$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer File: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (raw, json) Hash identifier: 8lAEyw1wAnEhY6qgGJt9J/EVC8MsOWYriHL1G4ne7GU= Subject key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1D97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:37 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.25.220.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7575 (0x1d97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:d0:b8:ad:bc:04:02:3e:91:87:f7:ab:8f: 56:53:e8:6b:7e:72:2e:d7:6f:cc:9c:75:73:e5:43: f4:e3:1f:28:e0:c1:18:50:3d:75:4b:13:33:8b:9f: 8e:97:fa:41:5d:d1:3b:f8:a6:61:1d:dc:e0:31:c6: bc:c0:a3:0c:13:82:65:d6:2f:99:3a:30:7f:07:cb: 60:7c:c9:df:52:a8:f3:32:6d:9f:c1:68:23:81:a8: 7e:a2:13:5c:f0:a1:86:3f:d2:eb:4b:82:ea:60:24: cf:1f:ba:25:f2:b7:ad:dd:d3:2f:3a:39:d4:2a:1f: 97:7e:20:9a:7e:c0:20:6f:99:e4:8d:cf:68:34:e0: 70:10:20:ab:54:6e:a0:09:9c:4c:ab:ff:77:54:25: d0:a9:c1:5e:44:a5:87:ed:63:1b:78:b9:58:12:77: 39:db:6e:02:2e:4a:d4:d5:50:09:f4:ac:a8:43:f4: fa:51:b5:66:37:91:1a:de:9a:ef:8f:5a:c9:7a:4b: b7:28:18:f6:4b:81:83:3f:7f:36:15:33:63:44:a4: ab:cf:7d:77:55:6c:e7:5b:33:f2:74:34:b7:ab:a6: b8:b9:70:01:33:d8:b5:d7:5a:93:59:ec:69:70:85: f8:88:5f:e3:0a:5b:0f:14:b1:62:7c:c8:17:63:61: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.220.0/23 Signature Algorithm: sha256WithRSAEncryption b4:f8:51:84:bd:77:87:4f:1e:1e:1a:6c:a0:a6:ff:eb:24:19: 4e:4e:38:a8:3e:0c:f7:8c:76:cb:ad:eb:0a:c9:d7:77:9b:05: 7c:2f:62:8f:13:79:19:98:b5:16:80:2c:4d:70:2a:8c:bd:00: 52:55:b1:36:61:64:3c:87:58:34:bc:80:7c:12:38:57:db:81: 03:d4:37:b5:27:8e:b1:81:fd:e1:f9:1e:02:a5:9f:cf:ce:58: b9:31:03:b7:a0:58:27:49:f8:82:12:a1:17:e1:63:9d:74:4b: e5:60:48:b5:f4:d6:a7:fb:cb:d6:e6:a8:97:e1:0d:ad:a7:48: 11:21:cf:a9:04:4f:5f:d3:6e:23:45:a8:fc:be:5d:62:65:85: 3a:d9:44:7a:68:40:8b:e4:42:b0:6f:c7:d5:71:fc:7f:66:70: c1:29:d8:16:b8:d7:f3:5a:9b:bf:23:22:46:7c:55:55:29:0c: 6a:8c:7a:90:54:36:9f:f2:e9:04:83:29:06:e3:c5:dd:b1:55: eb:c3:43:b7:dd:f5:69:51:88:83:73:11:85:c1:f5:4b:13:9c: 9e:19:d8:c1:e5:a9:3d:48:7e:81:35:d5:33:8e:ad:90:60:38: 9a:41:2c:f7:f6:fb:32:3c:21:01:8c:82:ea:a1:08:ca:88:40: 9a:b8:72:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHZcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQzN1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNDIyRTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVE MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcv0LitvAQCPpGH96uP VlPoa35yLtdvzJx1c+VD9OMfKODBGFA9dUsTM4ufjpf6QV3RO/imYR3c4DHGvMCj DBOCZdYvmTowfwfLYHzJ31Ko8zJtn8FoI4GofqITXPChhj/S60uC6mAkzx+6JfK3 rd3TLzo51Cofl34gmn7AIG+Z5I3PaDTgcBAgq1RuoAmcTKv/d1Ql0KnBXkSlh+1j G3i5WBJ3OdtuAi5K1NVQCfSsqEP0+lG1ZjeRGt6a749ayXpLtygY9kuBgz9/NhUz Y0Skq899d1Vs51sz8nQ0t6umuLlwATPYtddak1nsaXCF+Ihf4wpbDxSxYnzIF2Nh 6o8CAwEAAaOCAlQwggJQMB0GA1UdDgQWBBRCLnyV2H3prushKgxMywF05lyl0DAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRFQ0gv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvU0tJUFRFQ0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZ3DANBgkqhkiG9w0BAQsFAAOC AQEAtPhRhL13h08eHhpsoKb/6yQZTk44qD4M94x2y63rCsnXd5sFfC9ijxN5GZi1 FoAsTXAqjL0AUlWxNmFkPIdYNLyAfBI4V9uBA9Q3tSeOsYH94fkeAqWfz85YuTED t6BYJ0n4ghKhF+FjnXRL5WBItfTWp/vL1uaol+ENradIESHPqQRPX9NuI0Wo/L5d YmWFOtlEemhAi+RCsG/H1XH8f2ZwwSnYFrjX81qbvyMiRnxVVSkMaox6kFQ2n/Lp BIMpBuPF3bFV68NDt931aVGIg3MRhcH1SxOcnhnYweWpPUh+gTXVM46tkGA4mkEs 9/b7MjwhAYyC6qEIyohAmrhyAw== -----END CERTIFICATE-----Generated at Sat Aug 23 22:22:04 2025 by rpki-client