$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer File: ftgwlnECe35vya4nucaMnE4pxXU.cer (raw, json) Hash identifier: jWspf2A/54dNH9MOy2RqsfW/NX8poFVXH8FULeaqqd0= Subject key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DCF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:52:04 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 165.101.152.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7631 (0x1dcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:52:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:ba:3f:1a:36:90:ec:65:58:1c:de:45:9f: 51:cb:ff:57:93:c9:84:35:3f:00:82:85:32:84:c1: b9:e3:eb:78:11:cf:87:f6:54:f1:a7:1f:52:9e:7f: 39:fc:5e:a7:36:4f:65:92:cb:92:2c:15:c1:36:4c: 64:e5:60:70:4e:db:31:63:33:96:03:d7:3d:a4:f3: 5f:60:fa:95:c7:be:5d:37:68:f9:81:ba:cb:83:5a: a6:01:f4:b6:83:8f:ce:cc:28:24:35:f6:bf:27:da: d2:0f:a9:e3:f7:30:c3:a3:06:7b:d9:29:03:1d:90: 4d:93:b7:5a:59:40:be:de:ac:17:63:35:1c:09:6b: 19:b5:99:d0:b1:2e:d9:03:bb:88:3d:16:77:f3:4f: 3b:b7:b8:fa:06:30:9b:be:67:1b:40:26:28:9f:eb: 21:6c:96:35:ac:05:40:2f:30:9c:25:d1:8e:cd:ff: 92:43:4f:aa:14:ab:55:b2:12:09:8d:0e:a6:bf:bd: 0a:b6:70:11:25:24:f3:91:5b:8d:89:8a:7f:c3:e1: 92:d7:64:73:69:93:f3:4d:d1:4e:38:5d:49:34:7c: 5b:61:22:dc:f4:d5:05:28:dc:89:30:fd:41:4a:64: 44:85:1a:d0:c8:95:ac:db:67:93:bc:7b:ce:06:67: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.152.0/23 Signature Algorithm: sha256WithRSAEncryption 26:f9:ee:9b:54:2a:c9:c1:b7:99:00:ac:d6:b6:34:5c:5f:2c: 38:29:db:3d:27:be:9d:ea:7f:09:76:e4:bb:f1:65:86:2f:42: d3:7c:33:cb:18:ce:1d:18:86:32:fe:df:97:a3:5d:e0:a3:cc: 2f:83:38:73:7f:a4:53:af:94:51:98:9c:2e:bc:07:0b:04:ec: 81:8e:dc:2b:1d:f8:40:01:c4:53:cb:16:9a:62:d5:a6:cc:31: 91:71:d0:21:13:5e:27:3c:25:ed:31:37:05:90:4d:e9:1b:d3: 8d:08:31:6f:21:fb:3c:dc:35:d9:50:42:51:c3:2f:62:a7:39: bd:13:09:08:ff:76:15:e9:15:f3:97:6d:b7:c2:68:ec:4c:db: fb:ea:63:e8:e5:f3:b2:77:f3:38:ff:7d:53:56:c1:27:d6:e6: 93:27:16:da:94:cc:d3:c7:04:be:df:e9:9e:09:3f:fc:c4:7a: 4a:24:f3:de:e7:57:ec:4c:b1:0d:cc:7f:e8:48:61:f8:2d:de: 82:e0:9e:f6:f5:f8:a7:42:f9:c3:be:be:46:aa:af:cd:35:22: 9e:7e:ac:d3:8d:2e:51:fd:43:2e:a9:29:3e:c0:31:e1:21:20: 19:1d:b1:c3:9c:27:49:fb:48:3f:4d:5a:64:32:fd:18:bb:03: a6:8b:7d:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHc8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTIwNFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoN0VEODMwOTY3MTAyN0I3RTZGQzlBRTI3QjlDNjhDOUM0RTI5QzU3 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQRuj8aNpDsZVgc3kWf Ucv/V5PJhDU/AIKFMoTBuePreBHPh/ZU8acfUp5/OfxepzZPZZLLkiwVwTZMZOVg cE7bMWMzlgPXPaTzX2D6lce+XTdo+YG6y4NapgH0toOPzswoJDX2vyfa0g+p4/cw w6MGe9kpAx2QTZO3WllAvt6sF2M1HAlrGbWZ0LEu2QO7iD0Wd/NPO7e4+gYwm75n G0AmKJ/rIWyWNawFQC8wnCXRjs3/kkNPqhSrVbISCY0Opr+9CrZwESUk85FbjYmK f8Phktdkc2mT803RTjhdSTR8W2Ei3PTVBSjciTD9QUpkRIUa0MiVrNtnk7x7zgZn /bMCAwEAAaOCAlQwggJQMB0GA1UdDgQWBBR+2DCWcQJ7fm/Jrie5xoycTinFdTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNQkVTT04v MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvR0FNQkVTT04vZnRnd2xuRUNlMzV2eWE0bnVjYU1uRTRweFhVLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaVlmDANBgkqhkiG9w0BAQsFAAOC AQEAJvnum1QqycG3mQCs1rY0XF8sOCnbPSe+nep/CXbku/Flhi9C03wzyxjOHRiG Mv7fl6Nd4KPML4M4c3+kU6+UUZicLrwHCwTsgY7cKx34QAHEU8sWmmLVpswxkXHQ IRNeJzwl7TE3BZBN6RvTjQgxbyH7PNw12VBCUcMvYqc5vRMJCP92FekV85dtt8Jo 7Ezb++pj6OXzsnfzOP99U1bBJ9bmkycW2pTM08cEvt/pngk//MR6SiTz3udX7Eyx Dcx/6Ehh+C3eguCe9vX4p0L5w76+RqqvzTUinn6s040uUf1DLqkpPsAx4SEgGR2x w5wnSftIP01aZDL9GLsDpot9ag== -----END CERTIFICATE-----Generated at Mon Sep 8 08:39:57 2025 by rpki-client