$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/U0x2J0ozCwce_SDbBfbQQpKTdD4.cer File: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (raw, json) Hash identifier: 9k9xyP9CPxo9MsTikLvIKyHQ14M5uC6zcos87s15VUk= Subject key identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 1CA5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:05 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 2001:7fa:1::/48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7333 (0x1ca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Validity Not Before: Aug 22 08:15:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=534C76274A330B071EFD20DB05F6D0429293743E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:16:eb:ee:2b:29:44:81:14:a2:40:4a:d9: 5c:e5:7f:5c:43:b3:3f:f1:9e:d5:25:2e:a7:52:b7: e4:8a:b2:4d:18:08:59:97:ec:92:86:2f:9c:a8:7e: bd:18:0d:18:4b:13:49:fd:71:5a:63:4a:97:0a:01: 56:40:85:7f:7d:ec:62:84:15:87:12:c2:54:51:ef: 86:77:a4:20:c5:a4:d5:a2:99:9e:43:22:89:88:6a: 93:5c:d5:0d:74:9f:b4:dd:e5:7c:76:2e:35:de:22: d5:f2:2e:7a:46:38:b7:cf:07:ba:5f:f7:5e:5b:e4: 91:22:6f:31:2d:0e:2c:78:82:69:25:f0:55:a6:96: 46:fe:3a:14:af:41:cb:db:40:11:5a:54:e1:bd:32: c4:cd:a9:46:28:a3:0f:73:1d:08:ea:eb:83:63:09: 64:3c:57:63:89:7f:36:3b:c6:47:17:ca:42:27:0b: cb:3a:dc:36:7f:eb:a0:da:68:48:22:ec:52:fa:6c: c7:39:24:e7:ef:da:c3:be:53:44:22:f1:75:27:ea: 18:53:1c:05:2f:02:fe:3a:d7:b0:d4:25:1a:5d:fe: 6d:25:39:96:16:40:f5:70:c2:c0:5e:c4:9c:e3:5f: f7:a8:73:44:ab:9c:6a:1b:90:95:f3:61:f2:d8:58: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:7fa:1::/48 Signature Algorithm: sha256WithRSAEncryption 88:d4:c6:a9:a6:1e:84:c4:c7:a1:e0:1e:c1:2d:f0:8c:64:e9: 52:01:4b:32:5c:12:e3:82:7a:1b:6c:31:1c:b7:5f:7a:3f:a9: 9b:b8:03:bd:bb:3b:75:ac:63:65:20:13:e2:14:64:24:93:93: 4b:39:bd:c3:d9:84:a1:d9:65:1f:d0:76:a8:7e:56:fc:42:f5: b0:6c:d6:21:da:99:a9:69:bd:80:a4:85:1b:9c:24:3d:2a:b2: b6:f7:df:c3:c2:0c:f0:38:cc:55:16:b7:42:d1:d1:ee:93:2a: f9:e7:82:43:17:ca:ce:d9:03:32:a8:4f:35:4b:65:87:a9:4b: 65:53:ac:6b:7b:69:5c:f6:0c:63:d6:d3:7a:3a:6c:06:82:96: 16:22:14:2e:df:55:11:56:a8:57:35:1a:e3:5f:2f:0e:b1:58: ba:15:91:4a:89:27:85:4c:86:3c:16:46:f8:02:25:60:13:ae: c2:c5:ee:e3:f7:cf:24:68:a2:67:c7:50:89:5a:d5:a7:0f:8c: e1:23:e1:76:90:2b:a2:c2:2b:5b:3f:10:19:9e:ee:f6:bc:d9: 39:08:f9:e0:cd:71:5d:18:8e:bf:a5:37:e8:90:0b:ad:2c:2c: 36:3c:cd:ab:15:94:73:c2:b1:12:18:4c:a7:e2:b8:95:2d:e0: 63:40:33:3f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICHKUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI1MDgyMjA4MTUwNVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNTM0Qzc2Mjc0QTMzMEIwNzFFRkQyMERCMDVGNkQwNDI5MjkzNzQz RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFyFuvuKylEgRSiQErZ XOV/XEOzP/Ge1SUup1K35IqyTRgIWZfskoYvnKh+vRgNGEsTSf1xWmNKlwoBVkCF f33sYoQVhxLCVFHvhnekIMWk1aKZnkMiiYhqk1zVDXSftN3lfHYuNd4i1fIuekY4 t88Hul/3XlvkkSJvMS0OLHiCaSXwVaaWRv46FK9By9tAEVpU4b0yxM2pRiijD3Md COrrg2MJZDxXY4l/NjvGRxfKQicLyzrcNn/roNpoSCLsUvpsxzkk5+/aw75TRCLx dSfqGFMcBS8C/jrXsNQlGl3+bSU5lhZA9XDCwF7EnONf96hzRKucahuQlfNh8thY wJECAwEAAaOCAlEwggJNMB0GA1UdDgQWBBRTTHYnSjMLBx79INsF9tBCkpN0PjAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SElORVQvVTB4Mkowb3pDd2NlX1NEYkJmYlFRcEtUZEQ0Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABB/oAATANBgkqhkiG9w0BAQsFAAOCAQEA iNTGqaYehMTHoeAewS3wjGTpUgFLMlwS44J6G2wxHLdfej+pm7gDvbs7daxjZSAT 4hRkJJOTSzm9w9mEodllH9B2qH5W/EL1sGzWIdqZqWm9gKSFG5wkPSqytvffw8IM 8DjMVRa3QtHR7pMq+eeCQxfKztkDMqhPNUtlh6lLZVOsa3tpXPYMY9bTejpsBoKW FiIULt9VEVaoVzUa418vDrFYuhWRSoknhUyGPBZG+AIlYBOuwsXu4/fPJGiiZ8dQ iVrVpw+M4SPhdpArosIrWz8QGZ7u9rzZOQj54M1xXRiOv6U36JALrSwsNjzNqxWU c8KxEhhMp+K4lS3gY0AzPw== -----END CERTIFICATE-----Generated at Sun Aug 24 12:07:57 2025 by rpki-client