$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer File: o55PwFcEngVg5h05adE6Xi8RrNI.cer (raw, json) Hash identifier: BE3qpPZFKwlMd5m+skyyY8aZ6EwKtFXt98xmg6Q9Pss= Subject key identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:50 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.127.218.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15242 (0x3b8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9c:f4:60:30:47:a4:a8:33:e5:ae:5c:19:82: 2b:48:fd:8f:68:7e:51:fc:6a:72:8e:d0:cf:54:72: 01:c6:98:35:ce:dd:f3:f3:95:e9:ef:d3:c6:3a:22: c0:ce:f7:b2:ce:60:42:0c:a3:03:2c:95:ed:3e:15: 2f:61:ea:c5:34:46:cb:a2:39:6a:58:5e:ce:c8:1f: 6a:01:ef:e1:f2:67:e0:1e:10:ab:47:3b:51:66:3c: 54:1d:0f:0e:d5:16:be:fb:1b:78:3d:80:0b:1d:f6: 0b:10:4a:cf:4a:ae:b7:4b:d5:d1:d9:70:05:56:16: a4:5a:4f:48:01:a3:17:f2:b8:3b:ac:7f:04:68:9b: 42:09:66:e2:15:1a:17:e0:32:cb:1f:1f:8c:bb:97: f1:9f:09:6f:18:c1:11:89:8c:21:d2:10:58:f5:24: 5f:b3:68:41:c5:3c:d2:d8:25:d2:37:8c:4f:4c:b8: 04:95:64:6d:87:fa:18:8a:f8:91:56:ba:95:c5:57: 41:39:d6:78:ab:56:30:67:49:24:9d:e2:cc:ac:e4: 7a:04:70:9b:98:f8:08:4c:99:09:6c:ee:1a:89:0e: 9f:4d:89:3e:57:f4:4b:11:db:58:ef:c6:35:92:09: 1a:80:3b:30:f9:5c:86:e6:3a:15:f2:c7:e9:45:15: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.218.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:66:06:43:54:6f:8f:09:fd:8f:01:82:d6:83:e6:29:c0:42: 4d:8b:49:61:e1:18:e2:a1:b4:f0:86:f0:ca:72:e1:a2:41:03: 07:ca:bc:d9:5d:7b:36:57:68:5b:49:3d:0c:75:e1:67:d9:f9: 1d:97:cb:3e:22:ca:0a:98:3e:fc:80:33:94:89:4d:2d:99:f3: b6:54:0e:18:0a:4a:ae:e8:a5:4a:37:79:ef:eb:5a:55:62:e9: cb:d5:3f:76:91:6b:da:1b:66:f2:00:ad:db:b6:00:b2:04:96: 08:c0:a7:9d:08:a8:71:c9:4b:e1:de:17:a5:77:92:bf:5d:0c: ce:6a:ed:1b:28:57:b1:dd:96:50:70:fe:ad:56:7b:6d:30:b4: 87:a4:0b:51:1f:ca:a0:48:9f:e2:55:9d:ae:b4:7b:16:d0:3e: 10:53:d8:c0:43:09:7f:bb:17:f1:19:7f:03:ea:dc:a3:38:cb: 00:fe:e7:26:fa:c1:06:27:7f:f3:8c:ae:9c:2e:c4:69:40:91: 4b:30:49:14:26:c6:a9:74:c6:af:c1:70:48:9f:86:2b:53:6d: 09:e1:4d:e2:a5:a0:49:2f:d3:9a:7b:a6:cd:1c:9a:58:28:f4: f3:8a:3a:b3:d2:fd:10:89:de:1e:1b:cc:19:af:e7:26:a4:39: de:f9:da:c6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICO4owDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ1MFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQTM5RTRGQzA1NzA0OUUwNTYwRTYxRDM5NjlEMTNBNUUyRjExQUNE MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPKc9GAwR6SoM+WuXBmC K0j9j2h+Ufxqco7Qz1RyAcaYNc7d8/OV6e/TxjoiwM73ss5gQgyjAyyV7T4VL2Hq xTRGy6I5alhezsgfagHv4fJn4B4Qq0c7UWY8VB0PDtUWvvsbeD2ACx32CxBKz0qu t0vV0dlwBVYWpFpPSAGjF/K4O6x/BGibQglm4hUaF+Ayyx8fjLuX8Z8JbxjBEYmM IdIQWPUkX7NoQcU80tgl0jeMT0y4BJVkbYf6GIr4kVa6lcVXQTnWeKtWMGdJJJ3i zKzkegRwm5j4CEyZCWzuGokOn02JPlf0SxHbWO/GNZIJGoA7MPlchuY6FfLH6UUV SLsCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBSjnk/AVwSeBWDmHTlp0TpeLxGs0jAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURXQUxL LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0NMT1VEV0FMSy9vNTVQd0ZjRW5nVmc1aDA1YWRFNlhpOFJyTkkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3/aMA0GCSqGSIb3DQEBCwUA A4IBAQAaZgZDVG+PCf2PAYLWg+YpwEJNi0lh4RjiobTwhvDKcuGiQQMHyrzZXXs2 V2hbST0MdeFn2fkdl8s+IsoKmD78gDOUiU0tmfO2VA4YCkqu6KVKN3nv61pVYunL 1T92kWvaG2byAK3btgCyBJYIwKedCKhxyUvh3held5K/XQzOau0bKFex3ZZQcP6t VnttMLSHpAtRH8qgSJ/iVZ2utHsW0D4QU9jAQwl/uxfxGX8D6tyjOMsA/ucm+sEG J3/zjK6cLsRpQJFLMEkUJsapdMavwXBIn4YrU20J4U3ipaBJL9Oae6bNHJpYKPTz ijqz0v0Qid4eG8wZr+cmpDne+drG -----END CERTIFICATE-----Generated at Sun Aug 24 02:47:58 2025 by rpki-client