$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer File: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (raw, json) Hash identifier: x93IP88K9IRdkuZkwpqNu/ZQe9UrKBOWUS9N9UmGxXk= Subject key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DAF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:01 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 64.78.160.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7599 (0x1daf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:15:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:f1:b8:2d:ca:d3:63:08:2b:e4:0f:82:12: fe:c1:1c:8e:b5:21:63:8c:1f:64:ab:77:95:70:ae: ba:24:06:0f:77:bd:cb:89:75:4e:ac:fc:75:1e:65: 3a:13:32:85:3c:59:fe:68:7e:d7:05:83:d4:ea:48: 3b:01:8f:8b:12:db:24:40:35:ac:da:b9:fb:61:16: 18:fd:66:cf:0f:c3:e1:76:93:cf:bd:63:f6:16:c2: 64:b7:90:cc:0b:51:3e:7c:b7:4c:83:5a:9c:36:9e: 0a:bf:5e:ae:8d:79:01:a4:d1:09:76:81:1b:bf:9c: d6:7c:56:df:52:fe:0d:8b:36:28:f6:05:61:9e:e2: 70:6e:df:11:7d:36:d5:ce:4b:89:e4:ae:49:15:01: f7:56:99:83:02:43:90:ef:46:3b:95:08:54:ea:f7: 4c:61:96:c9:b1:b5:45:e6:9b:9f:db:b0:40:22:b9: fc:b6:3b:12:d0:2f:f5:11:d6:af:79:d4:b1:85:71: 53:ae:d0:3f:1e:69:ff:bc:5b:80:c7:9c:a5:1b:53: 27:af:76:1b:b6:68:7e:04:85:72:18:65:fb:2b:8a: db:34:d4:00:ec:75:4c:6f:72:1f:d8:dd:2e:43:a3: 3b:67:f9:7a:6b:11:27:ba:a4:12:d1:04:ca:9c:64: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 64.78.160.0/20 Signature Algorithm: sha256WithRSAEncryption 93:73:fc:41:14:de:b0:8c:62:d0:5a:08:f9:8d:81:07:33:00: 27:2f:86:eb:0f:16:00:b5:5c:fd:b0:9e:e7:46:5f:66:f2:f2: 0d:dd:16:f6:fa:7e:a5:0b:3f:1e:6d:f4:6b:af:09:0b:f8:c6: 9e:23:c2:a9:73:12:36:c2:c3:ee:6a:9a:15:ec:d3:23:5e:22: f3:29:2c:bb:03:92:ca:3c:c6:51:17:fb:07:88:e5:f8:24:de: 9d:8f:d5:61:34:d8:27:1d:f5:7a:46:e0:f0:a1:7e:72:51:ba: e7:4d:ac:03:a9:66:b8:08:ff:3a:4a:5b:63:94:87:ff:69:2b: 41:e6:d8:99:5f:66:e7:d3:fa:e4:9e:cd:dd:9f:5f:06:33:2f: 34:a0:b8:14:a4:bc:b3:2d:c0:c8:a7:54:f2:08:69:59:0e:fc: dc:2a:dc:78:7b:87:78:68:45:e4:32:6b:3a:43:bc:20:4e:62: 76:2f:80:b8:07:3b:8d:54:38:9f:d4:d1:6c:43:f8:98:b6:03: 27:8b:7e:d1:d9:b7:68:20:19:bd:2a:09:27:5b:46:aa:6a:c1: 7a:8a:b5:d1:04:f2:50:f8:fc:22:3b:2a:86:2b:1e:4e:a1:84: e8:6f:1a:c9:6e:94:cb:2e:51:42:f2:2e:6e:fd:30:93:9e:ff: 28:e9:23:97 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHa8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTUwMVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMzczMEQ5QTE5NUFCNzEwMjg2NzIyQ0U1Q0NBNDY3Q0ZCQTVCRDQ5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQY8bgtytNjCCvkD4IS /sEcjrUhY4wfZKt3lXCuuiQGD3e9y4l1Tqz8dR5lOhMyhTxZ/mh+1wWD1OpIOwGP ixLbJEA1rNq5+2EWGP1mzw/D4XaTz71j9hbCZLeQzAtRPny3TINanDaeCr9ero15 AaTRCXaBG7+c1nxW31L+DYs2KPYFYZ7icG7fEX021c5LieSuSRUB91aZgwJDkO9G O5UIVOr3TGGWybG1Reabn9uwQCK5/LY7EtAv9RHWr3nUsYVxU67QPx5p/7xbgMec pRtTJ692G7ZofgSFchhl+yuK2zTUAOx1TG9yH9jdLkOjO2f5emsRJ7qkEtEEypxk EmUCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBQ3MNmhlatxAoZyLOXMpGfPulvUlDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09N LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL05JTUJVU0NPTS9OekRab1pXcmNRS0djaXpsektSbno3cGIxSlEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQE6gMA0GCSqGSIb3DQEBCwUA A4IBAQCTc/xBFN6wjGLQWgj5jYEHMwAnL4brDxYAtVz9sJ7nRl9m8vIN3Rb2+n6l Cz8ebfRrrwkL+MaeI8KpcxI2wsPuapoV7NMjXiLzKSy7A5LKPMZRF/sHiOX4JN6d j9VhNNgnHfV6RuDwoX5yUbrnTawDqWa4CP86SltjlIf/aStB5tiZX2bn0/rkns3d n18GMy80oLgUpLyzLcDIp1TyCGlZDvzcKtx4e4d4aEXkMms6Q7wgTmJ2L4C4BzuN VDif1NFsQ/iYtgMni37R2bdoIBm9KgknW0aqasF6irXRBPJQ+PwiOyqGKx5OoYTo bxrJbpTLLlFC8i5u/TCTnv8o6SOX -----END CERTIFICATE-----Generated at Sun Aug 24 02:47:22 2025 by rpki-client