$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer File: U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer (raw, json) Hash identifier: 6qYZsAlavVgwKV2fwidpbBLZ9Pk/GlUvaAjuS8DjRvw= Subject key identifier: 53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3D30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:52:23 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 2402:13a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15664 (0x3d30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:52:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:83:3e:14:35:c3:cb:67:93:8d:8d:46:b0: e9:e9:be:2e:88:8e:ec:ba:d8:2e:16:d1:6f:1c:48: 27:fb:ad:0b:ab:4c:5c:e2:95:b4:35:2b:56:83:d2: 2b:85:f7:79:41:53:db:4a:96:76:35:5e:18:58:25: 4d:7d:a7:c7:e6:1c:76:ba:65:de:df:74:fe:e6:d3: 3d:f6:b6:ea:b3:bc:77:ec:d9:16:f6:21:8b:87:c8: fc:54:f2:dc:8f:f0:e0:f7:87:ff:f8:98:ba:4c:4f: 84:91:87:40:8b:af:cb:ee:9a:54:d5:e9:93:d9:00: 6d:93:29:ff:02:52:9c:90:60:cd:02:8d:31:e0:4d: 88:27:86:56:fa:5b:b7:b1:27:d5:ae:10:e4:5e:f2: d6:c6:38:09:02:2f:3b:f1:9d:7d:f2:63:92:c5:f1: 91:06:4b:e2:35:2f:b0:8d:f3:67:28:49:51:2c:4a: 4a:74:4a:f0:88:6d:33:c6:ea:c8:d8:d5:80:40:13: 06:0c:de:a0:1a:50:a9:31:2b:82:04:97:b0:6d:0e: bf:0d:2d:db:cf:0c:ed:b0:d8:c0:a4:dd:ce:dc:a5: bd:54:51:42:1d:b6:d6:59:c0:af:d0:4c:32:9d:03: a2:47:b2:d2:74:80:41:00:12:c3:f4:4d:bb:c5:42: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:13a0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:2a:78:84:c5:61:c6:44:46:b2:0e:a7:56:da:5f:bf:02:06: cf:9d:15:06:73:9c:5a:d0:e9:ad:7c:ac:ff:ce:37:5f:19:64: e5:e9:1c:cb:70:8b:4c:3d:ce:c2:b0:ef:01:12:99:ad:34:33: 86:29:80:5e:16:c0:b8:c4:29:5e:02:37:61:fb:52:01:c1:f5: 27:5f:6a:ae:eb:2e:dc:54:7a:f0:b1:86:5f:37:f2:fa:68:69: b1:a9:1e:8a:1c:ec:7f:1d:d6:b7:3f:dd:d5:ce:e2:1d:3e:61: b0:05:7e:6a:c3:af:5d:4d:74:fa:87:4b:68:35:f0:58:df:bd: ae:ff:80:78:40:43:1c:15:ed:14:98:07:a5:95:ee:60:0d:22: 7b:7d:b1:81:c0:77:af:7b:40:0e:c8:6a:6c:31:f6:99:d9:71: dd:41:51:93:24:05:fa:e2:77:ac:18:bb:8f:d2:0b:f9:9c:67: 16:7d:7b:d8:30:f5:82:36:49:4c:8c:57:d5:a2:50:b5:71:80: 21:5b:45:e9:5f:2b:0e:90:d6:58:bb:50:25:0f:eb:8f:ea:9b: 09:0f:b6:a3:a2:61:e9:0a:6f:c8:9a:56:36:e7:80:ad:0b:f5: 10:1d:b1:26:cc:25:21:c6:68:59:a3:bb:76:5b:8e:03:9f:13: 8b:e8:b9:55 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICPTAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4NTIyM1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNTM5MDZFMkUyRUZFNzQ5MURCMTlCMUMyMDlFQTE3OEMzOUEwREFF NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOKVgz4UNcPLZ5ONjUaw 6em+LoiO7LrYLhbRbxxIJ/utC6tMXOKVtDUrVoPSK4X3eUFT20qWdjVeGFglTX2n x+Ycdrpl3t90/ubTPfa26rO8d+zZFvYhi4fI/FTy3I/w4PeH//iYukxPhJGHQIuv y+6aVNXpk9kAbZMp/wJSnJBgzQKNMeBNiCeGVvpbt7En1a4Q5F7y1sY4CQIvO/Gd ffJjksXxkQZL4jUvsI3zZyhJUSxKSnRK8IhtM8bqyNjVgEATBgzeoBpQqTErggSX sG0Ovw0t288M7bDYwKTdztylvVRRQh221lnAr9BMMp0Dokey0nSAQQASw/RNu8VC JEUCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBRTkG4uLv50kdsZscIJ6heMOaDa5TAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUlVJS0UvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UlVJS0UvVTVCdUxpNy1kSkhiR2JIQ0Nlb1hqRG1nMnVVLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCE6AwDQYJKoZIhvcNAQELBQADggEBAE0q eITFYcZERrIOp1baX78CBs+dFQZznFrQ6a18rP/ON18ZZOXpHMtwi0w9zsKw7wES ma00M4YpgF4WwLjEKV4CN2H7UgHB9Sdfaq7rLtxUevCxhl838vpoabGpHooc7H8d 1rc/3dXO4h0+YbAFfmrDr11NdPqHS2g18Fjfva7/gHhAQxwV7RSYB6WV7mANInt9 sYHAd697QA7Iamwx9pnZcd1BUZMkBfrid6wYu4/SC/mcZxZ9e9gw9YI2SUyMV9Wi ULVxgCFbRelfKw6Q1li7UCUP64/qmwkPtqOiYekKb8iaVjbngK0L9RAdsSbMJSHG aFmju3ZbjgOfE4vouVU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:23:44 2025 by rpki-client