$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer File: V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer (raw, json) Hash identifier: ihFffjfS+gV99NIsd34Lhl+fiFjYR+177oj79Rh5Sn4= Subject key identifier: 57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DCD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:51:47 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.187.198.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7629 (0x1dcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:51:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=574D5FD459D0D01C338EF0236122C762EC83283C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:cd:3a:8f:54:62:ae:75:f5:8d:5b:07:7c: 10:fe:b4:ad:77:c2:a9:b0:10:96:f9:e1:bf:3c:70: 64:c7:a8:81:ff:83:4d:54:85:9f:b5:c3:6b:ff:80: 79:92:6c:7d:43:c2:43:fe:eb:31:16:53:29:a1:22: 04:6c:c7:67:97:e5:48:eb:c2:9c:e9:90:6c:78:cf: 5b:c4:6d:2c:95:71:79:64:f2:19:39:42:e2:fe:d2: 43:b8:41:cf:e7:50:01:1d:08:52:7d:1e:e3:5c:78: 6f:28:f5:f7:13:e0:d9:bf:eb:df:05:0c:de:35:c8: 63:8c:86:96:19:11:2d:a6:fa:1f:39:08:ea:d2:e6: 7f:d7:a1:54:7b:43:34:27:80:98:fd:19:ac:a2:1f: de:ee:e0:3b:d6:76:56:86:c1:07:79:20:a5:d1:1c: 6a:c8:91:c0:7c:31:5c:76:dc:8c:79:86:98:b2:ff: 51:bd:25:fd:4d:a8:47:10:52:da:43:1f:c8:91:7d: ff:39:87:82:ae:a4:35:d3:af:35:be:6a:b4:50:ef: 52:ea:04:6d:c3:12:79:cc:d0:d3:a4:42:56:8a:96: b4:ba:17:3c:a2:cb:e8:99:57:7c:37:4f:48:09:22: 88:38:b6:ef:24:8c:74:2b:44:68:37:dd:6c:0a:a6: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.198.0/23 Signature Algorithm: sha256WithRSAEncryption 54:d1:94:f7:fc:cf:1e:df:c7:e5:2a:41:49:ff:80:08:99:7b: 19:cc:3f:9c:d0:bd:74:86:f8:97:8c:f7:57:fe:56:00:1a:55: 3d:c3:b1:78:34:51:07:f9:f6:aa:c2:bc:30:e2:27:85:8a:c3: 63:dd:c2:a2:e6:c1:d8:ff:43:7d:04:dc:47:be:45:40:73:28: e8:5c:d3:f6:99:c9:df:a8:5b:dd:7b:b7:e7:b6:6e:5f:76:c8: 63:db:ed:d9:aa:67:61:2e:fc:fe:0d:ac:07:b3:78:14:7e:21: 60:50:f6:6c:5c:ed:0f:c6:f1:31:95:02:97:b6:c3:0d:32:07: 31:28:e2:06:7e:aa:3b:06:6f:1f:c5:9d:61:dd:fc:f8:6b:38: 1f:19:4a:ce:d9:ef:c1:7e:5d:b8:a7:b8:a6:07:77:e5:3f:61: a5:97:18:2c:c2:27:10:68:25:15:42:11:9c:36:94:bf:1f:e4: d0:26:8c:f2:4d:d1:a9:f4:f5:df:c2:96:ab:88:c0:d3:8c:cd: a3:a6:74:3b:51:93:72:68:5c:08:e9:2b:5a:14:e9:5a:01:83: 1e:2d:7d:cf:a3:89:0f:0a:72:64:bb:07:3c:4c:c0:37:3c:ce: 58:06:98:6a:b4:de:50:0f:87:1b:dc:a6:c0:c0:ff:38:7c:de: 6e:c6:33:45 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICHc0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTE0N1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNTc0RDVGRDQ1OUQwRDAxQzMzOEVGMDIzNjEyMkM3NjJFQzgzMjgz QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALCKzTqPVGKudfWNWwd8 EP60rXfCqbAQlvnhvzxwZMeogf+DTVSFn7XDa/+AeZJsfUPCQ/7rMRZTKaEiBGzH Z5flSOvCnOmQbHjPW8RtLJVxeWTyGTlC4v7SQ7hBz+dQAR0IUn0e41x4byj19xPg 2b/r3wUM3jXIY4yGlhkRLab6HzkI6tLmf9ehVHtDNCeAmP0ZrKIf3u7gO9Z2VobB B3kgpdEcasiRwHwxXHbcjHmGmLL/Ub0l/U2oRxBS2kMfyJF9/zmHgq6kNdOvNb5q tFDvUuoEbcMSeczQ06RCVoqWtLoXPKLL6JlXfDdPSAkiiDi27ySMdCtEaDfdbAqm soUCAwEAAaOCAlgwggJUMB0GA1UdDgQWBBRXTV/UWdDQHDOO8CNhIsdi7IMoPDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVTU1ZVEVD SC8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9DSFVNTVlURUNIL1YwMWYxRm5RMEJ3emp2QWpZU0xIWXV5REtEdy5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu8YwDQYJKoZIhvcNAQEL BQADggEBAFTRlPf8zx7fx+UqQUn/gAiZexnMP5zQvXSG+JeM91f+VgAaVT3DsXg0 UQf59qrCvDDiJ4WKw2PdwqLmwdj/Q30E3Ee+RUBzKOhc0/aZyd+oW917t+e2bl92 yGPb7dmqZ2Eu/P4NrAezeBR+IWBQ9mxc7Q/G8TGVApe2ww0yBzEo4gZ+qjsGbx/F nWHd/PhrOB8ZSs7Z78F+XbinuKYHd+U/YaWXGCzCJxBoJRVCEZw2lL8f5NAmjPJN 0an09d/ClquIwNOMzaOmdDtRk3JoXAjpK1oU6VoBgx4tfc+jiQ8KcmS7BzxMwDc8 zlgGmGq03lAPhxvcpsDA/zh83m7GM0U= -----END CERTIFICATE-----Generated at Sat Aug 23 21:38:28 2025 by rpki-client