$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer File: -9Osn8RMPdKre10gvBWMgtg9Jgo.cer (raw, json) Hash identifier: pkhR3+Fx6FSJGlT1OC7fy05Bxh3Fk3NGeuQb41NtTqA= Subject key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:59 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.130.248.0/22 IP: 2403:c1c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 16:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15446 (0x3c56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:4b:54:e4:99:10:10:3f:e8:3b:97:ca:3f: fe:bd:f2:04:54:3f:46:f8:f1:91:79:18:62:f8:06: f0:af:ea:df:fb:4f:1f:6f:56:a6:c3:1b:85:e9:6a: e6:ce:08:dc:56:32:2f:5a:cd:3c:d2:19:9e:dc:c6: 3a:1b:ad:e9:f8:e3:22:04:f2:9c:f3:24:52:08:b3: 22:6c:4d:6e:5d:36:bd:92:d6:10:51:6b:17:e9:1c: 16:92:99:4f:ca:c6:70:39:77:21:d9:8a:11:e3:b8: a8:18:b9:da:cf:90:ef:2c:21:ae:26:1e:a6:f5:06: 50:26:b1:1b:ab:24:ed:eb:dc:3c:4a:01:e7:a6:89: 6b:1b:63:2b:a1:32:8e:6f:6b:04:4b:fc:5c:a4:49: 99:48:01:51:f5:7c:89:2e:8b:60:50:fb:2c:78:31: 93:e0:4f:4f:ed:b2:f4:1c:40:1c:a4:e8:19:fa:65: 0c:82:61:dc:07:6b:cf:39:a3:ef:b0:ce:f5:ad:bf: 6d:2a:27:71:f7:f6:f4:98:9b:3e:75:0d:1c:f0:ec: 3d:31:ac:cd:18:d8:88:4d:8b:f5:08:55:59:83:d8: d1:51:14:a7:9a:62:df:54:af:4c:5e:96:e7:0e:d9: d3:47:d8:5e:9b:f5:1c:4c:c7:2e:98:d8:4e:9d:7f: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.248.0/22 IPv6: 2403:c1c0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:3a:e4:3c:04:df:a6:3e:f7:74:34:4b:f0:89:29:57:2c:e6: 55:e7:3b:3f:5e:56:c6:fa:ee:00:07:84:d6:4c:92:f5:11:a4: e8:c2:e6:e9:a3:2e:c9:b6:e4:c6:0b:5f:ea:9f:a1:00:e1:9b: 54:35:21:6d:61:30:8f:fc:fd:a2:29:5c:bf:35:29:fa:1d:79: c3:94:4e:a3:a5:87:d6:99:df:88:48:23:12:46:fd:ce:2c:31: d4:c6:96:fe:92:b6:24:cd:de:8d:bd:6a:dd:b2:3f:0d:f5:15: 3c:a1:52:24:23:30:00:9b:9b:a9:4e:b9:d7:a6:8e:13:ee:cc: 75:32:c9:2a:f2:45:3c:a1:bb:f7:1c:b9:9b:99:3e:66:d3:e2: e2:66:47:98:4e:80:a2:f2:42:cf:af:87:5f:ce:4a:46:0d:54: ec:af:bc:16:af:6e:d6:68:6d:a8:3a:02:86:20:1a:d5:b4:5f: bb:a8:3b:c7:26:93:80:1a:f0:78:e3:c7:2e:1b:21:7f:19:e1: 15:60:c5:fd:07:62:59:9f:d3:e4:27:13:fc:b3:4c:f5:78:1d: 22:fe:52:34:1c:66:f4:aa:09:19:7d:ce:2a:c3:3c:26:14:f6: df:a7:94:4c:13:ae:a8:84:dd:64:8d:78:d3:ad:2d:e7:6c:ce: 5b:d8:64:ec -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICPFYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ1OVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRkJEM0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0LS1TkmRAQP+g7l8o/ /r3yBFQ/RvjxkXkYYvgG8K/q3/tPH29WpsMbhelq5s4I3FYyL1rNPNIZntzGOhut 6fjjIgTynPMkUgizImxNbl02vZLWEFFrF+kcFpKZT8rGcDl3IdmKEeO4qBi52s+Q 7ywhriYepvUGUCaxG6sk7evcPEoB56aJaxtjK6Eyjm9rBEv8XKRJmUgBUfV8iS6L YFD7LHgxk+BPT+2y9BxAHKToGfplDIJh3Adrzzmj77DO9a2/bSoncff29JibPnUN HPDsPTGszRjYiE2L9QhVWYPY0VEUp5pi31SvTF6W5w7Z00fYXpv1HEzHLpjYTp1/ CMkCAwEAAaOCAlswggJXMB0GA1UdDgQWBBT706yfxEw90qt7XSC8FYyC2D0mCjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9D VElJLy05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJngvgwDQQCAAIwBwMFACQDwcAwDQYJKoZIhvcN AQELBQADggEBADw65DwE36Y+93Q0S/CJKVcs5lXnOz9eVsb67gAHhNZMkvURpOjC 5umjLsm25MYLX+qfoQDhm1Q1IW1hMI/8/aIpXL81KfodecOUTqOlh9aZ34hIIxJG /c4sMdTGlv6StiTN3o29at2yPw31FTyhUiQjMACbm6lOudemjhPuzHUyySryRTyh u/ccuZuZPmbT4uJmR5hOgKLyQs+vh1/OSkYNVOyvvBavbtZobag6AoYgGtW0X7uo O8cmk4Aa8Hjjxy4bIX8Z4RVgxf0HYlmf0+QnE/yzTPV4HSL+UjQcZvSqCRl9zirD PCYU9t+nlEwTrqiE3WSNeNOtLedszlvYZOw= -----END CERTIFICATE-----Generated at Tue Oct 28 14:53:05 2025 by rpki-client