$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer File: o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer (raw, json) Hash identifier: BVjwj9RlDWwCoCdKgqu2I/KNK2DyhRnLD0+hMypPiiw= Subject key identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:01 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 211.79.208.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15490 (0x3c82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:15:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A37C6EE2B0ED0AF8321102E34E14B6A976F7989D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:48:0f:97:22:22:44:d5:90:d6:bd:20:ff: 91:79:dd:25:c6:fa:c3:49:13:b6:9d:0b:1c:ed:e9: fc:00:37:72:fc:9a:74:bc:ad:4b:75:77:7f:82:e5: 56:4b:70:f3:ff:c7:87:c9:51:7f:a1:90:7c:5a:a2: ed:cf:a0:56:5b:e0:85:74:f5:48:14:32:42:d9:a8: 4a:c7:35:fd:78:84:11:37:ce:43:2c:40:f3:29:d0: 39:45:99:de:82:11:0d:ff:fc:2d:cc:80:e2:45:4a: 62:68:3e:a3:76:c2:eb:f6:01:eb:9c:bc:da:13:5c: fd:47:65:95:57:2f:30:c8:7a:a0:ea:aa:12:b9:dd: 5d:58:c9:e1:21:91:89:19:60:5f:6c:e7:77:c7:bc: ca:4d:53:0e:04:96:6f:ee:b3:3d:4f:09:d2:2f:35: 67:21:fb:95:f5:62:53:e1:97:bd:ce:61:09:06:05: f9:34:34:aa:0f:bd:fe:07:99:33:48:ee:88:f3:e9: 23:6c:dd:bf:b3:67:c4:c3:f3:02:25:80:f2:17:1f: 31:df:ae:09:69:84:e6:60:ad:f5:2f:d3:18:01:6c: 0f:c4:19:cc:d0:d1:e8:13:fd:f9:df:fa:a5:cc:2a: 9a:43:19:c1:33:c9:20:bb:ad:cb:56:43:19:9d:82: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.208.0/20 Signature Algorithm: sha256WithRSAEncryption 94:c8:ee:3d:2d:d6:c5:f7:0c:88:80:a1:39:c0:67:4f:8d:80: c2:53:74:c6:33:69:54:4a:bf:30:de:99:25:64:cd:5e:c7:d9: 52:4f:5c:ec:56:4d:d1:f9:21:22:9c:10:31:d4:31:cd:5d:ae: e4:dd:ec:9e:90:72:86:ce:b3:98:16:b8:a0:95:b4:62:fa:95: 14:83:e8:5e:31:c0:ea:88:d1:56:84:52:5c:ab:7a:e0:18:c2: 18:e5:6f:72:ae:96:ad:97:2e:c9:a6:f5:e4:28:08:af:ba:ca: f7:38:87:95:20:22:48:55:9f:53:9e:4f:8d:07:53:5e:40:63: fc:c7:a3:02:82:24:31:4e:25:47:40:d1:ae:47:85:41:05:36: 2f:12:7f:c4:70:b6:11:ce:19:62:58:15:7a:b4:77:91:ea:d4: 2d:6b:02:23:5b:9a:78:5b:9f:9f:d9:3b:62:be:ae:2a:94:67: 8c:a0:c3:7f:c2:66:b3:4d:d7:c5:4f:ee:55:fd:bf:e1:56:33: 96:70:23:be:ec:f7:fa:50:fe:92:d0:ed:fb:c5:90:93:da:7a: e9:23:fb:a4:02:47:2b:66:87:f7:42:2a:fd:dd:b1:c7:46:bb: 31:37:10:92:1d:ee:4c:62:98:8c:22:3f:4c:75:4e:84:fd:e4: 91:04:d3:95 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgICPIIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTUwMVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQTM3QzZFRTJCMEVEMEFGODMyMTEwMkUzNEUxNEI2QTk3NkY3OTg5 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN+dSA+XIiJE1ZDWvSD/ kXndJcb6w0kTtp0LHO3p/AA3cvyadLytS3V3f4LlVktw8//Hh8lRf6GQfFqi7c+g VlvghXT1SBQyQtmoSsc1/XiEETfOQyxA8ynQOUWZ3oIRDf/8LcyA4kVKYmg+o3bC 6/YB65y82hNc/UdllVcvMMh6oOqqErndXVjJ4SGRiRlgX2znd8e8yk1TDgSWb+6z PU8J0i81ZyH7lfViU+GXvc5hCQYF+TQ0qg+9/geZM0juiPPpI2zdv7NnxMPzAiWA 8hcfMd+uCWmE5mCt9S/TGAFsD8QZzNDR6BP9+d/6pcwqmkMZwTPJILuty1ZDGZ2C v7kCAwEAAaOCAkowggJGMB0GA1UdDgQWBBSjfG7isO0K+DIRAuNOFLapdveYnTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUJNLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lC TS9vM3h1NHJEdEN2Z3lFUUxqVGhTMnFYYjNtSjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQE00/QMA0GCSqGSIb3DQEBCwUAA4IBAQCUyO49LdbF 9wyIgKE5wGdPjYDCU3TGM2lUSr8w3pklZM1ex9lST1zsVk3R+SEinBAx1DHNXa7k 3eyekHKGzrOYFriglbRi+pUUg+heMcDqiNFWhFJcq3rgGMIY5W9yrpatly7JpvXk KAivusr3OIeVICJIVZ9Tnk+NB1NeQGP8x6MCgiQxTiVHQNGuR4VBBTYvEn/EcLYR zhliWBV6tHeR6tQtawIjW5p4W5+f2Ttivq4qlGeMoMN/wmazTdfFT+5V/b/hVjOW cCO+7Pf6UP6S0O37xZCT2nrpI/ukAkcrZof3Qir93bHHRrsxNxCSHe5MYpiMIj9M dU6E/eSRBNOV -----END CERTIFICATE-----Generated at Sun Aug 24 02:48:28 2025 by rpki-client