$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer File: Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer (raw, json) Hash identifier: FAOgsHlCvs8bW9tRsYT2Hs9bK4HKoxizh2UGwIdbFAQ= Subject key identifier: 62:5D:84:5D:79:53:51:9D:71:9E:BD:CC:92:C1:76:32:17:70:22:CF Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DE9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:58:43 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 161.248.134.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7657 (0x1de9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:58:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=625D845D7953519D719EBDCC92C17632177022CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:15:87:c6:b8:2d:09:c2:c8:eb:14:b7:69:39: 3f:48:9b:9f:20:ba:7e:85:4d:db:60:87:48:3a:44: 1a:b0:54:16:49:64:19:ba:f1:1f:c0:cc:54:ea:d7: 19:c0:97:fb:8e:86:1d:a9:a7:c9:fb:7a:6f:44:e4: 09:e3:34:ff:1c:e9:73:86:b8:d4:01:34:40:e5:9f: 89:80:c8:dc:30:ea:ae:5f:ba:b6:ab:e1:53:8e:4d: f5:9f:cd:20:43:8a:09:41:f7:43:b4:ec:57:de:b4: 7b:5e:18:e4:7d:7a:c1:fd:85:0c:80:3f:75:95:eb: 47:7e:e9:2f:f3:20:f2:bd:db:6f:98:e9:fb:10:3e: 27:48:da:6a:e0:18:76:1c:99:ca:7f:e8:6b:18:f0: a7:3d:f7:d8:91:45:08:c4:86:39:5c:dc:7b:10:d3: 91:c7:5e:2c:1d:61:a9:29:b3:63:6f:96:b9:61:83: e5:0a:f4:dd:c0:39:3c:a1:8f:75:2a:1e:68:3f:80: 60:e4:b2:03:4e:cc:b5:ee:01:7d:18:3a:22:a6:ab: 9b:3f:49:0b:1b:d1:0e:43:4d:06:ab:59:3d:b8:11: 4a:6e:ea:cc:77:f3:2a:27:9a:83:bf:dc:7c:f0:83: 17:ca:3f:2a:aa:a5:4b:8a:36:f3:a9:78:73:9a:ee: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:84:5D:79:53:51:9D:71:9E:BD:CC:92:C1:76:32:17:70:22:CF X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.134.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:02:95:41:57:6a:09:e3:4f:90:8e:e2:a2:fd:a3:01:1b:2c: 20:68:8c:21:f8:74:8e:64:8e:55:56:d2:73:8c:c9:a4:03:56: ea:04:f0:6d:c0:8e:f3:0d:da:ae:cd:b2:4a:bd:09:0a:f3:14: 2f:13:0d:41:50:8a:2b:3a:49:f1:3f:c9:9a:23:3d:28:09:bb: 74:9b:ad:a5:3c:e1:7f:23:2b:8f:88:e7:85:0f:10:3f:16:0c: 26:34:61:af:38:fa:3c:0f:17:f2:67:bc:5f:82:d3:2f:26:8e: 36:9a:53:7a:57:29:4d:c3:16:e2:f2:0a:89:eb:b8:b6:2a:d6: cd:b1:29:83:52:66:be:d4:ee:48:31:73:bf:de:73:9a:7c:d4: 7f:23:ac:e2:e4:46:b5:76:e7:2a:6d:ce:66:e7:04:aa:50:f3: 07:23:27:d7:65:8c:37:fe:ef:ee:d5:d1:ea:ad:37:e6:20:ba: 74:1e:3a:50:24:07:5c:7b:63:a1:e3:95:8c:24:12:62:5e:cc: be:63:66:2a:dc:cf:db:a7:5b:3e:7a:fe:86:15:40:4e:fb:a4: 57:e8:45:b9:c2:dc:05:90:7e:d7:24:a4:77:6b:b5:16:a6:04: 33:e6:6e:ca:be:08:e9:fd:5b:bf:62:22:40:b1:04:02:4c:45: ee:f1:9f:3b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHekwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTg0M1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNjI1RDg0NUQ3OTUzNTE5RDcxOUVCRENDOTJDMTc2MzIxNzcwMjJD RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAP0Vh8a4LQnCyOsUt2k5 P0ibnyC6foVN22CHSDpEGrBUFklkGbrxH8DMVOrXGcCX+46GHamnyft6b0TkCeM0 /xzpc4a41AE0QOWfiYDI3DDqrl+6tqvhU45N9Z/NIEOKCUH3Q7TsV960e14Y5H16 wf2FDIA/dZXrR37pL/Mg8r3bb5jp+xA+J0jaauAYdhyZyn/oaxjwpz332JFFCMSG OVzcexDTkcdeLB1hqSmzY2+WuWGD5Qr03cA5PKGPdSoeaD+AYOSyA07Mte4BfRg6 Iqarmz9JCxvRDkNNBqtZPbgRSm7qzHfzKieag7/cfPCDF8o/KqqlS4o286l4c5ru MlkCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBRiXYRdeVNRnXGevcySwXYyF3AizzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElORVBBWVRX LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0xJTkVQQVlUVy9ZbDJFWFhsVFVaMXhucjNNa3NGMk1oZHdJczgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBofiGMA0GCSqGSIb3DQEBCwUA A4IBAQAbApVBV2oJ40+QjuKi/aMBGywgaIwh+HSOZI5VVtJzjMmkA1bqBPBtwI7z DdquzbJKvQkK8xQvEw1BUIorOknxP8maIz0oCbt0m62lPOF/IyuPiOeFDxA/Fgwm NGGvOPo8DxfyZ7xfgtMvJo42mlN6VylNwxbi8gqJ67i2KtbNsSmDUma+1O5IMXO/ 3nOafNR/I6zi5Ea1ducqbc5m5wSqUPMHIyfXZYw3/u/u1dHqrTfmILp0HjpQJAdc e2Oh45WMJBJiXsy+Y2Yq3M/bp1s+ev6GFUBO+6RX6EW5wtwFkH7XJKR3a7UWpgQz 5m7Kvgjp/Vu/YiJAsQQCTEXu8Z87 -----END CERTIFICATE-----Generated at Sat Aug 23 22:28:51 2025 by rpki-client