$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/b-yuhG9BvMOyThMnuiHCMFPhHAM.cer File: b-yuhG9BvMOyThMnuiHCMFPhHAM.cer (raw, json) Hash identifier: q/IxsRvrwU0pSSOKbXaJ0+U5t0DzAEXEGP4LuaILhYQ= Subject key identifier: 6F:EC:AE:84:6F:41:BC:C3:B2:4E:13:27:BA:21:C2:30:53:E1:1C:03 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DE5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:58:33 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 161.248.132.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7653 (0x1de5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:58:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6FECAE846F41BCC3B24E1327BA21C23053E11C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:11:99:eb:b8:9c:02:de:0f:8e:b2:17:4a: 37:32:4e:91:04:37:71:44:93:c9:92:a6:01:01:07: 8a:38:41:e6:74:7b:a0:10:07:85:51:aa:45:24:47: 8e:a0:8d:6c:26:b2:fb:4c:f2:5f:3e:b4:ff:6c:35: b5:12:86:32:d2:25:3e:21:06:a7:e6:09:11:84:2e: 53:47:93:c5:62:b7:b7:64:64:6a:5c:e0:01:0f:d8: 54:a4:72:80:4b:d5:17:f6:e7:0d:92:db:ea:4b:ba: 4f:9e:44:f6:e2:a5:ed:91:33:01:3b:a0:2d:d3:17: 48:c9:b4:1f:a4:35:a8:dd:7e:9e:39:4f:7f:b0:b2: 25:52:c8:19:67:05:31:4f:a7:09:e4:da:76:22:35: 11:f7:be:55:17:5b:e0:64:7a:fb:8f:fc:57:d6:86: 02:4d:93:68:b9:d2:85:66:6c:aa:68:57:6d:3f:2e: bb:a2:41:06:5f:b4:4d:c8:1b:79:7e:05:8d:85:f7: 1c:5e:e1:08:e8:3b:4e:8b:c1:33:75:2e:c2:1f:3f: ce:9c:8a:58:dd:27:bd:1c:52:85:a7:2b:bf:ff:ec: 6a:5d:e1:8a:8c:63:eb:de:55:b2:7b:6a:d0:45:ed: d1:e5:c2:1e:fb:2b:c9:3a:90:41:5b:4b:75:55:62: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EC:AE:84:6F:41:BC:C3:B2:4E:13:27:BA:21:C2:30:53:E1:1C:03 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.132.0/23 Signature Algorithm: sha256WithRSAEncryption bc:d1:61:dc:92:93:73:d5:d9:d0:d1:af:c0:b3:43:3b:8a:d9: 66:73:29:da:f9:44:ca:a5:cc:d5:3b:16:75:97:49:de:89:d1: fc:95:fe:c6:d0:76:c7:b2:6e:b1:4e:75:b7:68:cd:22:94:11: 42:0e:44:0c:98:ad:9f:91:56:2f:2b:8f:60:40:1c:e1:4d:ca: b8:25:35:d0:a6:0f:b4:2c:48:08:65:b1:88:52:34:69:17:89: a6:34:f5:86:1d:e2:bf:51:94:71:e9:3a:b3:ef:c9:2a:5e:be: ba:5b:ca:15:88:32:09:ad:77:db:7d:09:2c:ae:cd:a0:0d:fb: 64:c7:93:1d:f7:50:d2:8b:3d:0a:32:68:a2:8e:9b:a2:82:85: 23:1c:30:f4:01:37:ba:3d:e3:5d:9a:99:01:58:a0:09:24:fc: 90:f7:8d:0e:f5:22:2b:1f:11:08:5d:d8:d9:0d:15:37:6b:95: 06:a4:83:b5:28:fe:54:75:ef:ac:cc:33:2d:0c:3f:7b:9a:af: fc:c2:32:ea:44:9a:08:88:14:b6:1a:9d:7c:7c:76:71:fd:cc: 42:a6:71:cd:96:6d:c2:ca:dc:f6:20:f0:84:56:aa:06:8e:a5: 6e:ae:58:f8:c3:db:5a:98:47:f4:ca:f5:fe:03:af:12:f0:48: 2e:9a:0e:0f -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICHeUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTgzM1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNkZFQ0FFODQ2RjQxQkNDM0IyNEUxMzI3QkEyMUMyMzA1M0UxMUMw MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDZEZnruJwC3g+OshdK NzJOkQQ3cUSTyZKmAQEHijhB5nR7oBAHhVGqRSRHjqCNbCay+0zyXz60/2w1tRKG MtIlPiEGp+YJEYQuU0eTxWK3t2RkalzgAQ/YVKRygEvVF/bnDZLb6ku6T55E9uKl 7ZEzATugLdMXSMm0H6Q1qN1+njlPf7CyJVLIGWcFMU+nCeTadiI1Efe+VRdb4GR6 +4/8V9aGAk2TaLnShWZsqmhXbT8uu6JBBl+0TcgbeX4FjYX3HF7hCOg7TovBM3Uu wh8/zpyKWN0nvRxShacrv//sal3hioxj695Vsntq0EXt0eXCHvsryTqQQVtLdVVi FeECAwEAAaOCAkwwggJIMB0GA1UdDgQWBBRv7K6Eb0G8w7JOEye6IcIwU+EcAzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tJUy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9L S0lTL2IteXVoRzlCdk1PeVRoTW51aUhDTUZQaEhBTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGh+IQwDQYJKoZIhvcNAQELBQADggEBALzRYdyS k3PV2dDRr8CzQzuK2WZzKdr5RMqlzNU7FnWXSd6J0fyV/sbQdseybrFOdbdozSKU EUIORAyYrZ+RVi8rj2BAHOFNyrglNdCmD7QsSAhlsYhSNGkXiaY09YYd4r9RlHHp OrPvySpevrpbyhWIMgmtd9t9CSyuzaAN+2THkx33UNKLPQoyaKKOm6KChSMcMPQB N7o9412amQFYoAkk/JD3jQ71IisfEQhd2NkNFTdrlQakg7Uo/lR176zMMy0MP3ua r/zCMupEmgiIFLYanXx8dnH9zEKmcc2WbcLK3PYg8IRWqgaOpW6uWPjD21qYR/TK 9f4DrxLwSC6aDg8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:25:56 2025 by rpki-client