$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer File: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (raw, json) Hash identifier: HqEjbIacwPkiZN6Q1HIt1suTMUH58CvGA1YQJiYg6Jg= Subject key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1DC9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:50:53 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.187.100.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7625 (0x1dc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:50:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:ba:8c:f3:9b:ff:0e:28:4f:86:b3:47:ee: 04:6e:c6:b7:a9:03:a3:ef:2c:a1:8c:f4:2f:3d:07: 4b:67:67:f7:11:52:25:a1:15:41:25:f1:2e:83:c0: bd:ff:5b:04:73:ab:41:5e:40:12:da:0a:1d:93:ce: 38:36:b7:0e:3a:42:78:c7:74:e5:b1:7b:51:4a:78: a7:50:03:b2:d3:4b:10:7f:05:db:9a:10:6c:55:60: c7:ae:38:b7:84:1b:c0:86:c3:07:a3:e3:73:e6:eb: 07:03:7a:be:b6:95:b7:9f:30:8c:a2:a2:8f:5d:72: 78:a6:e1:df:6a:26:21:52:02:d6:ff:d6:f5:fc:a4: 5a:e9:01:b9:e2:db:cb:84:3e:a8:87:47:64:e6:a0: fe:ed:a6:c4:11:49:65:e9:40:ce:57:55:58:a9:92: 6e:10:e3:30:db:68:e4:e1:f5:3a:b6:6e:d6:08:c9: 40:95:7f:4d:68:b8:41:de:86:17:a1:b5:ee:96:e0: 38:9b:98:15:2f:63:3d:14:18:4a:2d:9b:c3:43:34: 99:10:69:db:4b:33:6c:3d:21:ca:33:7f:45:81:8a: 0e:1f:9e:6a:4e:65:03:d5:27:f6:3a:3c:6f:97:71: 33:e5:d1:53:6a:c3:ab:a4:df:ef:a4:00:a6:9c:e2: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.100.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:b5:32:66:8d:f9:ec:da:30:9a:76:b9:55:1a:21:8f:23:9d: f7:82:1f:35:f3:10:d8:a1:cf:07:92:66:5b:5a:3e:d5:70:00: c2:ce:69:cf:e3:dc:e6:58:ce:53:61:05:e1:4e:17:87:79:c5: d6:4a:cc:c6:c3:b8:d3:8b:5f:2a:df:ba:31:26:d1:52:96:62: 8d:e6:86:fb:3b:e5:1f:b0:f2:02:ca:3e:55:c0:85:17:fd:a4: a5:88:00:d8:49:a9:f5:da:4d:a0:11:bf:de:f3:df:ca:51:ce: 08:34:11:95:cc:c6:54:37:ec:db:6d:84:9a:e5:5d:0e:e0:29: 20:87:28:16:8f:22:e1:f0:a1:24:31:00:b8:9a:9d:8f:df:0c: 99:c4:11:e4:3a:f0:39:90:de:ad:33:36:70:74:2b:af:dd:18: fb:62:80:9e:b0:d4:c1:ac:90:4c:1b:55:1a:69:3b:78:75:3e: a8:3a:dc:ef:11:da:66:69:aa:9a:65:71:ed:d3:0c:ce:e0:c7: 8b:9e:d2:dd:4e:e5:68:79:60:11:c5:43:17:01:3c:17:9d:4d: 1a:34:7c:4d:9d:57:43:a6:ca:34:90:0c:70:44:a4:52:37:45: ab:e9:1f:8a:75:de:ea:9f:49:84:c8:0a:2a:02:5d:ee:06:b6: c1:89:49:48 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICHckwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4NTA1M1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoNkEyQjEzOTZDMTQyREE2NzExNTE4ODc1RTkwQzRBRUM5MEIwRjVD NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9zuozzm/8OKE+Gs0fu BG7Gt6kDo+8soYz0Lz0HS2dn9xFSJaEVQSXxLoPAvf9bBHOrQV5AEtoKHZPOODa3 DjpCeMd05bF7UUp4p1ADstNLEH8F25oQbFVgx644t4QbwIbDB6Pjc+brBwN6vraV t58wjKKij11yeKbh32omIVIC1v/W9fykWukBueLby4Q+qIdHZOag/u2mxBFJZelA zldVWKmSbhDjMNto5OH1OrZu1gjJQJV/TWi4Qd6GF6G17pbgOJuYFS9jPRQYSi2b w0M0mRBp20szbD0hyjN/RYGKDh+eak5lA9Un9jo8b5dxM+XRU2rDq6Tf76QAppzi Vf0CAwEAAaOCAlgwggJUMB0GA1UdDgQWBBRqKxOWwULaZxFRiHXpDErskLD1xDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9UX1RGTl9D Ty8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9OT1RfVEZOX0NPL2Fpc1Rsc0ZDMm1jUlVZaDE2UXhLN0pDdzljUS5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu2QwDQYJKoZIhvcNAQEL BQADggEBAF+1MmaN+ezaMJp2uVUaIY8jnfeCHzXzENihzweSZltaPtVwAMLOac/j 3OZYzlNhBeFOF4d5xdZKzMbDuNOLXyrfujEm0VKWYo3mhvs75R+w8gLKPlXAhRf9 pKWIANhJqfXaTaARv97z38pRzgg0EZXMxlQ37NtthJrlXQ7gKSCHKBaPIuHwoSQx ALianY/fDJnEEeQ68DmQ3q0zNnB0K6/dGPtigJ6w1MGskEwbVRppO3h1Pqg63O8R 2mZpqpplce3TDM7gx4ue0t1O5Wh5YBHFQxcBPBedTRo0fE2dV0OmyjSQDHBEpFI3 RavpH4p13uqfSYTICioCXe4GtsGJSUg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:52:42 2025 by rpki-client