$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/b3TD3W1kKUsRIHLPHPZnFCh1pF8.cer File: b3TD3W1kKUsRIHLPHPZnFCh1pF8.cer (raw, json) Hash identifier: rbbdY6J9cMTXChw2xBXgXI3Ny9EyDR4VQUn9e117S+k= Subject key identifier: 6F:74:C3:DD:6D:64:29:4B:11:20:72:CF:1C:F6:67:14:28:75:A4:5F Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DCB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/b3TD3W1kKUsRIHLPHPZnFCh1pF8.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:51:36 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 165.101.86.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7627 (0x1dcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:51:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6F74C3DD6D64294B112072CF1CF667142875A45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:cc:e5:66:13:78:e7:ad:75:8b:aa:55:2a: 30:63:e9:f3:60:be:2d:71:52:fc:93:8b:79:7c:65: c4:14:af:a7:c3:80:b4:e6:66:c8:e0:4c:01:34:5e: 86:1c:db:5b:e0:5f:b9:3b:e6:68:54:4b:64:c6:5e: a4:7b:ba:ea:e8:13:e5:cd:3f:1b:e8:e5:1b:4c:ad: 4f:e8:94:68:fd:7a:28:69:ee:de:82:66:ba:84:23: d0:a7:83:f1:e5:65:74:69:c5:6f:8c:e1:87:8a:53: d5:67:1a:6c:09:01:d4:a0:c4:de:3f:25:aa:b6:da: d1:3b:99:79:3d:26:82:5f:0a:82:96:36:65:d6:e6: ae:b5:06:9d:5a:6c:be:0c:7f:e1:fb:1c:22:e9:95: 0a:82:d0:41:f0:be:91:c7:5b:5c:30:9b:25:80:9f: 3f:39:14:e9:0f:33:5c:9c:e1:a8:f2:9b:9d:97:b9: 7c:27:6a:57:47:f5:45:0b:a4:3d:83:09:39:3d:d3: b1:90:d3:38:76:ba:54:1e:01:f4:e4:29:de:bd:fa: 19:ec:a9:7d:fa:86:d5:d7:c0:e2:42:a6:bd:bb:43: 86:41:39:71:27:9f:fb:76:b8:6b:d4:b8:9d:8f:35: 5b:2d:a1:57:91:ac:4d:6f:c6:38:18:37:4c:db:f3: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:74:C3:DD:6D:64:29:4B:11:20:72:CF:1C:F6:67:14:28:75:A4:5F X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/b3TD3W1kKUsRIHLPHPZnFCh1pF8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.86.0/23 Signature Algorithm: sha256WithRSAEncryption 59:63:c9:b8:f7:b7:ff:c1:41:b3:7c:50:35:f2:1e:8e:8b:d0: 38:fa:44:04:2c:d0:87:85:b7:8b:a7:65:a5:f5:13:da:0e:e1: 18:16:c3:78:6b:8f:49:14:be:b9:6a:71:66:64:c3:2d:52:19: 3a:1d:b2:e5:f6:68:2a:ee:4a:04:9e:62:b6:07:22:03:61:94: 4d:82:d7:2d:c6:34:00:b4:c9:b6:cb:b9:ec:bb:34:83:8a:a2: f0:4f:7a:76:0b:6c:cd:b6:ef:f6:da:55:93:d1:d5:35:a9:88: 8c:e1:62:ed:42:97:50:12:5f:b7:0c:c7:b9:7a:34:83:ce:2d: 03:bf:43:1f:4e:86:75:55:b7:57:68:59:68:8a:b0:3a:35:5c: 17:42:a5:9a:a9:4c:56:1b:ff:ea:1c:85:d8:ad:18:db:2a:9e: b0:28:f9:84:69:72:cb:91:a2:a8:93:c9:02:5f:c6:f9:cd:a1: 14:3b:39:57:0e:b9:54:92:00:2b:cd:ab:d0:bf:d5:fe:cb:6e: e6:18:78:b2:7a:66:91:4c:b0:1b:5a:ab:3c:dd:c2:ba:3d:6d: 0c:ff:f6:2b:fe:25:6c:98:5e:74:a4:b2:8b:17:72:4b:f7:8c: 47:0b:49:ff:8d:cc:1f:22:87:42:cd:1d:8c:97:6f:ac:5d:08: d2:a3:d3:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHcswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTEzNloXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNkY3NEMzREQ2RDY0Mjk0QjExMjA3MkNGMUNGNjY3MTQyODc1QTQ1 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALHwzOVmE3jnrXWLqlUq MGPp82C+LXFS/JOLeXxlxBSvp8OAtOZmyOBMATRehhzbW+BfuTvmaFRLZMZepHu6 6ugT5c0/G+jlG0ytT+iUaP16KGnu3oJmuoQj0KeD8eVldGnFb4zhh4pT1WcabAkB 1KDE3j8lqrba0TuZeT0mgl8KgpY2ZdbmrrUGnVpsvgx/4fscIumVCoLQQfC+kcdb XDCbJYCfPzkU6Q8zXJzhqPKbnZe5fCdqV0f1RQukPYMJOT3TsZDTOHa6VB4B9OQp 3r36GeypffqG1dfA4kKmvbtDhkE5cSef+3a4a9S4nY81Wy2hV5GsTW/GOBg3TNvz 0YsCAwEAAaOCAlQwggJQMB0GA1UdDgQWBBRvdMPdbWQpSxEgcs8c9mcUKHWkXzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0RJTkcv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvTUlOR0RJTkcvYjNURDNXMWtLVXNSSUhMUEhQWm5GQ2gxcEY4Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaVlVjANBgkqhkiG9w0BAQsFAAOC AQEAWWPJuPe3/8FBs3xQNfIejovQOPpEBCzQh4W3i6dlpfUT2g7hGBbDeGuPSRS+ uWpxZmTDLVIZOh2y5fZoKu5KBJ5itgciA2GUTYLXLcY0ALTJtsu57Ls0g4qi8E96 dgtszbbv9tpVk9HVNamIjOFi7UKXUBJftwzHuXo0g84tA79DH06GdVW3V2hZaIqw OjVcF0KlmqlMVhv/6hyF2K0Y2yqesCj5hGlyy5GiqJPJAl/G+c2hFDs5Vw65VJIA K82r0L/V/stu5hh4snpmkUywG1qrPN3Cuj1tDP/2K/4lbJhedKSyixdyS/eMRwtJ /43MHyKHQs0djJdvrF0I0qPTUA== -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:25 2025 by rpki-client