$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer File: XNEK1bakd108UE1mEHH4ziQ-KAc.cer (raw, json) Hash identifier: bpjxiWhD1IlFNe1cJYmHAegNuwm2sOclyCoxFE+SP0I= Subject key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:56 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 131629 IP: 103.119.212.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 14:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15378 (0x3c12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:88:d7:81:0d:8b:8a:7e:22:a3:b6:cc:ec: c4:ee:c3:e2:07:17:df:1d:02:a4:dd:81:d6:10:bb: 8d:a2:f8:c3:fc:e4:49:f3:04:d0:97:c7:fc:a6:06: 14:d4:44:5c:7e:b2:58:ab:1c:d0:f8:9f:40:37:75: cf:c5:6c:89:78:5b:18:d5:88:4c:ca:97:1f:ce:1e: e2:db:a4:db:a5:d2:06:de:77:ab:2f:29:99:bc:be: 58:c2:33:45:b1:9d:99:67:5b:c5:c0:7c:ec:ed:1c: 66:1d:90:4b:8e:a1:3e:9e:bb:c2:1a:ee:c0:5b:a8: 93:ef:4c:08:1e:33:f9:7b:65:bc:eb:18:03:6e:4d: f6:59:5a:6c:be:53:6a:31:f0:38:58:02:25:7a:7f: cc:66:fc:e1:7c:27:2b:41:ff:ab:d8:db:c2:6f:34: 06:65:d6:0f:fe:ba:b2:38:29:91:c0:27:5f:b7:b6: 18:f7:c6:8d:ac:db:af:cf:ce:72:50:ca:18:18:42: a5:f4:6d:7e:88:28:a1:c9:d6:ed:c2:9a:4b:02:7c: ec:c3:72:0a:ac:38:cf:3d:d6:ca:3b:25:21:0e:d4: d2:08:13:ca:2e:e6:f9:77:95:26:03:e1:dd:96:af: dd:31:dd:b6:e4:f5:66:29:22:76:db:d5:7b:aa:17: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131629 sbgp-ipAddrBlock: critical IPv4: 103.119.212.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:7c:35:49:eb:bd:be:c2:45:c8:7e:ad:8c:c0:d6:c2:19:95: 5f:8b:56:49:cb:9a:fc:7c:75:e2:6d:d7:d7:82:61:5a:fe:b7: 38:a4:1a:3a:3e:ca:55:d9:84:58:19:54:85:d2:ea:1c:a8:3d: c6:62:4b:0f:9f:f6:a9:12:5b:bc:69:9d:06:50:b2:df:a0:88: 5a:0f:74:13:54:fb:d0:d4:cc:e9:a2:03:51:43:eb:c8:15:bb: 07:3f:79:1c:69:fe:d2:e3:cc:a8:c4:67:c9:28:f0:da:82:4c: 72:54:1a:38:2e:10:fa:23:94:31:1e:3e:be:f4:61:fa:2d:73: ee:ef:57:98:2e:07:99:97:0d:a3:48:a7:33:9a:8a:eb:b5:d9: 01:c7:d9:a9:ef:a5:9a:0c:95:01:66:e3:59:16:33:42:8f:30: ff:a8:41:5d:25:63:9f:e6:6a:f4:f1:f2:37:86:00:f8:49:89: 66:ee:bc:23:69:ed:a0:a8:93:b7:b7:d0:51:7f:c1:c3:8b:40: 7f:13:11:a6:7e:51:bf:31:6e:8d:a6:cb:b6:99:ff:d7:2d:c0: 2b:c3:d8:b8:e7:4a:9a:07:ee:fa:07:5c:0b:fe:bc:ae:66:62: 7a:8c:a0:08:c6:2c:b6:11:d3:ac:86:98:e1:5a:fa:56:3e:42: b6:1c:78:aa -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICPBIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ1NloXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNUNEMTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgw NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALoRiNeBDYuKfiKjtszs xO7D4gcX3x0CpN2B1hC7jaL4w/zkSfME0JfH/KYGFNREXH6yWKsc0PifQDd1z8Vs iXhbGNWITMqXH84e4tuk26XSBt53qy8pmby+WMIzRbGdmWdbxcB87O0cZh2QS46h Pp67whruwFuok+9MCB4z+XtlvOsYA25N9llabL5TajHwOFgCJXp/zGb84XwnK0H/ q9jbwm80BmXWD/66sjgpkcAnX7e2GPfGjazbr8/OclDKGBhCpfRtfogoocnW7cKa SwJ87MNyCqw4zz3WyjslIQ7U0ggTyi7m+XeVJgPh3Zav3THdtuT1ZikidtvVe6oX 3R8CAwEAAaOCAm4wggJqMB0GA1UdDgQWBBRc0QrVtqR3XTxQTWYQcfjOJD4oBzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRFUy8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9DS01BVEVTL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgItMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ3fUMA0GCSqGSIb3DQEBCwUAA4IBAQBefDVJ672+wkXIfq2MwNbCGZVf i1ZJy5r8fHXibdfXgmFa/rc4pBo6PspV2YRYGVSF0uocqD3GYksPn/apElu8aZ0G ULLfoIhaD3QTVPvQ1MzpogNRQ+vIFbsHP3kcaf7S48yoxGfJKPDagkxyVBo4LhD6 I5QxHj6+9GH6LXPu71eYLgeZlw2jSKczmorrtdkBx9mp76WaDJUBZuNZFjNCjzD/ qEFdJWOf5mr08fI3hgD4SYlm7rwjae2gqJO3t9BRf8HDi0B/ExGmflG/MW6Npsu2 mf/XLcArw9i450qaB+76B1wL/ryuZmJ6jKAIxiy2EdOshpjhWvpWPkK2HHiq -----END CERTIFICATE-----Generated at Sat Aug 23 11:08:57 2025 by rpki-client