$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer File: KY7S_WrVxbVoffYUonXC_ISNTpQ.cer (raw, json) Hash identifier: GfwoXAucWGsJXEbyx/vbgxH7u0kLiu8H9O9w56EM95o= Subject key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:00 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.159.206.0/23 IP: 2406:db40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15472 (0x3c70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:15:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:d2:2e:0c:54:e7:df:51:36:82:19:89:df: e1:06:33:ca:4c:e8:ed:76:26:c9:eb:2c:06:17:d0: 05:26:8d:e2:22:3a:94:3b:12:a5:3b:b4:86:d7:ad: 1d:0a:26:22:2c:04:ee:b0:21:b8:b6:97:ca:91:a9: 15:74:6c:1d:d8:c2:65:09:78:83:8d:99:26:6a:2b: 8e:3f:95:37:71:f3:20:f9:9e:73:77:05:2e:d8:f2: 2e:81:91:9f:c1:8a:a5:ad:6c:40:02:3c:a7:18:a1: 13:44:8f:a3:33:e5:ce:aa:ca:6a:02:5d:e4:39:bc: 3a:0f:89:3c:3f:82:2d:85:88:ef:51:9b:b7:2a:a5: d8:2e:8b:f7:79:49:71:e6:e4:ba:c4:24:1e:ec:ad: 6b:d9:4f:83:34:a4:7a:e7:ce:57:0b:cd:8c:0c:f9: 5e:e4:9f:8d:b4:b2:ad:05:65:c8:34:1e:d7:e8:92: b9:87:7b:68:07:f0:87:d4:ba:d6:45:91:d1:23:95: c9:56:c3:75:5e:01:20:f7:a1:8a:b1:15:55:a5:13: 59:35:64:3f:a0:87:56:14:b3:53:3a:c6:cc:12:66: ab:09:84:42:18:94:55:de:98:4d:4d:bc:25:a4:fb: a6:25:58:90:65:5b:5f:69:62:8d:bf:11:1c:b8:0e: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.206.0/23 IPv6: 2406:db40::/32 Signature Algorithm: sha256WithRSAEncryption 8c:ac:08:65:31:03:de:bf:1c:f6:bf:7a:b4:17:82:eb:cc:41: a4:47:aa:95:44:95:3e:b5:a6:cf:24:a7:69:4a:4e:c2:17:67: a9:87:7d:3b:3d:92:3c:39:6e:b5:5e:f4:0e:5c:32:84:6b:d4: 92:e4:76:42:57:3c:ae:c0:c0:f0:9c:88:b7:31:c0:43:10:ef: 65:dd:0c:7b:dd:00:fd:11:a8:4a:b3:a4:49:8f:24:da:07:e6: 34:e0:0c:9d:07:42:8d:1b:02:3a:db:6c:6a:ed:e1:1e:3c:29: db:5b:9b:15:59:e3:ec:da:fd:5b:85:2a:de:88:de:0a:a2:9a: d5:36:23:d0:83:0f:6a:ee:c8:c0:f3:a7:36:cd:06:96:da:51: 5f:aa:40:30:25:8b:e6:ba:88:68:d7:12:00:47:9e:82:84:ca: ed:b7:db:a6:98:49:0c:1b:22:0b:99:0d:d6:22:c2:b5:47:8b: 0f:90:cd:e0:17:b3:29:eb:4d:48:48:10:6a:66:5b:75:35:b1: 72:52:8d:fb:6c:20:52:53:48:ea:e5:66:6a:d0:25:8f:2e:45: 95:f4:be:e5:2e:32:5e:55:cc:7e:93:d0:8a:d3:56:ba:78:cf: bf:1c:c2:36:61:74:bf:d5:e7:b7:de:f8:b3:92:99:2c:bd:26: 10:07:cb:e7 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICPHAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTUwMFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMjk4RUQyRkQ2QUQ1QzVCNTY4N0RGNjE0QTI3NUMyRkM4NDhENEU5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN1e0i4MVOffUTaCGYnf 4QYzykzo7XYmyessBhfQBSaN4iI6lDsSpTu0htetHQomIiwE7rAhuLaXypGpFXRs HdjCZQl4g42ZJmorjj+VN3HzIPmec3cFLtjyLoGRn8GKpa1sQAI8pxihE0SPozPl zqrKagJd5Dm8Og+JPD+CLYWI71Gbtyql2C6L93lJcebkusQkHuyta9lPgzSkeufO VwvNjAz5XuSfjbSyrQVlyDQe1+iSuYd7aAfwh9S61kWR0SOVyVbDdV4BIPehirEV VaUTWTVkP6CHVhSzUzrGzBJmqwmEQhiUVd6YTU28JaT7piVYkGVbX2lijb8RHLgO GpUCAwEAAaOCAlswggJXMB0GA1UdDgQWBBQpjtL9atXFtWh99hSidcL8hI1OlDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFROUy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9U VE5TL0tZN1NfV3JWeGJWb2ZmWVVvblhDX0lTTlRwUS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnn84wDQQCAAIwBwMFACQG20AwDQYJKoZIhvcN AQELBQADggEBAIysCGUxA96/HPa/erQXguvMQaRHqpVElT61ps8kp2lKTsIXZ6mH fTs9kjw5brVe9A5cMoRr1JLkdkJXPK7AwPCciLcxwEMQ72XdDHvdAP0RqEqzpEmP JNoH5jTgDJ0HQo0bAjrbbGrt4R48KdtbmxVZ4+za/VuFKt6I3gqimtU2I9CDD2ru yMDzpzbNBpbaUV+qQDAli+a6iGjXEgBHnoKEyu2326aYSQwbIguZDdYiwrVHiw+Q zeAXsynrTUhIEGpmW3U1sXJSjftsIFJTSOrlZmrQJY8uRZX0vuUuMl5VzH6T0IrT Vrp4z78cwjZhdL/V57fe+LOSmSy9JhAHy+c= -----END CERTIFICATE-----Generated at Sat Aug 23 22:29:17 2025 by rpki-client