$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer File: lle2DWn8KCKE7gt1fS6_azqFWiA.cer (raw, json) Hash identifier: hQR6G42/sAUpjgWZD2ai/52b3u9zp9s8wCwqb0yvzTQ= Subject key identifier: 96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1F05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Wed 15 Oct 2025 02:53:37 +0000 Certificate not after: Wed 07 Oct 2026 15:30:24 +0000 Subordinate resources: IP: 138.252.12.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 12:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7941 (0x1f05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Oct 15 02:53:37 2025 GMT Not After : Oct 7 15:30:24 2026 GMT Subject: CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:6f:b2:0b:3a:65:34:2b:1f:17:89:d0:9d: 40:6e:56:38:b1:bf:29:15:23:22:fa:27:54:34:fa: 8a:a4:cb:55:42:51:02:c7:f3:f3:2f:9a:2f:a7:92: b7:d5:83:fc:bd:0b:b2:80:34:5e:25:16:97:f9:a0: 55:c2:0d:2c:c4:99:7b:e8:a7:7b:85:2a:85:f6:7c: 8b:6d:55:ab:cd:f2:b8:ef:63:e6:ea:5b:f2:94:24: 60:19:f9:7f:7a:19:3b:f7:f2:fe:ab:9a:2f:12:8a: 76:d0:23:16:04:5a:f1:d1:df:ae:89:44:dc:c1:3d: a2:76:40:e4:f3:f2:14:99:e4:96:fe:5c:e3:11:43: 9a:02:ad:fd:38:46:91:aa:2e:00:6f:3e:50:9f:d4: a5:e1:37:1a:87:ef:ed:dd:06:56:ce:db:22:23:cc: 0f:40:17:91:74:73:0b:94:84:7a:e0:5e:f8:8c:65: 28:46:72:58:ea:54:dc:c2:b5:db:7d:7e:dc:ba:6d: 9d:22:04:71:f3:ab:0c:9a:82:a5:61:8b:25:22:db: db:0d:f9:e3:83:9b:ea:7e:89:2b:d9:88:15:9d:b9: cd:25:dc:4d:63:a9:a1:c9:cf:f5:20:4b:8c:f3:a2: e0:06:cb:0b:8f:31:31:5f:a4:01:fe:d8:73:01:83: 9c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.12.0/23 Signature Algorithm: sha256WithRSAEncryption c5:99:8c:30:45:ac:13:e0:e2:89:35:6b:80:f6:87:f7:2b:2b: 2e:b0:23:2c:9e:8a:5f:aa:68:9c:4c:4a:6f:2a:5e:38:4f:cc: dc:26:d5:f6:4c:c5:83:a2:c6:65:55:51:fd:f8:44:fb:28:60: 1c:89:32:01:95:5a:72:19:72:70:2d:c8:0a:fa:e9:92:21:91: 23:9f:c6:8e:cb:24:94:77:06:cc:5d:5f:a4:05:e0:28:f5:fc: dc:f2:cc:91:27:df:d9:12:5e:93:10:94:54:14:ee:34:0a:7d: 68:6a:25:4c:4a:94:52:1e:11:f1:bb:b6:7f:1f:be:52:31:66: 16:26:f4:e2:66:05:56:9f:d3:0f:0a:15:c2:41:51:24:79:53: 91:8a:58:47:d0:3d:9f:f9:96:76:7b:ca:31:0a:25:c7:ae:23: 20:de:12:ec:5d:aa:8a:d6:b1:51:89:6c:53:2e:c9:b2:6b:ef: 52:62:3c:26:85:9f:ba:dd:5e:25:c6:7b:63:11:6a:6c:a8:bc: be:37:c4:eb:52:bd:97:92:4c:c3:a4:69:cf:a2:a9:dd:9a:80: c5:70:a4:ad:05:01:5f:a8:77:72:ae:fc:02:43:14:6c:04:52: 1c:94:09:6c:66:c8:c3:5a:c3:14:61:d5:50:9a:1f:20:bd:bc: 7e:1e:f9:f2 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICHwUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MTAxNTAyNTMzN1oXDTI2MTAwNzE1MzAyNFowMzEx MC8GA1UEAxMoOTY1N0I2MEQ2OUZDMjgyMjg0RUUwQjc1N0QyRUJGNkIzQTg1NUEy MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM1Ib7ILOmU0Kx8XidCd QG5WOLG/KRUjIvonVDT6iqTLVUJRAsfz8y+aL6eSt9WD/L0LsoA0XiUWl/mgVcIN LMSZe+ine4UqhfZ8i21Vq83yuO9j5upb8pQkYBn5f3oZO/fy/quaLxKKdtAjFgRa 8dHfrolE3ME9onZA5PPyFJnklv5c4xFDmgKt/ThGkaouAG8+UJ/UpeE3Gofv7d0G Vs7bIiPMD0AXkXRzC5SEeuBe+IxlKEZyWOpU3MK1231+3LptnSIEcfOrDJqCpWGL JSLb2w3544Ob6n6JK9mIFZ25zSXcTWOpocnP9SBLjPOi4AbLC48xMV+kAf7YcwGD nPcCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBSWV7YNafwoIoTuC3V9Lr9rOoVaIDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9a VVNPL2xsZTJEV244S0NLRTdndDFmUzZfYXpxRldpQS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGK/AwwDQYJKoZIhvcNAQELBQADggEBAMWZjDBF rBPg4ok1a4D2h/crKy6wIyyeil+qaJxMSm8qXjhPzNwm1fZMxYOixmVVUf34RPso YByJMgGVWnIZcnAtyAr66ZIhkSOfxo7LJJR3BsxdX6QF4Cj1/NzyzJEn39kSXpMQ lFQU7jQKfWhqJUxKlFIeEfG7tn8fvlIxZhYm9OJmBVaf0w8KFcJBUSR5U5GKWEfQ PZ/5lnZ7yjEKJceuIyDeEuxdqorWsVGJbFMuybJr71JiPCaFn7rdXiXGe2MRamyo vL43xOtSvZeSTMOkac+iqd2agMVwpK0FAV+od3Ku/AJDFGwEUhyUCWxmyMNawxRh 1VCaHyC9vH4e+fI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:10:03 2025 by rpki-client