$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer File: lMbd_dS6pQQA86EZpYM84AIb2y4.cer (raw, json) Hash identifier: RKNKep3oQ/y0WfV7QwH62QtvPkPHqdfhtEKU7G8SgS0= Subject key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:15:03 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 18411 IP: 61.56.16.0/20 IP: 119.30.16.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 23:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15518 (0x3c9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:15:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2b:8e:ab:14:55:f2:2c:6b:40:4c:3c:3b:f4: 08:d9:83:0d:c8:ed:58:f8:41:7f:c9:3e:48:bf:79: 59:af:76:9a:6c:31:71:14:d6:1e:15:57:fc:34:21: 79:cc:c0:fd:39:a9:f3:83:ec:69:9e:fc:80:83:bf: d9:56:64:45:5a:aa:ad:97:5f:23:75:e1:2f:be:63: b4:54:9d:80:d8:05:ed:b2:21:d8:0d:87:ac:33:59: 44:a6:32:2a:3e:34:7d:47:2d:36:fc:67:4f:27:3b: 24:75:fd:32:75:14:cf:d4:a8:5e:99:e4:11:bf:ac: d3:30:7b:bd:9e:08:35:e5:f4:10:15:68:b3:96:4c: 70:77:12:ca:dc:bc:b3:a4:da:1b:50:cf:6d:f7:d9: ba:73:21:f7:23:6c:cc:c3:62:a3:46:c6:2a:62:46: a9:9e:74:cb:e7:c5:26:a2:85:e8:22:29:56:c0:5c: 77:ef:60:cd:92:52:4e:0a:32:1f:79:14:ee:66:97: 58:d3:a2:8a:d1:b3:da:f3:fd:7d:8d:89:e3:4e:fc: 7e:84:5c:f7:04:8e:ff:b8:06:97:b3:ef:cf:b5:26: 2f:97:dd:c1:ae:6b:91:e9:ee:16:52:50:fe:e2:27: 0d:1a:cc:cf:7c:ea:37:e0:b5:d3:4d:0d:68:db:a2: 51:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18411 sbgp-ipAddrBlock: critical IPv4: 61.56.16.0/20 119.30.16.0/20 Signature Algorithm: sha256WithRSAEncryption 07:84:5c:62:52:1b:c8:76:a6:da:17:be:33:b2:5c:25:65:0e: ea:5e:15:14:eb:4a:75:37:f3:c3:ce:fd:51:21:98:b8:6d:1d: a6:a7:c7:dd:0a:77:cf:02:a7:2f:54:c2:ad:ea:f5:d1:21:02: 59:3b:2f:23:2c:b7:f7:be:b5:46:9c:ff:5a:b3:8e:87:83:37: 88:a8:aa:5e:b6:e8:4b:cf:e2:ac:8a:45:56:7b:e4:d3:57:3e: 4c:c9:a2:22:74:f1:1a:5f:b2:db:a7:39:ac:ec:8b:7b:b8:20: 9a:71:d9:19:95:54:d1:80:2d:f6:19:da:93:64:7f:84:29:e0: fd:d5:bd:62:33:ca:f4:4f:cd:a3:c8:e0:2c:5c:a4:c9:fb:85: d3:4f:8e:00:53:d7:ed:46:2b:7d:f7:98:59:97:85:f7:8e:51: f5:5f:c6:cc:85:ad:df:59:45:90:35:ec:2d:02:0f:4d:62:08: 76:e6:75:d0:26:db:17:3f:10:6a:4a:34:01:c4:05:68:64:74: 8c:16:f9:f1:5d:17:67:97:08:6b:4b:ca:c3:1b:1c:ed:d2:8e: 2f:ec:84:fd:ce:92:77:bc:da:d5:0a:f8:a0:37:83:d3:14:ab: 9d:98:77:f9:7f:c5:d9:41:e4:be:ff:14:4a:97:9c:bb:35:47: fa:fc:de:5a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICPJ4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTUwM1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoOTRDNkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIy RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPgrjqsUVfIsa0BMPDv0 CNmDDcjtWPhBf8k+SL95Wa92mmwxcRTWHhVX/DQheczA/Tmp84PsaZ78gIO/2VZk RVqqrZdfI3XhL75jtFSdgNgF7bIh2A2HrDNZRKYyKj40fUctNvxnTyc7JHX9MnUU z9SoXpnkEb+s0zB7vZ4INeX0EBVos5ZMcHcSyty8s6TaG1DPbffZunMh9yNszMNi o0bGKmJGqZ50y+fFJqKF6CIpVsBcd+9gzZJSTgoyH3kU7maXWNOiitGz2vP9fY2J 4078foRc9wSO/7gGl7Pvz7UmL5fdwa5rkenuFlJQ/uInDRrMz3zqN+C1000NaNui UUsCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBSUxt391LqlBADzoRmlgzzgAhvbLjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev RURUTlMvbE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJH6zAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAME BD04EAMEBHceEDANBgkqhkiG9w0BAQsFAAOCAQEAB4RcYlIbyHam2he+M7JcJWUO 6l4VFOtKdTfzw879USGYuG0dpqfH3Qp3zwKnL1TCrer10SECWTsvIyy39761Rpz/ WrOOh4M3iKiqXrboS8/irIpFVnvk01c+TMmiInTxGl+y26c5rOyLe7ggmnHZGZVU 0YAt9hnak2R/hCng/dW9YjPK9E/No8jgLFykyfuF00+OAFPX7UYrffeYWZeF945R 9V/GzIWt31lFkDXsLQIPTWIIduZ10CbbFz8Qako0AcQFaGR0jBb58V0XZ5cIa0vK wxsc7dKOL+yE/c6Sd7za1Qr4oDeD0xSrnZh3+X/F2UHkvv8USpecuzVH+vzeWg== -----END CERTIFICATE-----Generated at Wed Sep 17 21:55:17 2025 by rpki-client