$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer File: Z3gr2kgldGOtzabXLy7kG1_ZShE.cer (raw, json) Hash identifier: CtzPjwzJ2nmcYhW4dncyb24nw9ZN1g/dW6ExIC9RxaM= Subject key identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:40 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 2404:a3c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15030 (0x3ab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:8e:93:25:fe:d6:3d:b4:77:b0:8d:40:a1: 4d:ec:05:52:a0:ce:be:7f:94:75:ad:8d:88:ef:49: 9b:dc:e1:cf:7e:89:06:e0:6f:db:14:b2:87:ff:fd: a0:2f:fb:8c:a5:f5:19:9d:2b:89:27:1a:d6:c3:39: c1:e1:46:78:dd:a6:82:c8:8f:69:c2:c2:85:25:88: 5e:78:7b:22:55:04:bb:44:70:86:50:07:51:62:81: d8:33:35:aa:50:17:2c:4b:85:f1:4f:09:3f:49:a4: 62:36:cd:a8:dc:c6:0b:5d:8b:7c:d4:c9:06:3a:85: c7:a4:da:3b:c3:29:57:e3:39:37:d2:0a:94:61:5e: 28:34:f3:ac:97:7e:43:72:dc:8c:e0:38:2b:4f:34: ad:6a:ab:cc:fe:df:0d:b9:ac:1d:14:1a:f6:8f:98: 9f:a9:1c:5a:f4:77:65:51:7b:bb:d2:89:dd:c0:c6: 21:7e:a2:56:22:06:35:a2:63:87:0e:d7:08:79:d8: 6d:22:37:7b:72:7f:cf:1e:d3:8e:be:01:17:61:22: 91:fa:99:bb:02:e2:f2:29:33:60:80:18:47:03:6f: 46:9b:1c:f3:e0:d9:08:8d:a7:a6:6e:6e:70:71:98: 2e:ad:67:43:e9:83:e9:9f:65:80:18:c6:09:6c:a7: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:a3c0::/32 Signature Algorithm: sha256WithRSAEncryption 34:73:70:80:d8:e4:03:c9:08:43:72:24:6f:7a:dd:25:c6:3d: f7:d8:ea:49:e7:14:28:7a:16:24:41:c9:da:d7:4c:0a:af:f0: 42:74:89:26:a8:56:f2:f3:84:4d:fa:72:48:42:f9:cd:af:8b: 63:86:7a:b3:62:df:6b:65:4e:cb:52:2f:dc:c2:6a:a3:00:dc: 25:3d:0e:e5:41:6f:0f:55:54:e7:43:34:6f:a6:6b:b1:41:7b: b8:7d:e5:c5:14:9d:a3:8a:8b:28:8a:0b:58:51:38:4b:74:95: 97:76:00:a1:91:8e:48:3a:a5:71:a1:e3:7c:30:84:a6:4a:b7: 04:ea:5e:34:b1:32:ae:02:7c:fc:7d:9c:47:82:3e:dd:99:32: 51:da:b2:83:ab:b9:fe:f3:f7:a4:ca:1c:a3:c4:0b:f4:eb:11: 9c:27:75:ed:02:69:ab:87:2d:22:d6:a9:3d:37:46:25:18:80: ad:8c:13:1d:cc:f1:4a:13:6f:87:e3:38:69:4f:d2:b8:31:e5: 60:6c:cc:1b:4d:97:d1:f1:24:b9:3a:90:ed:8c:80:4b:0b:8f: 50:7f:7f:22:69:3c:ab:48:41:ea:70:49:65:11:99:b7:c7:59: 1d:8d:aa:70:4c:dc:6d:8b:6e:a6:3d:23:dc:74:6f:8a:47:14: c3:13:f8:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICOrYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ0MFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNjc3ODJCREE0ODI1NzQ2M0FEQ0RBNkQ3MkYyRUU0MUI1RkQ5NEEx MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBhjpMl/tY9tHewjUCh TewFUqDOvn+Uda2NiO9Jm9zhz36JBuBv2xSyh//9oC/7jKX1GZ0riSca1sM5weFG eN2mgsiPacLChSWIXnh7IlUEu0RwhlAHUWKB2DM1qlAXLEuF8U8JP0mkYjbNqNzG C12LfNTJBjqFx6TaO8MpV+M5N9IKlGFeKDTzrJd+Q3LcjOA4K080rWqrzP7fDbms HRQa9o+Yn6kcWvR3ZVF7u9KJ3cDGIX6iViIGNaJjhw7XCHnYbSI3e3J/zx7Tjr4B F2EikfqZuwLi8ikzYIAYRwNvRpsc8+DZCI2npm5ucHGYLq1nQ+mD6Z9lgBjGCWyn mEkCAwEAAaOCAlMwggJPMB0GA1UdDgQWBBRneCvaSCV0Y63NptcvLuQbX9lKETAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9VRC8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9JTUNMT1VEL1ozZ3Iya2dsZEdPdHphYlhMeTdrRzFfWlNoRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYI KwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBKPAMA0GCSqGSIb3DQEBCwUAA4IB AQA0c3CA2OQDyQhDciRvet0lxj332OpJ5xQoehYkQcna10wKr/BCdIkmqFby84RN +nJIQvnNr4tjhnqzYt9rZU7LUi/cwmqjANwlPQ7lQW8PVVTnQzRvpmuxQXu4feXF FJ2jiosoigtYUThLdJWXdgChkY5IOqVxoeN8MISmSrcE6l40sTKuAnz8fZxHgj7d mTJR2rKDq7n+8/ekyhyjxAv06xGcJ3XtAmmrhy0i1qk9N0YlGICtjBMdzPFKE2+H 4zhpT9K4MeVgbMwbTZfR8SS5OpDtjIBLC49Qf38iaTyrSEHqcEllEZm3x1kdjapw TNxti26mPSPcdG+KRxTDE/iP -----END CERTIFICATE-----Generated at Sat Oct 25 22:11:57 2025 by rpki-client