$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer File: UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer (raw, json) Hash identifier: hn52KTv0uecMgQAKX+Muk3/g/NlS7Ko0Bn9hc+iUsX0= Subject key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DD1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:52:07 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.191.6.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7633 (0x1dd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:52:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b3:78:8c:db:6a:85:6f:33:ef:7d:a2:66:7d: f6:86:10:57:31:42:78:91:01:8d:e7:16:c4:0d:b6: bd:31:6e:5e:b9:ac:89:b6:7f:81:06:af:46:89:87: ed:59:eb:99:1e:18:54:5a:4b:71:dd:31:56:79:2c: 34:c7:dc:6c:cd:a2:2a:d3:a2:1d:93:0b:f4:1f:ac: 5e:3e:b1:bb:9d:b6:ef:0a:d7:d6:75:a5:60:e7:b8: 7b:66:14:d4:66:9b:81:a1:51:7c:25:7f:34:7f:26: 1f:f2:4d:f5:91:59:a0:e0:4f:fb:47:67:5a:d3:c8: c3:12:85:d7:70:bb:6b:a1:7f:98:e1:fd:8d:33:89: 7c:71:44:9a:f1:0f:34:fb:27:ba:5b:a4:8e:08:09: 2b:0a:c7:8f:65:d9:42:ca:4a:db:c2:56:65:a9:59: d5:9e:76:b7:10:76:34:cb:22:33:1c:2e:ee:2b:92: b7:67:16:cc:0f:75:0f:5a:2b:f1:3b:49:ec:d6:b4: fd:74:61:e8:5e:fc:90:3a:fa:b0:c2:2f:5a:49:8f: 81:d8:c5:6a:6d:71:f8:a2:7e:84:6b:4b:f2:c6:3c: b5:90:42:fc:4f:1b:17:b9:c5:e3:87:83:19:a5:b7: cb:8f:43:97:7d:1c:35:89:4e:e5:f2:5e:62:0a:b4: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.6.0/23 Signature Algorithm: sha256WithRSAEncryption 41:91:1e:28:1d:3d:b7:62:c8:6f:2e:b2:fa:7e:3f:b7:bf:58: ab:32:a1:b9:a6:4d:f3:fa:87:56:af:b8:e0:97:2b:34:47:2d: 00:44:09:af:b5:b1:56:2d:9c:bb:26:08:78:2d:11:a7:6e:09: 7c:d8:74:3b:fa:72:8d:16:c1:93:02:8c:c3:a8:fe:4c:45:3f: 59:fe:05:a8:ce:3d:a0:d1:c9:50:ac:8f:2f:6e:2e:14:40:ea: 29:79:7b:a9:16:30:ae:ec:b6:fe:b6:17:ff:0d:3e:7b:45:d0: 5b:ef:ab:d5:f3:c6:67:3a:2f:65:4d:57:74:0c:c6:dd:c5:e0: de:ef:bb:c5:a4:66:dc:d3:9d:44:eb:5d:1a:b6:09:35:77:3b: 93:39:64:c7:b9:5f:77:37:c4:33:b1:dd:a1:a5:16:72:e6:6c: 1a:59:7b:e9:cd:98:c7:15:2c:36:57:fd:76:1c:b4:9b:54:2f: cd:ce:15:d4:01:f4:b0:3a:c8:88:71:7e:70:8a:c1:5b:7d:10: 4d:19:d5:e1:89:ba:e5:10:92:a6:01:5d:db:e2:e6:d1:e7:36: f3:a6:df:1d:62:d8:e9:84:d2:db:86:6e:eb:49:02:2e:44:90: bc:5c:1c:2d:9a:21:ce:a5:07:81:15:08:26:f8:b7:9e:dc:59: e6:10:ee:0e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICHdEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTIwN1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNTMyMkU2MUFFOEM4REQ4OTUzRTFFNkJEQzk2QUU0ODI3QUZDRjk5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPGzeIzbaoVvM+99omZ9 9oYQVzFCeJEBjecWxA22vTFuXrmsibZ/gQavRomH7VnrmR4YVFpLcd0xVnksNMfc bM2iKtOiHZML9B+sXj6xu5227wrX1nWlYOe4e2YU1GabgaFRfCV/NH8mH/JN9ZFZ oOBP+0dnWtPIwxKF13C7a6F/mOH9jTOJfHFEmvEPNPsnulukjggJKwrHj2XZQspK 28JWZalZ1Z52txB2NMsiMxwu7iuSt2cWzA91D1or8TtJ7Na0/XRh6F78kDr6sMIv WkmPgdjFam1x+KJ+hGtL8sY8tZBC/E8bF7nF44eDGaW3y49Dl30cNYlO5fJeYgq0 MK0CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBRTIuYa6MjdiVPh5r3JauSCevz5kDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVZVU4vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TEVZVU4vVXlMbUd1akkzWWxUNGVhOXlXcmtnbnI4LVpBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/BjANBgkqhkiG9w0BAQsFAAOCAQEAQZEe KB09t2LIby6y+n4/t79YqzKhuaZN8/qHVq+44JcrNEctAEQJr7WxVi2cuyYIeC0R p24JfNh0O/pyjRbBkwKMw6j+TEU/Wf4FqM49oNHJUKyPL24uFEDqKXl7qRYwruy2 /rYX/w0+e0XQW++r1fPGZzovZU1XdAzG3cXg3u+7xaRm3NOdROtdGrYJNXc7kzlk x7lfdzfEM7HdoaUWcuZsGll76c2YxxUsNlf9dhy0m1Qvzc4V1AH0sDrIiHF+cIrB W30QTRnV4Ym65RCSpgFd2+Lm0ec286bfHWLY6YTS24Zu60kCLkSQvFwcLZohzqUH gRUIJvi3ntxZ5hDuDg== -----END CERTIFICATE-----Generated at Sat Aug 23 22:29:50 2025 by rpki-client