$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer File: mgzAu2MdFRMQI4SQg9lBotvN-mU.cer (raw, json) Hash identifier: EjljqwObOUK8qL3voAz5zuRiOW+WsTSXO3pWu5W/TQ0= Subject key identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DD9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:52:45 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.191.4.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7641 (0x1dd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:52:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9A0CC0BB631D15131023849083D941A2DBCDFA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:ce:e1:7c:11:28:c1:21:f3:2e:94:75:b0: 79:64:71:ea:79:7d:3d:9d:1e:c5:1b:c1:3c:f0:5f: f2:25:0b:cb:ae:16:41:5a:bd:23:98:f0:a8:71:9c: 74:02:f1:4e:47:e1:02:a0:cb:4f:3a:bd:4e:45:c4: 71:13:e6:e6:9b:3c:a6:66:d4:96:ce:8f:38:5b:49: 8e:55:5e:35:e3:34:10:86:2e:ad:0c:0c:b2:e3:74: f5:b0:c9:d5:64:76:a2:ea:68:3b:27:6f:01:37:c0: ee:ce:19:dc:03:bf:07:f1:5d:13:14:7d:69:77:d7: 55:b0:18:4b:14:71:59:c8:51:b1:5c:62:ee:93:0a: 03:70:e6:29:53:52:f6:d7:b5:1b:35:75:fb:68:77: ca:7b:3e:9f:bd:43:16:9b:e9:46:0c:db:ee:e6:f5: 2e:6f:51:ca:6d:a1:4f:79:40:ef:46:43:03:d3:51: a9:3c:81:5c:5c:eb:80:2d:f4:6f:b0:8f:d7:c2:f2: 3f:7a:9a:81:30:89:01:89:eb:07:e6:01:c4:84:0a: 5e:9a:21:7a:d8:d7:f7:a0:f2:35:04:eb:91:c8:e1: a5:75:73:d7:c0:30:3c:87:74:c7:85:57:f8:97:3e: 2b:78:01:79:5b:33:d8:13:90:7f:a6:ff:19:a5:6a: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.4.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:30:78:4f:6e:3d:84:fa:dd:7d:f1:63:94:47:0a:d1:90:1c: 85:91:15:49:00:59:c0:6a:bf:e1:60:f1:5a:d5:b7:a7:8f:d8: 40:7c:85:df:2b:b9:bb:8b:18:84:8a:d8:1f:99:ba:b6:03:07: e9:3d:6d:2f:8b:bb:c0:04:53:96:f8:32:c2:ff:29:a7:cb:fb: 9e:6b:86:f5:05:68:89:89:f1:3a:75:cd:28:ca:2e:47:1f:70: 22:4b:40:d3:28:34:9f:70:3b:d6:71:40:02:38:84:10:0e:02: 18:21:a3:9d:47:0d:1d:88:b4:70:38:5d:67:21:9b:4b:2d:f1: a4:67:03:15:ad:6e:20:a6:ee:24:52:61:6a:3b:c4:d0:67:19: 65:49:8f:b0:1d:b0:6e:b7:55:05:06:bd:07:6a:bd:20:69:bd: 4a:43:69:1f:36:81:3a:5d:dc:a9:38:ea:e8:86:b5:50:a2:75: f6:e2:0c:38:f6:a7:f3:3a:70:5d:06:f7:89:33:e0:a0:91:73: 55:93:9c:0a:ec:b1:d4:fa:87:df:97:57:4d:31:d8:62:58:25: ba:af:fb:c3:0d:ae:a9:40:a9:ad:61:dc:16:9c:b8:cf:58:a6: 34:bd:50:81:8e:ee:7e:db:c5:70:94:72:64:66:81:f4:1b:ff: 8e:4d:1b:e3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICHdkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTI0NVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoOUEwQ0MwQkI2MzFEMTUxMzEwMjM4NDkwODNEOTQxQTJEQkNERkE2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK27zuF8ESjBIfMulHWw eWRx6nl9PZ0exRvBPPBf8iULy64WQVq9I5jwqHGcdALxTkfhAqDLTzq9TkXEcRPm 5ps8pmbUls6POFtJjlVeNeM0EIYurQwMsuN09bDJ1WR2oupoOydvATfA7s4Z3AO/ B/FdExR9aXfXVbAYSxRxWchRsVxi7pMKA3DmKVNS9te1GzV1+2h3yns+n71DFpvp Rgzb7ub1Lm9Rym2hT3lA70ZDA9NRqTyBXFzrgC30b7CP18LyP3qagTCJAYnrB+YB xIQKXpohetjX96DyNQTrkcjhpXVz18AwPId0x4VX+Jc+K3gBeVsz2BOQf6b/GaVq mCkCAwEAAaOCAk4wggJKMB0GA1UdDgQWBBSaDMC7Yx0VExAjhJCD2UGi2836ZTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1ZS0wvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SU1ZS0wvbWd6QXUyTWRGUk1RSTRTUWc5bEJvdHZOLW1VLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/BDANBgkqhkiG9w0BAQsFAAOCAQEAjDB4 T249hPrdffFjlEcK0ZAchZEVSQBZwGq/4WDxWtW3p4/YQHyF3yu5u4sYhIrYH5m6 tgMH6T1tL4u7wARTlvgywv8pp8v7nmuG9QVoiYnxOnXNKMouRx9wIktA0yg0n3A7 1nFAAjiEEA4CGCGjnUcNHYi0cDhdZyGbSy3xpGcDFa1uIKbuJFJhajvE0GcZZUmP sB2wbrdVBQa9B2q9IGm9SkNpHzaBOl3cqTjq6Ia1UKJ19uIMOPan8zpwXQb3iTPg oJFzVZOcCuyx1PqH35dXTTHYYlgluq/7ww2uqUCprWHcFpy4z1imNL1QgY7uftvF cJRyZGaB9Bv/jk0b4w== -----END CERTIFICATE-----Generated at Sun Aug 24 02:47:26 2025 by rpki-client