$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer File: 5f38rnFoBdOTzrEk62PtHC37t3w.cer (raw, json) Hash identifier: duLneScQCD8cYeo0ic1WsIZ6UUPKLGNZ/lqBzTqHA1Q= Subject key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3AF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:43 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 2001:4508::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15092 (0x3af4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:5a:41:94:28:84:ac:db:8b:b2:9f:16:10: ea:bb:7d:47:94:6b:97:49:20:0e:00:ab:33:f7:21: 27:af:5a:49:f3:fe:dc:d4:9c:50:00:21:78:5e:52: 62:63:25:42:47:ce:8d:8c:5f:f1:8d:07:29:a5:7c: 52:a2:c1:36:c9:f0:38:05:46:2d:e3:a4:bc:c3:56: ae:55:a7:c9:4c:5a:25:92:2d:87:51:ae:5b:48:2e: e3:81:c9:d5:67:0e:6f:55:b3:1c:92:1e:c3:86:77: 3f:37:e4:9c:e1:63:00:6f:46:e5:a0:12:20:8c:2f: 1b:9d:0e:8c:62:13:c4:5b:7f:58:ec:47:ec:85:c9: 90:2f:c9:f9:76:4b:b5:62:e1:d3:6a:8c:12:21:61: 9a:8a:03:78:34:55:3f:82:46:9c:49:bd:92:38:91: a4:96:59:88:c1:b2:be:5a:45:ba:0c:7c:b0:f9:a8: 21:54:0b:5f:0e:c4:64:6c:a9:0e:ff:8a:c0:70:55: f9:63:db:99:7c:ea:ec:49:f0:ce:c7:4f:c1:b3:f5: 3e:6b:12:8b:6a:4a:5d:21:4d:92:b5:34:5b:ec:ce: d3:d5:60:dc:73:de:08:0d:49:15:19:d7:59:75:d3: fd:76:3b:9f:b9:49:8d:28:c8:a4:b7:46:b4:a1:38: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4508::/32 Signature Algorithm: sha256WithRSAEncryption 6a:e1:f3:4c:23:1a:e7:de:66:3f:3b:39:13:c8:b8:a3:3b:0a: 44:c6:d2:ca:2f:e9:47:15:07:01:6e:0f:b1:ec:ea:e9:30:db: f2:e3:40:0b:83:51:79:a6:a9:56:9d:64:73:82:2c:72:e2:11: 12:e6:bf:23:11:d1:7c:cd:87:0e:87:10:e8:21:96:aa:c9:e3: 06:59:72:d5:aa:9c:42:d9:c4:70:e2:08:b2:8e:70:8f:9c:c6: ce:d0:82:33:67:9f:f2:15:fc:54:e2:24:a9:a8:7c:bc:c2:61: 68:55:51:1c:25:56:ce:ba:9e:1d:18:14:01:7c:18:fe:91:1e: 01:d3:56:d1:74:ae:eb:14:c4:21:d4:ab:99:5a:be:91:ee:79: ab:f9:d4:86:40:7d:00:4e:14:1a:34:4f:57:1e:c5:00:55:8d: cf:b9:9a:a6:4d:03:10:af:08:ef:30:fa:7d:47:d1:5a:ec:30: 00:0a:f3:19:a4:b5:f2:38:b6:10:ce:f5:83:82:44:aa:4e:c7: 29:37:c5:09:4e:68:45:7f:a8:a4:83:7a:c0:1e:47:9d:6e:9e: 1a:40:6f:77:4a:73:a2:87:c3:b6:27:db:9e:36:24:b4:07:0b: d7:12:99:30:b4:37:31:40:21:f6:e8:77:fb:0b:8d:24:b0:ba: 23:aa:1e:cb -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICOvQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ0M1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoRTVGREZDQUU3MTY4MDVEMzkzQ0VCMTI0RUI2M0VEMUMyREZCQjc3 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYDWkGUKISs24uynxYQ 6rt9R5Rrl0kgDgCrM/chJ69aSfP+3NScUAAheF5SYmMlQkfOjYxf8Y0HKaV8UqLB NsnwOAVGLeOkvMNWrlWnyUxaJZIth1GuW0gu44HJ1WcOb1WzHJIew4Z3PzfknOFj AG9G5aASIIwvG50OjGITxFt/WOxH7IXJkC/J+XZLtWLh02qMEiFhmooDeDRVP4JG nEm9kjiRpJZZiMGyvlpFugx8sPmoIVQLXw7EZGypDv+KwHBV+WPbmXzq7EnwzsdP wbP1PmsSi2pKXSFNkrU0W+zO09Vg3HPeCA1JFRnXWXXT/XY7n7lJjSjIpLdGtKE4 LPECAwEAAaOCAk8wggJLMB0GA1UdDgQWBBTl/fyucWgF05POsSTrY+0cLfu3fDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQVUvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QVNJQVUvNWYzOHJuRm9CZE9UenJFazYyUHRIQzM3dDN3Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACABRQgwDQYJKoZIhvcNAQELBQADggEBAGrh 80wjGufeZj87ORPIuKM7CkTG0sov6UcVBwFuD7Hs6ukw2/LjQAuDUXmmqVadZHOC LHLiERLmvyMR0XzNhw6HEOghlqrJ4wZZctWqnELZxHDiCLKOcI+cxs7QgjNnn/IV /FTiJKmofLzCYWhVURwlVs66nh0YFAF8GP6RHgHTVtF0rusUxCHUq5lavpHueav5 1IZAfQBOFBo0T1cexQBVjc+5mqZNAxCvCO8w+n1H0VrsMAAK8xmktfI4thDO9YOC RKpOxyk3xQlOaEV/qKSDesAeR51unhpAb3dKc6KHw7Yn2542JLQHC9cSmTC0NzFA Ifbod/sLjSSwuiOqHss= -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:31 2025 by rpki-client