x7OmUMPmD6JC+RuF3XUhJZqgjKKZ+l3+Ve58BM0HGcQZ/l 0AT4LDavEs/WGxXNHHQdJ3svZ2mwP8IuVFelNZ33nfilX37VItvrp1rhCA+U8DhY /xvBPAyMOy2HouyNZArT1gB2bJ76/EyqYTM/zXsNyY8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:30:11 2025 by rpki-client