$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TwAMtt3TdIem3h9-rb2hJwjrLBk.cer File: TwAMtt3TdIem3h9-rb2hJwjrLBk.cer (raw, json) Hash identifier: R6akF54h63+yXmcuwW6mPQM4t3rXkfpxL/4KxUgq8HE= Subject key identifier: 4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DDD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:56:00 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.191.202.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7645 (0x1ddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:56:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4F000CB6DDD37487A6DE1F7EADBDA12708EB2C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:57:fc:7c:c2:94:14:19:7f:ae:44:cf:49: ce:99:f3:05:90:eb:26:f4:02:d7:fc:60:ec:e5:db: 46:b9:d7:13:07:cb:40:18:03:6e:a5:98:f3:72:d0: 8b:e9:e8:85:34:cb:a3:83:e5:1f:a6:d2:2b:a4:91: 8f:af:c6:24:20:94:e0:12:f0:ae:56:9f:96:54:99: 6c:8a:0d:92:ae:04:99:33:d4:1a:6c:6b:63:1b:6e: 7e:c5:0b:26:58:51:cc:6b:7a:c4:f5:8f:46:9b:8e: 2e:09:ae:b6:aa:21:36:5a:d3:ee:5b:02:95:d9:ba: d3:9c:e9:8f:fd:c1:b3:3e:4e:5a:3d:5c:bb:bb:5b: 01:27:0c:e2:ce:7f:d0:17:f5:cf:c0:2c:fb:64:79: 84:a8:f3:ba:2e:cf:77:46:70:75:a7:17:2d:e4:e7: 45:1d:dc:50:8c:89:a4:68:4d:99:c2:79:12:d8:0a: 9b:8d:2f:7e:d1:e1:93:ec:b3:cb:e5:f0:58:77:12: fb:1f:23:31:82:c2:fa:79:ff:31:3e:fd:1f:0a:c9: 0a:9e:c0:98:15:25:8e:92:62:67:c4:38:67:32:f0: 4c:ec:36:3e:dd:dd:dc:e7:32:37:35:52:a8:13:5e: 2e:b2:21:99:c5:42:7a:79:f9:c5:50:76:5c:4a:f4: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.202.0/23 Signature Algorithm: sha256WithRSAEncryption c1:2c:11:21:1f:af:87:3d:40:e4:f3:a5:36:04:67:35:1a:83: 01:17:1f:12:94:5d:bd:50:13:21:00:e3:d1:5d:f5:3e:68:2c: 6c:7b:b9:52:35:06:27:59:3a:b6:ce:dc:57:1c:69:65:f4:c4: c6:8e:17:ed:50:8f:57:83:4a:ca:a6:ad:e8:f8:50:30:8a:e9: 67:52:78:51:86:f5:5b:fb:69:cd:a6:e3:de:77:c5:34:fd:4f: fd:0d:5a:2d:f0:b9:b0:b5:38:2a:7d:7b:34:09:7b:1e:a4:4c: 21:e3:d9:c3:4b:a2:81:c9:c6:e2:76:dd:65:41:a3:b1:5e:1c: a5:36:fe:8e:56:2f:54:86:ea:14:12:fb:9c:98:ff:8c:0d:f5: 23:9b:0d:12:36:69:ca:06:c6:fd:c4:13:48:20:e5:14:7c:3a: de:5b:f0:fc:3e:cc:6b:39:f1:53:ed:aa:2c:a4:42:3a:ca:70: 42:de:3e:ba:be:9b:64:c9:8b:b4:ca:84:d2:b9:bb:31:bf:8c: da:72:c7:25:93:b8:6e:5b:ff:72:af:f0:68:ea:17:29:e5:4e: 67:49:ad:9b:e5:03:05:0b:77:ed:cb:da:f2:f3:79:99:a2:87: 6f:7e:bf:e3:36:4a:f4:22:7a:cf:ef:ed:a1:07:b0:95:16:33: e9:86:01:d8 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICHd0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTYwMFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNEYwMDBDQjZEREQzNzQ4N0E2REUxRjdFQURCREExMjcwOEVCMkMx OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzWV/x8wpQUGX+uRM9J zpnzBZDrJvQC1/xg7OXbRrnXEwfLQBgDbqWY83LQi+nohTTLo4PlH6bSK6SRj6/G JCCU4BLwrlafllSZbIoNkq4EmTPUGmxrYxtufsULJlhRzGt6xPWPRpuOLgmutqoh NlrT7lsCldm605zpj/3Bsz5OWj1cu7tbAScM4s5/0Bf1z8As+2R5hKjzui7Pd0Zw dacXLeTnRR3cUIyJpGhNmcJ5EtgKm40vftHhk+yzy+XwWHcS+x8jMYLC+nn/MT79 HwrJCp7AmBUljpJiZ8Q4ZzLwTOw2Pt3d3OcyNzVSqBNeLrIhmcVCenn5xVB2XEr0 OT8CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBRPAAy23dN0h6beH36tvaEnCOssGTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENTS1kvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev VENTS1kvVHdBTXR0M1RkSWVtM2g5LXJiMmhKd2pyTEJrLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/yjANBgkqhkiG9w0BAQsFAAOCAQEAwSwR IR+vhz1A5POlNgRnNRqDARcfEpRdvVATIQDj0V31PmgsbHu5UjUGJ1k6ts7cVxxp ZfTExo4X7VCPV4NKyqat6PhQMIrpZ1J4UYb1W/tpzabj3nfFNP1P/Q1aLfC5sLU4 Kn17NAl7HqRMIePZw0uigcnG4nbdZUGjsV4cpTb+jlYvVIbqFBL7nJj/jA31I5sN EjZpygbG/cQTSCDlFHw63lvw/D7MaznxU+2qLKRCOspwQt4+ur6bZMmLtMqE0rm7 Mb+M2nLHJZO4blv/cq/waOoXKeVOZ0mtm+UDBQt37cva8vN5maKHb36/4zZK9CJ6 z+/toQewlRYz6YYB2A== -----END CERTIFICATE-----Generated at Sat Aug 23 22:41:58 2025 by rpki-client