$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer File: u4ipF4WngsjqPN3tPnwfCdp59kc.cer (raw, json) Hash identifier: 7uK3NHDPC/X97uov7qJRf3jVbeyqtL+TCaGkcN0Sh/M= Subject key identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 1CA3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:42 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 2.58.240.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7331 (0x1ca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Validity Not Before: Aug 22 08:14:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:ea:68:5f:ff:a7:ce:0c:7f:7c:82:fa:32: 5c:d0:67:20:91:3f:4f:99:8e:44:5d:26:e6:8f:95: 35:95:2d:23:01:82:94:90:de:5a:53:88:d6:5b:91: ff:c7:15:d9:a8:d2:83:e1:fa:21:34:b7:ed:ef:67: 85:89:a7:6a:27:b2:08:bd:46:18:6c:7d:0e:03:09: ed:67:c2:37:89:81:91:75:48:34:0b:3b:b7:6b:d2: 1f:32:81:4f:45:e7:3c:89:f9:17:9d:80:86:2b:38: 46:6a:75:de:cd:65:25:79:aa:a9:53:50:df:f6:a6: e8:5e:9c:cd:90:26:bc:01:8e:67:cc:c2:95:c3:eb: fb:a3:77:e7:f3:f8:0f:e1:64:18:51:03:e8:e1:b1: cf:1b:b9:0b:1c:41:e4:3e:60:9a:57:b7:5f:85:64: 77:42:61:40:c1:2c:06:1f:1e:20:e6:b5:bf:2d:10: 8e:71:72:55:ca:74:83:d1:0f:da:4c:69:e9:b6:be: 87:0d:67:a1:88:c9:0e:3e:5f:e9:6d:cf:00:86:5b: 53:40:75:b6:3a:ff:2e:9f:32:3b:f8:37:b4:fc:a2: 58:eb:4a:cc:eb:47:b4:10:29:20:dd:eb:d3:8f:68: 39:13:91:6c:78:af:2f:89:70:f1:92:7c:57:af:dd: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 2.58.240.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:f8:ca:69:f6:44:bc:a6:1a:ea:09:7a:d7:35:ce:87:15:6a: f3:20:a6:19:58:c2:56:06:f2:bf:ed:54:a6:9a:f2:e8:e6:f2: cb:f4:9f:2d:44:f5:18:f0:a5:90:16:a5:0a:3c:dc:be:7e:b3: 26:c0:bd:9b:26:12:12:b1:42:17:c9:30:51:13:d1:3f:82:0b: 1f:ae:43:7b:2d:d0:42:27:d3:39:7b:ab:61:50:ae:74:04:1e: 44:85:56:39:79:ae:ed:de:32:00:14:91:28:d2:cc:3d:99:60: da:ae:59:e2:da:89:ea:a5:bf:be:36:5e:eb:df:23:d6:1f:e6: e5:9b:5a:cb:db:3c:9f:e0:08:fe:27:1c:f6:a0:15:f1:45:51: 2d:5a:53:b8:a7:f8:75:a6:9c:70:3b:54:60:53:8e:71:4d:5b: 25:b8:1d:b0:8c:98:88:2e:7a:04:38:84:d3:8e:67:0d:98:ec: db:fa:53:76:dc:78:7a:62:12:ff:32:d6:5b:06:b2:d0:40:42: 52:b4:61:1f:f2:8f:e6:8f:6d:2f:12:26:31:7f:7b:57:75:21: 52:7c:fe:26:89:1b:01:f2:77:41:48:82:ea:ff:e3:69:4b:ab: 4c:ef:06:0b:53:43:6e:04:9e:21:80:fc:13:b2:24:20:4e:58: 78:9f:41:4c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHKMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI1MDgyMjA4MTQ0MloXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQkI4OEE5MTc4NUE3ODJDOEVBM0NEREVEM0U3QzFGMDlEQTc5RjY0 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANnn6mhf/6fODH98gvoy XNBnIJE/T5mORF0m5o+VNZUtIwGClJDeWlOI1luR/8cV2ajSg+H6ITS37e9nhYmn aieyCL1GGGx9DgMJ7WfCN4mBkXVINAs7t2vSHzKBT0XnPIn5F52Ahis4Rmp13s1l JXmqqVNQ3/am6F6czZAmvAGOZ8zClcPr+6N35/P4D+FkGFED6OGxzxu5CxxB5D5g mle3X4Vkd0JhQMEsBh8eIOa1vy0QjnFyVcp0g9EP2kxp6ba+hw1noYjJDj5f6W3P AIZbU0B1tjr/Lp8yO/g3tPyiWOtKzOtHtBApIN3r049oORORbHivL4lw8ZJ8V6/d mNUCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBS7iKkXhaeCyOo83e0+fB8J2nn2RzAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0hPU1RJTi91NGlwRjRXbmdzanFQTjN0UG53ZkNkcDU5a2MubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjrwMA0GCSqGSIb3DQEBCwUAA4IBAQCa +Mpp9kS8phrqCXrXNc6HFWrzIKYZWMJWBvK/7VSmmvLo5vLL9J8tRPUY8KWQFqUK PNy+frMmwL2bJhISsUIXyTBRE9E/ggsfrkN7LdBCJ9M5e6thUK50BB5EhVY5ea7t 3jIAFJEo0sw9mWDarlni2onqpb++Nl7r3yPWH+blm1rL2zyf4Aj+Jxz2oBXxRVEt WlO4p/h1ppxwO1RgU45xTVsluB2wjJiILnoEOITTjmcNmOzb+lN23Hh6YhL/MtZb BrLQQEJStGEf8o/mj20vEiYxf3tXdSFSfP4miRsB8ndBSILq/+NpS6tM7wYLU0Nu BJ4hgPwTsiQgTlh4n0FM -----END CERTIFICATE-----Generated at Sun Aug 24 12:11:58 2025 by rpki-client