$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Ay0zZk94CyxQHuYj57vx0iayYkg.cer File: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (raw, json) Hash identifier: HDajoSf0TQTZ+mOA7S8GnRKeuagkAgyvvGpP16qZIds= Subject key identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DDB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:55:57 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.191.168.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 07:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7643 (0x1ddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:55:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=032D33664F780B2C501EE623E7BBF1D226B26248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:07:7a:9a:c1:99:e0:ef:d5:6b:2b:5d:7d: 45:2f:5a:bb:95:3c:ad:3f:b8:b7:3e:b4:48:42:7e: 13:8a:dc:67:d8:13:c2:6f:c2:09:e6:ca:94:ba:14: ea:19:2c:e6:69:2b:8c:cd:67:88:37:c1:86:41:a2: 49:ec:9e:74:74:c7:4e:9d:7c:e4:88:00:26:51:c0: a3:09:1e:34:a5:ee:f6:44:0d:b6:17:8f:cb:d5:84: 69:cb:4b:ef:2d:06:d6:60:a6:54:0a:e7:55:11:69: 6c:b4:db:4d:6f:48:42:29:8d:b5:3e:5b:7b:f8:42: 83:84:2c:9e:3d:81:10:e8:f3:1f:50:f8:8f:00:d4: ef:3c:a9:39:3f:58:5a:bc:0d:f1:c4:98:a4:a1:92: ad:49:16:96:54:4b:96:7a:09:86:d7:03:d7:9a:d3: 78:22:40:6a:b6:10:d6:48:58:77:f2:7f:d5:2b:ea: da:81:17:35:23:c4:9a:fd:d7:97:46:e4:f6:83:4a: 4c:3b:26:a2:f4:17:72:0d:96:9e:06:6f:1d:2b:b9: 63:a6:57:78:09:3b:e5:9a:11:83:73:f5:51:08:5a: 19:79:a9:ff:17:11:37:55:96:35:9c:91:b3:89:a8: ec:87:67:24:72:46:2a:58:7e:af:bc:ae:a3:c0:72: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.168.0/23 Signature Algorithm: sha256WithRSAEncryption 64:35:b8:77:a3:ce:f8:2c:64:f6:ff:d6:f9:f5:57:6a:1a:e2: 7b:3c:0b:b0:37:5a:3a:e5:68:b2:1d:2b:42:e1:5c:2b:41:25: 90:e9:3b:36:b3:98:ac:94:3f:f3:67:74:b8:df:ef:23:26:f7: 86:59:78:63:dd:4a:ed:de:4d:c3:21:80:0f:79:e0:90:70:1b: ed:7d:9a:87:26:3f:31:ee:3a:e8:41:56:27:42:58:5e:d6:3f: 74:4d:e6:79:61:15:b3:9e:51:e8:4b:a7:e2:a0:30:9b:dd:a1: 8d:f1:8b:14:19:50:32:58:8a:d4:ae:eb:25:73:05:6f:a5:43: 66:10:3c:5f:84:89:d7:0d:b0:2f:1c:fb:1f:38:0e:10:8d:0d: 5f:bd:99:c4:77:7b:06:01:cc:c1:a2:f1:3f:33:4b:0c:12:a8: 0e:3a:fa:c7:2c:07:e3:19:c6:fa:b7:4e:cb:0c:7e:d9:f9:87: d3:7e:cc:9c:46:4a:ad:13:21:ca:7a:07:10:63:b4:e9:d6:ca: ce:97:90:95:7c:24:6c:45:a9:38:2e:59:02:b3:df:37:bb:2f: 57:cb:78:89:08:be:1d:6d:90:39:c9:57:6e:17:40:b2:65:a2: 91:72:0f:3e:0b:43:0d:e0:99:e9:ee:c6:b6:0d:16:2a:68:df: b6:22:4c:c0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHdswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTU1N1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMDMyRDMzNjY0Rjc4MEIyQzUwMUVFNjIzRTdCQkYxRDIyNkIyNjI0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALWWB3qawZng79VrK119 RS9au5U8rT+4tz60SEJ+E4rcZ9gTwm/CCebKlLoU6hks5mkrjM1niDfBhkGiSeye dHTHTp185IgAJlHAowkeNKXu9kQNthePy9WEactL7y0G1mCmVArnVRFpbLTbTW9I QimNtT5be/hCg4Qsnj2BEOjzH1D4jwDU7zypOT9YWrwN8cSYpKGSrUkWllRLlnoJ htcD15rTeCJAarYQ1khYd/J/1Svq2oEXNSPEmv3Xl0bk9oNKTDsmovQXcg2WngZv HSu5Y6ZXeAk75ZoRg3P1UQhaGXmp/xcRN1WWNZyRs4mo7IdnJHJGKlh+r7yuo8By 2L8CAwEAAaOCAlAwggJMMB0GA1UdDgQWBBQDLTNmT3gLLFAe5iPnu/HSJrJiSDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOQU5HLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1hJTkFORy9BeTB6Wms5NEN5eFFIdVlqNTd2eDBpYXlZa2cubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoL+oMA0GCSqGSIb3DQEBCwUAA4IBAQBk Nbh3o874LGT2/9b59VdqGuJ7PAuwN1o65WiyHStC4VwrQSWQ6Ts2s5islD/zZ3S4 3+8jJveGWXhj3Urt3k3DIYAPeeCQcBvtfZqHJj8x7jroQVYnQlhe1j90TeZ5YRWz nlHoS6fioDCb3aGN8YsUGVAyWIrUruslcwVvpUNmEDxfhInXDbAvHPsfOA4QjQ1f vZnEd3sGAczBovE/M0sMEqgOOvrHLAfjGcb6t07LDH7Z+YfTfsycRkqtEyHKegcQ Y7Tp1srOl5CVfCRsRak4LlkCs983uy9Xy3iJCL4dbZA5yVduF0CyZaKRcg8+C0MN 4Jnp7sa2DRYqaN+2IkzA -----END CERTIFICATE-----Generated at Tue Oct 28 06:49:02 2025 by rpki-client