$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer File: -0c5peYaY59Wb94P20Egi6P2m_E.cer (raw, json) Hash identifier: Cv2A8yuGXLVUtZEW6Hh6gtt3zz4MYAQb9vUWjJRfSmU= Subject key identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3B80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:49 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 18045 IP: 211.76.144.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 23:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15232 (0x3b80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cd:15:a5:d2:c2:f6:44:6d:a1:d9:96:c3:64: 38:3a:d0:24:5d:cc:d0:6f:a2:84:63:3a:47:5a:af: d3:df:76:2f:fc:a4:c5:be:28:13:70:49:e0:af:87: 1c:49:31:3b:fd:c8:33:f8:92:49:c3:b4:65:f3:c3: be:27:e7:4f:ed:5e:64:be:3f:af:60:e2:d9:11:25: d4:96:61:99:14:35:f5:a9:96:fa:c3:eb:7d:d0:bb: 0f:fd:22:74:36:e5:6c:af:cd:2a:fb:0f:06:ef:72: f2:1f:9b:de:8c:46:c5:91:84:73:dd:72:ae:0e:c7: 7f:ad:5a:45:8f:37:bc:0c:55:19:5f:8f:a9:a0:e8: 17:63:30:8b:9c:b9:df:3c:3a:78:9a:22:d6:fd:7c: f7:2a:55:5d:fd:06:94:8e:b2:bb:55:ae:34:8c:24: f6:95:86:bf:21:e0:27:9b:94:a9:6c:1d:37:44:fd: c5:e9:bc:d9:62:86:0a:c0:30:a2:45:81:f7:39:3d: dd:ed:c1:6b:bf:ee:1b:6f:fd:79:91:1f:07:57:2a: bf:62:41:d3:5d:6e:39:8a:4b:a2:e2:3d:03:18:6e: a8:1c:a3:82:60:d8:69:d6:ea:38:85:b8:e6:a3:b8: 91:3a:20:9e:40:85:21:97:9e:dd:dc:a9:84:8b:21: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18045 sbgp-ipAddrBlock: critical IPv4: 211.76.144.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:7e:1e:2a:98:df:c9:27:68:56:10:1c:ad:fb:67:b5:4e:c4: a3:e5:25:25:c1:f6:95:e2:9b:15:f4:64:ad:5e:26:3a:28:58: d2:6d:f8:5a:7f:60:6c:bb:5f:6c:2d:a4:c9:9d:a3:65:f7:c0: 33:b9:8f:3a:b1:67:e3:2c:68:7b:a4:3f:ac:ad:b6:41:ab:60: d8:ef:3d:87:14:e6:bd:46:75:5c:70:32:be:0e:88:45:f2:3b: d0:c4:db:47:cc:f1:fa:43:da:bf:32:7c:3b:72:ba:f1:f1:c1: 09:fb:05:11:23:66:36:c4:fe:d7:37:7c:ad:68:5a:5c:f3:02: 36:3c:b8:6b:44:08:9b:8b:21:b6:5e:51:18:4b:80:f1:25:4c: 28:76:fd:6e:b0:a7:bb:6c:5f:30:7d:ea:32:c7:e0:b1:6f:3c: 47:dd:df:2d:a0:f1:f1:6f:49:16:42:a6:89:03:b5:dc:ac:21: 1a:ce:0c:15:f3:88:20:fe:e6:5c:16:f0:48:9b:5d:c3:fa:c1: 8f:05:69:29:80:14:5a:e7:31:6e:ae:8a:8d:fe:35:30:af:ee: be:26:3d:67:08:91:00:a2:5c:1b:b8:94:f0:5f:2a:84:31:9d: 5a:73:2e:75:c6:16:06:98:22:87:a0:53:5d:9b:b5:cc:5e:fb: dc:5e:c9:d8 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICO4AwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ0OVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRkI0NzM5QTVFNjFBNjM5RjU2NkZERTBGREI0MTIwOEJBM0Y2OUJG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPXNFaXSwvZEbaHZlsNk ODrQJF3M0G+ihGM6R1qv0992L/ykxb4oE3BJ4K+HHEkxO/3IM/iSScO0ZfPDvifn T+1eZL4/r2Di2REl1JZhmRQ19amW+sPrfdC7D/0idDblbK/NKvsPBu9y8h+b3oxG xZGEc91yrg7Hf61aRY83vAxVGV+PqaDoF2Mwi5y53zw6eJoi1v189ypVXf0GlI6y u1WuNIwk9pWGvyHgJ5uUqWwdN0T9xem82WKGCsAwokWB9zk93e3Ba7/uG2/9eZEf B1cqv2JB011uOYpLouI9AxhuqByjgmDYadbqOIW45qO4kTognkCFIZee3dyphIsh xKUCAwEAAaOCAm0wggJpMB0GA1UdDgQWBBT7Rzml5hpjn1Zv3g/bQSCLo/ab8TAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lOT1BBQy8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSU5PUEFDLy0wYzVwZVlhWTU5V2I5NFAyMEVnaTZQMm1fRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICRn0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATTTJAwDQYJKoZIhvcNAQELBQADggEBAD1+HiqY38knaFYQHK37Z7VOxKPl JSXB9pXimxX0ZK1eJjooWNJt+Fp/YGy7X2wtpMmdo2X3wDO5jzqxZ+MsaHukP6yt tkGrYNjvPYcU5r1GdVxwMr4OiEXyO9DE20fM8fpD2r8yfDtyuvHxwQn7BREjZjbE /tc3fK1oWlzzAjY8uGtECJuLIbZeURhLgPElTCh2/W6wp7tsXzB96jLH4LFvPEfd 3y2g8fFvSRZCpokDtdysIRrODBXziCD+5lwW8EibXcP6wY8FaSmAFFrnMW6uio3+ NTCv7r4mPWcIkQCiXBu4lPBfKoQxnVpzLnXGFgaYIoegU12btcxe+9xeydg= -----END CERTIFICATE-----Generated at Wed Sep 17 21:52:56 2025 by rpki-client