$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer File: -cYtwWoyWUFWZBQsknjF3cTYKZ0.cer (raw, json) Hash identifier: ywfdEj+Yk3Z6ID7Wrp9nNufKgSnlh9bAOTVti0Ol1Bo= Subject key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DC1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:48:49 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 165.99.66.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7617 (0x1dc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:48:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:55:fc:00:c6:3c:50:be:b6:d8:d4:7c:9b: c8:c7:08:c6:32:70:a9:3d:2b:2e:98:53:3e:4d:55: 57:f1:a9:ee:bf:d5:74:31:cc:79:96:4b:6a:68:23: 12:83:f3:8b:05:e2:0c:ea:1d:8b:c8:27:38:7d:46: 9f:13:16:0d:4a:2e:67:4c:ba:c2:eb:bd:93:25:25: 1b:1b:f9:6c:5d:6d:90:5c:76:7e:a0:af:30:e7:e3: 0e:f4:90:ca:2e:4b:cd:65:f6:e8:a4:ed:ab:83:95: 36:a5:d5:20:53:74:83:4f:b8:1a:9a:09:7a:36:b3: 91:43:d8:4a:a8:44:64:3e:d3:99:88:51:d4:11:eb: ad:dc:5e:db:de:6e:7c:f5:09:78:66:5f:de:1a:e8: 58:a4:d7:e3:60:4d:a6:c4:94:31:c8:bb:1d:a3:87: d1:ad:b7:f7:80:0d:63:16:93:b6:ea:c4:8c:3b:fa: 1d:4c:01:95:f6:75:35:41:eb:30:ca:bf:87:1e:0c: 64:98:82:3b:1a:d3:ef:a7:6a:d6:55:16:f3:f0:95: 77:0a:e4:4c:36:4c:f9:e6:9a:14:09:58:c0:a5:df: 5a:1a:57:4e:bd:f9:03:68:b1:5b:74:2e:0d:51:12: 77:df:5a:1e:b0:e9:6a:cf:6e:18:1d:cd:71:62:16: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.99.66.0/23 Signature Algorithm: sha256WithRSAEncryption 09:9c:36:cc:d5:30:13:ef:bf:c0:95:13:42:40:96:4a:64:b0: 17:5a:a9:a3:65:72:95:79:64:85:79:6a:84:45:9c:73:65:ae: 02:d0:ec:a0:4a:bf:15:94:cd:6d:61:5f:a1:32:b9:9e:a5:8c: cf:ff:1a:3d:65:ae:bc:8f:48:ae:b7:65:91:5c:29:99:d4:e1: 67:82:42:c0:f2:89:de:09:36:4c:dc:e0:1f:32:40:a2:3b:de: d4:73:5a:e9:da:31:31:18:0a:65:bf:9d:e3:4d:f6:a1:1b:d4: 04:6d:48:71:bd:e0:43:93:f4:68:17:9e:6d:19:96:3f:97:6f: 0b:2e:ea:35:29:23:f4:b6:3d:bb:67:b4:5a:7c:5b:28:b3:eb: 16:ea:f6:72:25:b3:1c:0c:d3:1b:7a:b1:09:5f:26:73:96:b2: 6a:d4:00:60:48:a3:f5:8e:ab:d8:b4:7e:bd:c2:25:e6:01:b1: 2f:70:44:32:e6:90:cb:46:64:c2:5e:df:e0:ca:91:17:14:18: 8f:91:35:9b:e9:58:c7:04:2e:c5:b5:73:43:d2:f7:f0:08:32: e2:ee:7d:96:44:a4:5a:88:02:d4:73:2c:a4:5c:17:ac:14:0b: 6d:56:19:e1:90:50:8d:06:48:a2:29:88:5b:da:12:d7:74:83: 76:18:22:b4 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHcEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NDg0OVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRjlDNjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMexVfwAxjxQvrbY1Hyb yMcIxjJwqT0rLphTPk1VV/Gp7r/VdDHMeZZLamgjEoPziwXiDOodi8gnOH1GnxMW DUouZ0y6wuu9kyUlGxv5bF1tkFx2fqCvMOfjDvSQyi5LzWX26KTtq4OVNqXVIFN0 g0+4GpoJejazkUPYSqhEZD7TmYhR1BHrrdxe295ufPUJeGZf3hroWKTX42BNpsSU Mci7HaOH0a2394ANYxaTturEjDv6HUwBlfZ1NUHrMMq/hx4MZJiCOxrT76dq1lUW 8/CVdwrkTDZM+eaaFAlYwKXfWhpXTr35A2ixW3QuDVESd99aHrDpas9uGB3NcWIW WoMCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBT5xi3BajJZQVZkFCySeMXdxNgpnTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1VXQVlJTy8tY1l0d1dveVdVRldaQlFza25qRjNjVFlLWjAubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpWNCMA0GCSqGSIb3DQEBCwUAA4IBAQAJ nDbM1TAT77/AlRNCQJZKZLAXWqmjZXKVeWSFeWqERZxzZa4C0OygSr8VlM1tYV+h MrmepYzP/xo9Za68j0iut2WRXCmZ1OFngkLA8oneCTZM3OAfMkCiO97Uc1rp2jEx GAplv53jTfahG9QEbUhxveBDk/RoF55tGZY/l28LLuo1KSP0tj27Z7RafFsos+sW 6vZyJbMcDNMberEJXyZzlrJq1ABgSKP1jqvYtH69wiXmAbEvcEQy5pDLRmTCXt/g ypEXFBiPkTWb6VjHBC7FtXND0vfwCDLi7n2WRKRaiALUcyykXBesFAttVhnhkFCN BkiiKYhb2hLXdIN2GCK0 -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:52 2025 by rpki-client