$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer File: RPjc9msltxkFbR7WXBbqklflVT0.cer (raw, json) Hash identifier: 3OlvTiszrrHdEd6wF1OrMiTV5y5900tHgctOtIxCdII= Subject key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1D9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:38 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.30.78.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7579 (0x1d9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:82:a8:79:a9:cd:70:c3:1e:ef:29:a4:5d: 47:6f:29:26:ec:33:e2:f9:fb:f4:a1:5b:2b:b3:d0: 67:d8:dd:ce:59:6b:ab:ec:b9:65:af:6c:34:f3:95: 9d:81:db:8e:9c:40:12:d1:c0:e2:4d:fc:bd:7f:3d: b7:39:db:b7:46:9d:20:d3:fd:ec:6e:d4:80:9e:d2: 62:31:90:14:4a:63:f2:0e:0d:c7:8c:54:1f:ab:1e: 67:72:e7:20:2a:61:34:6a:d5:a0:ba:cc:72:f6:8a: 4c:1b:8e:84:55:c2:d6:90:81:a9:ba:c9:36:b7:a0: 5f:49:fa:7d:e8:2d:a7:0c:ea:e6:bb:cd:2f:24:ff: 8e:fa:b9:68:e7:71:5b:04:cd:e8:b2:7e:35:f1:29: b1:c2:70:95:51:f5:69:bc:99:24:59:33:87:fa:69: aa:e1:6d:e9:6a:f0:3f:75:4e:06:57:9b:a7:bd:63: 43:8c:35:60:56:28:d1:b3:ee:36:6a:bc:9c:1e:44: bc:e3:00:24:ae:08:57:64:26:94:54:18:23:68:3d: 4c:06:89:aa:02:1b:e6:4f:b3:3a:ca:75:be:c9:2d: 6e:2d:6d:20:e0:26:88:68:d6:8d:17:f4:66:3c:23: c6:3a:2a:15:87:19:e5:ea:7c:ae:46:43:de:e8:83: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.78.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:ef:5c:f6:ce:03:ab:94:07:02:11:dc:68:82:43:d9:0e:27: 61:ca:cd:79:13:02:07:af:89:15:0e:90:04:40:a0:f1:b7:d0: 38:80:14:e7:ef:87:1c:7a:a3:5f:19:7a:d8:c9:0a:43:b8:68: f0:04:a9:83:2e:1d:10:72:c0:79:4c:5e:31:87:02:5d:2a:02: 75:e8:24:72:26:0f:04:6a:a9:81:6e:7e:c8:97:6e:3f:ab:22: b7:25:96:16:39:95:a9:38:f3:8b:b4:f8:78:60:22:b6:5b:21: 25:f7:54:03:d9:e5:05:03:93:5e:5e:cf:50:ae:62:01:62:a8: f1:63:e0:bc:58:51:3d:da:e3:ef:23:21:1c:d5:d8:43:70:2a: 3b:cc:87:35:c6:b3:bc:4b:64:d8:d3:3b:ec:13:61:e3:fc:43: bc:a0:9f:91:fd:e1:87:85:c5:79:92:52:c6:ef:bf:d9:0f:77: df:e7:ce:d5:84:d1:8c:0c:f0:43:5e:db:66:39:85:15:63:64: 2a:cd:5f:7c:6c:1d:57:97:e2:47:51:cc:6f:72:4f:15:d7:08: 74:92:5e:41:aa:73:06:e3:ec:d2:e9:13:a5:b3:b5:a4:cf:9b: 7d:ec:f0:2a:2a:08:bb:a5:76:37:10:ea:b8:25:4d:ae:1f:13: 35:8b:02:d4 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHZswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQzOFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNDRGOERDRjY2QjI1QjcxOTA1NkQxRUQ2NUMxNkVBOTI1N0U1NTUz RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOJzgqh5qc1wwx7vKaRd R28pJuwz4vn79KFbK7PQZ9jdzllrq+y5Za9sNPOVnYHbjpxAEtHA4k38vX89tznb t0adINP97G7UgJ7SYjGQFEpj8g4Nx4xUH6seZ3LnICphNGrVoLrMcvaKTBuOhFXC 1pCBqbrJNregX0n6fegtpwzq5rvNLyT/jvq5aOdxWwTN6LJ+NfEpscJwlVH1abyZ JFkzh/ppquFt6WrwP3VOBlebp71jQ4w1YFYo0bPuNmq8nB5EvOMAJK4IV2QmlFQY I2g9TAaJqgIb5k+zOsp1vsktbi1tIOAmiGjWjRf0ZjwjxjoqFYcZ5ep8rkZD3uiD zt8CAwEAAaOCAlAwggJMMB0GA1UdDgQWBBRE+Nz2ayW3GQVtHtZcFuqSV+VVPTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0JFSURPVS9SUGpjOW1zbHR4a0ZiUjdXWEJicWtsZmxWVDAubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoB5OMA0GCSqGSIb3DQEBCwUAA4IBAQCe 71z2zgOrlAcCEdxogkPZDidhys15EwIHr4kVDpAEQKDxt9A4gBTn74cceqNfGXrY yQpDuGjwBKmDLh0QcsB5TF4xhwJdKgJ16CRyJg8EaqmBbn7Il24/qyK3JZYWOZWp OPOLtPh4YCK2WyEl91QD2eUFA5NeXs9QrmIBYqjxY+C8WFE92uPvIyEc1dhDcCo7 zIc1xrO8S2TY0zvsE2Hj/EO8oJ+R/eGHhcV5klLG77/ZD3ff587VhNGMDPBDXttm OYUVY2QqzV98bB1Xl+JHUcxvck8V1wh0kl5BqnMG4+zS6ROls7Wkz5t97PAqKgi7 pXY3EOq4JU2uHxM1iwLU -----END CERTIFICATE-----Generated at Sat Oct 25 22:11:55 2025 by rpki-client