$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer File: Bj-Bjayxcbg1QVq9J4mTki883F0.cer (raw, json) Hash identifier: jgLanoeJ+uw+yyUnr0SHMzYSgxxbWoMHnh7+d0uYwnI= Subject key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:46 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.220.218.0/23 IP: 2401:a60::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15158 (0x3b36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=063F818DACB171B835415ABD278993922F3CDC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:02:25:a6:df:ab:7b:41:72:e4:5f:31:26: 72:95:b4:24:59:d1:0a:36:44:41:57:8b:d2:6b:8a: ba:02:88:01:c0:b1:f9:c4:6c:a3:df:99:1d:f5:80: e4:4e:7d:47:0a:6a:c3:3c:91:85:89:16:35:9b:07: 09:09:42:49:ba:b1:b6:b7:cb:27:7f:fb:82:9e:a9: 58:50:37:d9:58:a3:7b:9b:ec:ab:40:b8:1c:80:09: 46:37:39:be:b6:ac:df:bd:8e:ff:94:bc:e1:ea:0c: 40:ab:9e:f3:25:04:af:fe:b8:27:c2:fa:fc:86:57: 25:99:fc:f1:03:33:79:bf:66:4c:e2:de:d7:01:6f: 69:67:de:dd:1b:69:d2:35:73:16:0e:eb:b6:71:c6: 64:85:b6:b2:89:77:b5:92:4b:6a:aa:e1:dc:a2:e9: 34:f2:43:1d:b4:c1:0e:77:06:d5:94:93:21:79:5f: fa:f6:a0:6e:31:dc:81:3d:6c:7b:49:ce:72:91:d8: 90:c3:05:c2:53:d6:b4:c3:a2:27:d7:03:8f:53:28: 76:d8:b2:2a:36:f9:b6:4f:a8:fe:6a:9e:74:be:b6: 7c:1e:82:aa:ba:b3:0f:58:7f:1b:b7:9d:82:1d:9d: 57:31:f5:a8:41:16:3a:56:5a:32:70:ef:b5:0d:4d: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.218.0/23 IPv6: 2401:a60::/32 Signature Algorithm: sha256WithRSAEncryption 4b:9c:c3:6f:3a:fc:7f:4c:cf:7a:8f:43:2b:ce:33:5d:63:8f: e3:a4:34:c7:8e:d8:cd:fa:9a:13:02:0d:5f:3a:a6:e5:81:0e: 29:8a:63:71:34:11:30:3e:02:46:a7:88:ad:8d:25:9f:e7:43: 3f:f9:6b:ef:70:01:45:a0:c6:47:88:3f:ab:6f:3c:77:f8:e1: 8e:fc:51:26:6d:e3:85:ba:f1:e8:73:e1:78:dd:d8:b1:33:63: be:0f:66:b7:93:f3:03:e0:88:c9:ea:dc:85:65:ec:85:06:c3: 3e:cb:49:f5:88:84:3a:e3:22:81:fc:f9:68:1b:c9:1e:f6:dc: a6:58:0b:bc:e1:e2:6d:4c:3d:b5:46:c6:e0:89:6f:d9:50:db: bb:07:65:c7:e9:0e:f5:f5:99:ef:c0:f0:aa:28:66:5d:fd:eb: 40:11:4c:53:83:4a:f4:f5:97:70:81:d0:2b:e7:d2:ef:d7:36: 33:60:e8:10:82:df:92:f3:7d:65:80:34:cf:66:ea:17:66:af: 18:d2:42:60:fb:30:aa:0a:b0:b4:07:e2:16:6b:d5:75:38:94: 19:0d:e7:98:13:09:86:dc:9f:7d:3f:2c:0b:69:59:21:80:c5: 18:17:a5:58:6d:15:03:55:fd:d2:48:9b:24:ee:3d:22:1a:11: 5a:bd:f0:4a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICOzYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ0NloXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMDYzRjgxOERBQ0IxNzFCODM1NDE1QUJEMjc4OTkzOTIyRjNDREM1 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJj/AiWm36t7QXLkXzEm cpW0JFnRCjZEQVeL0muKugKIAcCx+cRso9+ZHfWA5E59RwpqwzyRhYkWNZsHCQlC SbqxtrfLJ3/7gp6pWFA32Vije5vsq0C4HIAJRjc5vras372O/5S84eoMQKue8yUE r/64J8L6/IZXJZn88QMzeb9mTOLe1wFvaWfe3Rtp0jVzFg7rtnHGZIW2sol3tZJL aqrh3KLpNPJDHbTBDncG1ZSTIXlf+vagbjHcgT1se0nOcpHYkMMFwlPWtMOiJ9cD j1ModtiyKjb5tk+o/mqedL62fB6CqrqzD1h/G7edgh2dVzH1qEEWOlZaMnDvtQ1N XhcCAwEAAaOCAlkwggJVMB0GA1UdDgQWBBQGP4GNrLFxuDVBWr0niZOSLzzcXTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERDLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RE Qy9Cai1CamF5eGNiZzFRVnE5SjRtVGtpODgzRjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ9zaMA0EAgACMAcDBQAkAQpgMA0GCSqGSIb3DQEB CwUAA4IBAQBLnMNvOvx/TM96j0MrzjNdY4/jpDTHjtjN+poTAg1fOqblgQ4pimNx NBEwPgJGp4itjSWf50M/+WvvcAFFoMZHiD+rbzx3+OGO/FEmbeOFuvHoc+F43dix M2O+D2a3k/MD4IjJ6tyFZeyFBsM+y0n1iIQ64yKB/PloG8ke9tymWAu84eJtTD21 RsbgiW/ZUNu7B2XH6Q719ZnvwPCqKGZd/etAEUxTg0r09ZdwgdAr59Lv1zYzYOgQ gt+S831lgDTPZuoXZq8Y0kJg+zCqCrC0B+IWa9V1OJQZDeeYEwmG3J99PywLaVkh gMUYF6VYbRUDVf3SSJsk7j0iGhFavfBK -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:50 2025 by rpki-client