$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer File: -FjQAAx8RqmGsuuWgV8GriaTqdA.cer (raw, json) Hash identifier: 7fBHjkwz+xTQ5R9UTOXziZ4IxoHNKngDjHFp/zhmzus= Subject key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DA7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:43 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 159.117.64.0/19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7591 (0x1da7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:b7:1a:31:cd:db:ed:15:50:f5:73:3a:b9: 20:60:3b:a6:2d:c4:01:0f:48:49:d7:3f:61:1b:fe: 22:b1:30:63:1d:dd:85:05:89:2f:5d:9e:65:09:54: 05:7a:65:17:8f:14:c0:88:ee:b5:70:cd:dd:83:dc: ef:42:d8:6a:1a:fe:a0:75:19:b4:fb:fb:46:49:19: 52:e3:54:2c:3c:f1:cb:78:29:b6:d3:6d:92:e7:1c: 6e:81:cc:57:36:a7:78:c2:9f:be:7d:cf:5c:11:51: 35:34:83:09:d7:26:2d:e4:c1:35:d4:61:fb:fc:6c: c7:ea:76:42:2f:12:3c:bf:ac:0e:f0:e5:84:90:30: 2a:38:9c:a1:34:dd:eb:d7:6d:14:cb:f3:94:40:45: c0:e2:8d:b6:d0:f5:cb:80:30:06:58:c6:35:58:01: d5:3e:2d:70:4c:5b:3d:c4:d6:75:f4:53:a0:ea:74: d6:a7:27:6f:4b:7e:02:d3:f1:16:58:d3:a1:8a:0d: 7e:fa:6c:36:2b:12:40:cb:7a:77:81:a6:4f:83:fd: d8:b9:22:be:2f:fd:9d:07:41:6b:71:29:7b:b9:87: 1b:e8:49:6c:4b:2e:f0:ac:8e:49:5a:19:70:37:1e: d8:f1:3f:60:41:69:b2:e6:39:0c:3a:ca:4f:16:0e: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 159.117.64.0/19 Signature Algorithm: sha256WithRSAEncryption 79:d5:23:ff:d1:07:02:d7:0d:94:3e:12:c0:c4:b3:70:71:e8: dd:59:f7:d3:08:bf:0a:66:c3:fd:03:5c:00:ab:3f:48:18:8c: 1d:59:92:c9:f8:72:26:fa:54:3b:c7:8a:9b:a8:d7:ef:47:12: 7b:8c:fb:40:fc:53:63:9e:92:c3:05:45:db:b2:f3:8e:00:af: 48:46:4a:fe:09:9f:d4:43:23:36:06:7e:7f:e1:94:37:f6:22: ac:51:d2:31:8e:83:ac:88:20:e6:fd:7e:e1:48:4c:0f:b3:15: b3:32:b6:c0:57:97:c2:d7:d9:f1:32:f4:38:4c:c3:8c:28:46: f0:05:a6:e7:5a:c2:9b:03:82:8a:02:da:6e:b7:7d:f8:c0:a6: cb:a3:e8:d4:92:de:72:02:c1:ea:53:20:34:72:d3:2c:36:33: 74:5c:eb:94:d7:a7:46:6a:11:08:fd:87:55:8c:18:98:69:30: 42:ad:fd:6b:3f:c2:71:69:04:86:57:31:48:86:7e:b3:c2:18: 57:1e:34:ad:b6:42:91:0f:01:f5:95:c0:1e:af:83:d3:03:50: 34:2d:f9:37:95:4f:48:9f:29:95:66:13:d5:0e:c8:79:24:06: 39:95:17:08:22:95:32:56:3d:a3:c2:93:10:49:b3:95:b8:a7: 30:74:47:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHacwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQ0M1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRjg1OEQwMDAwQzdDNDZBOTg2QjJFQjk2ODE1RjA2QUUyNjkzQTlE MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKO5txoxzdvtFVD1czq5 IGA7pi3EAQ9ISdc/YRv+IrEwYx3dhQWJL12eZQlUBXplF48UwIjutXDN3YPc70LY ahr+oHUZtPv7RkkZUuNULDzxy3gpttNtkuccboHMVzaneMKfvn3PXBFRNTSDCdcm LeTBNdRh+/xsx+p2Qi8SPL+sDvDlhJAwKjicoTTd69dtFMvzlEBFwOKNttD1y4Aw BljGNVgB1T4tcExbPcTWdfRToOp01qcnb0t+AtPxFljToYoNfvpsNisSQMt6d4Gm T4P92Lkivi/9nQdBa3Epe7mHG+hJbEsu8KyOSVoZcDce2PE/YEFpsuY5DDrKTxYO wlkCAwEAAaOCAlQwggJQMB0GA1UdDgQWBBT4WNAADHxGqYay65aBXwauJpOp0DAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZPTkcv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvRE9OR0ZPTkcvLUZqUUFBeDhScW1Hc3V1V2dWOEdyaWFUcWRBLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBZ91QDANBgkqhkiG9w0BAQsFAAOC AQEAedUj/9EHAtcNlD4SwMSzcHHo3Vn30wi/CmbD/QNcAKs/SBiMHVmSyfhyJvpU O8eKm6jX70cSe4z7QPxTY56SwwVF27LzjgCvSEZK/gmf1EMjNgZ+f+GUN/YirFHS MY6DrIgg5v1+4UhMD7MVszK2wFeXwtfZ8TL0OEzDjChG8AWm51rCmwOCigLabrd9 +MCmy6Po1JLecgLB6lMgNHLTLDYzdFzrlNenRmoRCP2HVYwYmGkwQq39az/CcWkE hlcxSIZ+s8IYVx40rbZCkQ8B9ZXAHq+D0wNQNC35N5VPSJ8plWYT1Q7IeSQGOZUX CCKVMlY9o8KTEEmzlbinMHRHvw== -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:25 2025 by rpki-client