$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer File: VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer (raw, json) Hash identifier: r941S1NP/Z4yLFf5b23Ekk11w8FV1/7o76n4R87x8WM= Subject key identifier: 54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1F49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 27 Oct 2025 06:56:10 +0000 Certificate not after: Fri 16 Oct 2026 15:30:20 +0000 Subordinate resources: IP: 138.252.52.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 06:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8009 (0x1f49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Oct 27 06:56:10 2025 GMT Not After : Oct 16 15:30:20 2026 GMT Subject: CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:4a:10:4f:f4:14:c9:04:a3:8a:68:fc:01: 4b:36:db:13:cf:99:0e:fa:65:30:19:2c:6e:0a:12: 49:37:1d:5f:a9:c9:6b:3c:36:ff:c9:19:11:fe:97: 75:95:63:36:ee:2a:77:d0:81:1b:2d:ae:8c:fa:11: db:8b:f8:c9:15:9a:f7:ae:a3:e7:95:95:04:3b:1f: f6:aa:25:69:ad:48:cb:f6:03:66:48:4b:cc:dd:69: c4:6a:35:8f:e6:ab:95:3c:95:18:30:4d:12:78:d3: fc:77:a6:3b:9a:de:28:0b:aa:90:1a:0a:6b:59:66: 98:1e:5a:be:b2:7f:d3:c8:9d:0f:fa:a9:d0:89:df: 8f:0d:6c:8f:c5:f7:63:28:f7:34:f3:94:43:75:a7: 98:11:ab:55:30:ac:21:27:88:12:8c:68:72:fd:e2: a6:d8:a9:7a:a7:45:a9:2c:88:3a:ae:d0:b0:c8:81: 43:99:a9:ed:56:96:99:c9:84:43:51:59:e9:f6:87: 56:15:e9:5f:01:76:b9:76:08:c0:eb:b0:4a:a7:7c: 2c:82:b7:48:e4:0f:53:10:39:de:7a:1a:80:18:34: 23:b5:cb:dd:19:fa:b0:6a:3f:52:4e:4b:09:95:ce: 92:b1:1f:38:f8:83:5b:ff:0c:01:f7:e1:a8:da:88: ef:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.52.0/23 Signature Algorithm: sha256WithRSAEncryption a8:18:24:3b:38:ad:90:7a:0d:6a:e5:29:ea:c5:24:6e:9a:3d: dc:81:42:76:68:c8:1a:82:c1:8c:fb:07:35:d9:42:d2:ed:a7: f7:83:b9:b5:a2:78:6e:a4:1c:7c:ec:dd:73:b6:7f:b9:38:e4: 59:a2:fd:c4:7a:fd:a0:23:41:bf:a7:96:54:57:77:b2:5e:15: 3d:6e:ee:d3:6f:37:21:2d:12:4e:6a:fb:9e:6b:ee:3c:7b:cd: 1e:78:4f:c4:31:a4:a2:e1:d9:28:9b:83:74:6a:28:f4:6f:26: c6:9f:ce:76:56:5b:89:9e:62:29:b5:a2:11:88:75:6d:57:3e: f7:22:ef:aa:bb:05:d8:d7:5c:c2:78:a5:4a:f8:6a:c1:a2:17: e5:84:1d:dc:69:a1:75:d7:72:d1:ab:31:84:80:d4:95:a7:8d: 72:bd:f7:8c:18:56:67:75:e5:95:39:7d:68:f3:20:6e:98:66: 78:c4:5c:09:23:f7:0d:0d:eb:b6:03:1d:e7:f0:f1:af:9e:1e: fe:54:eb:94:9b:c5:3e:3a:00:43:62:2b:b9:90:96:1c:1c:89: 64:5b:d8:33:ae:c0:d1:1b:5e:e2:89:63:98:b1:ab:83:92:4f: ee:28:75:ab:c4:d5:a1:36:ab:2f:bb:70:b1:e1:e8:e4:d9:37: 93:2e:3f:90 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICH0kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MTAyNzA2NTYxMFoXDTI2MTAxNjE1MzAyMFowMzEx MC8GA1UEAxMoNTQ3RTRCNjRGNjAyOUVEQUM3QzE2N0Q0NTIyREEzRDlGMDdFRjQz NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN2BShBP9BTJBKOKaPwB SzbbE8+ZDvplMBksbgoSSTcdX6nJazw2/8kZEf6XdZVjNu4qd9CBGy2ujPoR24v4 yRWa966j55WVBDsf9qolaa1Iy/YDZkhLzN1pxGo1j+arlTyVGDBNEnjT/HemO5re KAuqkBoKa1lmmB5avrJ/08idD/qp0Infjw1sj8X3Yyj3NPOUQ3WnmBGrVTCsISeI Eoxocv3iptipeqdFqSyIOq7QsMiBQ5mp7VaWmcmEQ1FZ6faHVhXpXwF2uXYIwOuw Sqd8LIK3SOQPUxA53noagBg0I7XL3Rn6sGo/Uk5LCZXOkrEfOPiDW/8MAffhqNqI 7+0CAwEAAaOCAlYwggJSMB0GA1UdDgQWBBRUfktk9gKe2sfBZ9RSLaPZ8H70NzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVCSVRURUNI LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0JFQklUVEVDSC9WSDVMWlBZQ250ckh3V2ZVVWkyajJmQi05RGMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivw0MA0GCSqGSIb3DQEBCwUA A4IBAQCoGCQ7OK2Qeg1q5SnqxSRumj3cgUJ2aMgagsGM+wc12ULS7af3g7m1onhu pBx87N1ztn+5OORZov3Eev2gI0G/p5ZUV3eyXhU9bu7TbzchLRJOavuea+48e80e eE/EMaSi4dkom4N0aij0bybGn852VluJnmIptaIRiHVtVz73Iu+quwXY11zCeKVK +GrBohflhB3caaF113LRqzGEgNSVp41yvfeMGFZndeWVOX1o8yBumGZ4xFwJI/cN Deu2Ax3n8PGvnh7+VOuUm8U+OgBDYiu5kJYcHIlkW9gzrsDRG17iiWOYsauDkk/u KHWrxNWhNqsvu3Cx4ejk2TeTLj+Q -----END CERTIFICATE-----Generated at Tue Nov 4 04:05:03 2025 by rpki-client