$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer File: synakmj8_VTZ84oB7Qz3CSu2kAw.cer (raw, json) Hash identifier: tawzBAbwEKWidoqtMMdgxb3KR8bl0Em4duTIXuTouzI= Subject key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3AA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:39 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 63898 IP: 103.158.78.0/23 IP: 2406:b4c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 19:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15010 (0x3aa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:e5:d4:b2:85:c2:ed:64:6f:04:49:c4:a3: 9f:60:f3:ac:e5:7c:c6:da:16:0a:c9:f0:cf:fe:43: 54:8e:18:4b:23:6c:d0:e0:af:4a:9e:59:d6:5e:79: 42:df:9d:72:19:5b:cb:71:51:63:98:97:15:4f:20: 67:2b:99:88:1f:2f:d6:6a:c9:33:60:03:8e:cb:f5: 42:25:33:62:7c:ef:0f:12:37:a4:59:16:fe:38:10: 0d:67:30:fb:66:00:c8:3d:11:66:e8:ec:52:c2:a1: 5b:98:07:37:fb:82:4c:b5:9f:28:8f:09:b1:73:fb: 64:74:10:06:7b:1b:b2:fe:54:26:d1:c0:09:cd:56: 4f:b3:b0:60:67:2a:c7:c2:d6:b3:67:8f:9f:27:97: c0:00:b2:45:64:b0:2b:80:79:0b:19:49:97:9c:e8: fd:c6:87:a7:01:63:89:9e:6a:93:c9:44:b9:26:b0: ca:8f:1b:71:27:52:af:d1:72:bb:8e:fd:fd:5d:d3: 84:88:40:0e:4f:19:ec:ef:80:52:f2:f5:96:78:08: e3:ac:c7:74:00:4a:92:c0:47:88:bd:b0:31:c2:30: 27:3a:cc:10:88:10:5a:3b:7d:9d:da:7b:d9:60:2f: 9b:88:a1:fc:ef:90:d6:7a:00:ed:b0:e2:6b:67:a3: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63898 sbgp-ipAddrBlock: critical IPv4: 103.158.78.0/23 IPv6: 2406:b4c0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:9e:91:6f:f9:ac:6c:ec:3c:de:f9:5c:18:ca:37:23:fc:44: bc:34:cd:27:d8:a9:f1:38:cf:97:e5:52:a2:d7:86:6e:ea:d4: 42:75:6f:01:be:26:11:2b:0c:28:66:15:f6:d6:6f:db:9f:19: 7a:c9:51:45:3d:ec:c8:be:25:1e:ea:19:23:e5:04:17:a4:5f: 9e:ac:4f:f2:c1:bc:d6:0b:72:d9:52:38:ba:f5:fc:9e:1f:c5: ce:b2:3b:04:68:ab:38:f2:f7:5d:18:b5:1d:a8:27:99:aa:63: 64:3f:bc:37:00:53:05:19:64:50:85:93:a3:fa:50:78:cc:c6: b4:eb:52:91:f9:f1:cd:85:8c:16:41:78:94:6d:35:6b:e5:95: ac:9c:96:2c:69:b6:ba:77:c8:28:a0:ca:70:68:0f:67:a7:c6: b8:2e:44:d7:18:f9:1c:98:77:af:79:ed:1c:48:b6:66:cf:d3: e0:44:1f:00:b9:ca:87:a4:df:7c:e5:4c:cf:72:54:9b:30:1b: cc:d6:ed:fe:98:7e:a1:f0:23:f5:9d:37:6d:f8:3c:c9:9d:da: 28:51:bf:c9:23:ed:28:b5:bf:d2:10:36:42:41:9e:90:9e:31: a2:30:a5:6f:92:e7:90:c8:90:fe:13:c8:bc:6a:3d:f9:54:81: 28:13:09:0e -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICOqIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQzOVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQjMyOURBOTI2OEZDRkQ1NEQ5RjM4QTAxRUQwQ0Y3MDkyQkI2OTAw QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN345dSyhcLtZG8EScSj n2DzrOV8xtoWCsnwz/5DVI4YSyNs0OCvSp5Z1l55Qt+dchlby3FRY5iXFU8gZyuZ iB8v1mrJM2ADjsv1QiUzYnzvDxI3pFkW/jgQDWcw+2YAyD0RZujsUsKhW5gHN/uC TLWfKI8JsXP7ZHQQBnsbsv5UJtHACc1WT7OwYGcqx8LWs2ePnyeXwACyRWSwK4B5 CxlJl5zo/caHpwFjiZ5qk8lEuSawyo8bcSdSr9Fyu479/V3ThIhADk8Z7O+AUvL1 lngI46zHdABKksBHiL2wMcIwJzrMEIgQWjt9ndp72WAvm4ih/O+Q1noA7bDia2ej Zf0CAwEAAaOCAn8wggJ7MB0GA1UdDgQWBBSzKdqSaPz9VNnzigHtDPcJK7aQDDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTQ1lCRVIv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvTlNTQ1lCRVIvc3luYWttajhfVlRaODRvQjdRejNDU3Uya0F3Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+ZowLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAFnnk4wDQQCAAIwBwMFACQGtMAwDQYJKoZIhvcNAQELBQADggEBAA+e kW/5rGzsPN75XBjKNyP8RLw0zSfYqfE4z5flUqLXhm7q1EJ1bwG+JhErDChmFfbW b9ufGXrJUUU97Mi+JR7qGSPlBBekX56sT/LBvNYLctlSOLr1/J4fxc6yOwRoqzjy 910YtR2oJ5mqY2Q/vDcAUwUZZFCFk6P6UHjMxrTrUpH58c2FjBZBeJRtNWvllayc lixptrp3yCigynBoD2enxrguRNcY+RyYd6957RxItmbP0+BEHwC5yoek33zlTM9y VJswG8zW7f6YfqHwI/WdN234PMmd2ihRv8kj7Si1v9IQNkJBnpCeMaIwpW+S55DI kP4TyLxqPflUgSgTCQ4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:40 2025 by rpki-client