$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer File: faLLf1lDyKQcDivTDF4fSp-Ew3Q.cer (raw, json) Hash identifier: rNKoUWe2bIS8BRJu/icLEszT7vPRsVY725VGuMX3/+I= Subject key identifier: 7D:A2:CB:7F:59:43:C8:A4:1C:0E:2B:D3:0C:5E:1F:4A:9F:84:C3:74 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 213F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/faLLf1lDyKQcDivTDF4fSp-Ew3Q.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 29 Jan 2026 07:46:16 +0000 Certificate not after: Thu 12 Nov 2026 15:30:20 +0000 Subordinate resources: IP: 138.252.192.0/24 IP: 192.160.29.0/24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8511 (0x213f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Jan 29 07:46:16 2026 GMT Not After : Nov 12 15:30:20 2026 GMT Subject: CN=7DA2CB7F5943C8A41C0E2BD30C5E1F4A9F84C374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:a0:fe:90:c4:27:91:61:85:2f:9f:0a:0b: 58:01:e0:a4:40:98:c8:e2:fe:c7:ad:42:81:e6:b8: 17:11:49:9d:5a:4c:a6:3d:e8:52:21:c4:01:bc:d1: 06:1f:3a:85:09:8e:c4:5b:17:07:a5:c8:83:21:d7: 4e:5e:6e:c5:37:13:85:c2:a9:0e:21:56:60:fe:3a: 99:8d:99:e7:79:9c:ac:02:fe:d1:01:23:b9:d2:f7: 07:6c:aa:6d:88:18:4f:55:54:d7:69:81:0a:b5:9f: 3c:c9:0f:64:ee:23:e3:ec:4d:c4:8f:fa:71:90:85: 49:e6:fb:9f:1f:f7:97:12:45:62:d8:a5:10:50:66: 1f:7e:8e:cd:79:80:b5:78:30:94:7f:79:6e:e0:bf: d9:3f:72:97:de:2b:95:d1:1d:05:71:78:c9:07:98: 9c:c2:f4:42:9e:c4:5d:81:30:37:1d:13:8c:6a:66: a8:48:70:01:0b:43:72:0a:01:a4:6f:9c:93:c4:27: 0b:52:ad:11:4d:ee:14:f0:03:38:e5:bc:64:f7:cf: 16:ee:44:1f:0c:62:e5:02:1a:a1:f1:62:13:ae:93: 91:e8:31:7c:72:39:8f:de:2c:a9:5c:6c:92:db:49: a3:48:7a:b9:ab:06:34:37:25:ed:d3:ac:df:c3:55: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:CB:7F:59:43:C8:A4:1C:0E:2B:D3:0C:5E:1F:4A:9F:84:C3:74 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/faLLf1lDyKQcDivTDF4fSp-Ew3Q.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.192.0/24 192.160.29.0/24 Signature Algorithm: sha256WithRSAEncryption 95:8a:0c:76:fb:bb:ae:43:c5:9f:03:66:e1:77:03:e4:c9:e4: 44:18:37:a9:5a:fe:5e:91:bf:e3:c0:bf:80:47:50:6b:5a:ca: c7:00:c3:e1:15:ef:fb:46:78:61:8a:c0:95:72:ae:76:ce:5e: f2:99:5b:79:25:94:08:ac:1d:28:fd:35:1e:de:4c:db:ba:65: 2c:66:2c:16:cd:93:a7:17:ae:3b:62:f2:15:a5:35:fd:0e:7f: cf:c7:50:03:61:15:9b:3a:33:fb:0d:0a:91:93:36:2f:48:75: af:0c:ae:e4:36:cd:45:b3:5f:d4:f3:f4:90:77:ec:69:84:73: e4:62:cc:fe:a1:1c:0f:01:05:2a:0b:3c:2f:d1:0b:5c:52:78: 94:53:d7:95:82:41:a5:1d:3e:b2:29:d4:12:4e:7e:9f:ca:7e: c6:fa:88:44:c9:1b:2f:73:ab:9d:46:bd:ec:ce:0c:09:b3:74: 2a:5f:c3:ed:19:74:b8:db:c3:74:21:3a:8d:b0:2e:2e:80:8e: 03:d5:22:06:4d:ec:26:23:ce:15:9c:ba:4a:cf:3c:da:a2:78: 54:7f:18:37:c6:ce:58:f4:5d:63:be:d9:5d:bc:61:34:c5:d0: 92:17:91:1e:9f:0f:d3:4b:5e:d0:37:16:3d:d2:89:1a:6d:30: 48:e1:d1:3d -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICIT8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI2MDEyOTA3NDYxNloXDTI2MTExMjE1MzAyMFowMzEx MC8GA1UEAxMoN0RBMkNCN0Y1OTQzQzhBNDFDMEUyQkQzMEM1RTFGNEE5Rjg0QzM3 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMmnoP6QxCeRYYUvnwoL WAHgpECYyOL+x61Cgea4FxFJnVpMpj3oUiHEAbzRBh86hQmOxFsXB6XIgyHXTl5u xTcThcKpDiFWYP46mY2Z53mcrAL+0QEjudL3B2yqbYgYT1VU12mBCrWfPMkPZO4j 4+xNxI/6cZCFSeb7nx/3lxJFYtilEFBmH36OzXmAtXgwlH95buC/2T9yl94rldEd BXF4yQeYnML0Qp7EXYEwNx0TjGpmqEhwAQtDcgoBpG+ck8QnC1KtEU3uFPADOOW8 ZPfPFu5EHwxi5QIaofFiE66TkegxfHI5j94sqVxskttJo0h6uasGNDcl7dOs38NV z6ECAwEAAaOCAlowggJWMB0GA1UdDgQWBBR9ost/WUPIpBwOK9MMXh9Kn4TDdDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR01JQ0xPVUQv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvR01JQ0xPVUQvZmFMTGYxbER5S1FjRGl2VERGNGZTcC1FdzNRLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAIr8wAMEAMCgHTANBgkqhkiG9w0B AQsFAAOCAQEAlYoMdvu7rkPFnwNm4XcD5MnkRBg3qVr+XpG/48C/gEdQa1rKxwDD 4RXv+0Z4YYrAlXKuds5e8plbeSWUCKwdKP01Ht5M27plLGYsFs2TpxeuO2LyFaU1 /Q5/z8dQA2EVmzoz+w0KkZM2L0h1rwyu5DbNRbNf1PP0kHfsaYRz5GLM/qEcDwEF Kgs8L9ELXFJ4lFPXlYJBpR0+sinUEk5+n8p+xvqIRMkbL3OrnUa97M4MCbN0Kl/D 7Rl0uNvDdCE6jbAuLoCOA9UiBk3sJiPOFZy6Ss882qJ4VH8YN8bOWPRdY77ZXbxh NMXQkheRHp8P00te0DcWPdKJGm0wSOHRPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:35:11 2026 by rpki-client