$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer File: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (raw, json) Hash identifier: ua3+RhPo3thsg3YE3LsOBPMFRxbU2eL1WCrxV/a0VIE= Subject key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1D95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:37 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 160.25.104.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7573 (0x1d95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 22 08:14:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:09:61:de:c2:c3:69:3b:42:f8:25:48:a7: 2f:35:12:b3:ea:fd:b6:2d:f6:35:75:49:93:6b:dd: 73:75:a9:48:35:28:de:5f:7d:62:bc:df:4d:54:e5: e9:7b:74:e6:06:c0:1c:52:27:a5:d9:de:7b:9f:4e: 80:68:40:c9:0b:1c:0e:c8:cb:69:a0:21:20:fb:ff: 58:99:b8:dc:a7:1a:97:70:0a:85:0d:14:51:94:6e: 80:3a:9c:d2:0d:c1:ee:2e:02:bf:b6:1b:87:6d:63: 21:7a:ec:09:96:bf:c1:e4:79:8d:53:27:d3:a9:3c: 11:95:6c:a1:08:9f:05:cd:ce:90:6c:cf:c6:db:5b: 09:a0:84:4e:fb:55:1e:0d:aa:b9:40:45:00:7c:be: 80:a0:cd:5b:86:64:98:6d:c2:3c:6d:55:9f:b0:b6: 60:39:86:33:d0:4f:75:0c:0c:f6:21:c4:11:6f:35: 5b:ec:a7:cb:11:11:a6:93:7e:9a:5a:75:4c:71:dc: e1:4a:f1:9c:5f:88:dd:d9:4a:fa:c9:a2:a5:b1:b0: 1b:56:b5:81:7b:61:ea:54:88:d1:35:f9:53:42:fd: 96:db:f9:89:25:77:c1:ea:ee:c3:e8:84:77:fc:09: 4e:b3:c2:12:70:9c:0e:60:0b:f2:4c:c9:c9:06:fd: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:46:3a:31:4c:6e:a2:1a:de:77:ae:80:24:02:9f:25:bf:88: 41:ac:da:24:f6:e4:61:3f:0a:34:8e:e1:8d:fa:51:bf:72:71: 47:36:3d:8c:e5:1a:f9:9c:8c:26:dc:a7:a0:ae:6f:a0:76:3e: 54:a2:1c:55:a9:03:8d:77:00:8b:67:84:eb:49:30:27:13:99: 32:52:9b:38:15:2b:26:a7:8d:aa:2f:75:25:9d:26:46:ac:6c: d9:1f:45:64:09:ca:c7:77:c4:b0:2a:f4:2b:f8:05:03:e2:ac: 19:b6:e8:6e:f1:34:b5:c1:53:59:6d:a9:5c:07:49:8e:46:f4: ae:64:10:a5:bc:dd:a5:56:75:25:b7:84:2e:15:52:bf:39:ee: 45:2a:24:55:37:0f:05:ac:bc:d3:1b:7b:e5:68:a7:b4:82:fa: ae:8c:ec:f1:05:9b:3c:bf:f6:28:27:24:83:2d:62:6b:8b:35: bd:40:73:f1:e9:5a:68:1f:71:7c:d0:69:2a:23:2e:bd:4d:93: e1:15:0a:d0:29:0e:26:8b:14:a9:82:a3:77:00:69:2c:eb:ea: 8e:d9:bb:0b:b2:e9:9f:72:45:18:03:c1:de:e5:6b:61:e8:75: d2:36:cf:22:84:28:e2:ad:a2:cb:4f:96:d9:a3:3b:01:92:aa: 49:db:ca:e2 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICHZUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDgyMjA4MTQzN1oXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoN0U5Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOPyCWHewsNpO0L4JUin LzUSs+r9ti32NXVJk2vdc3WpSDUo3l99YrzfTVTl6Xt05gbAHFInpdnee59OgGhA yQscDsjLaaAhIPv/WJm43Kcal3AKhQ0UUZRugDqc0g3B7i4Cv7Ybh21jIXrsCZa/ weR5jVMn06k8EZVsoQifBc3OkGzPxttbCaCETvtVHg2quUBFAHy+gKDNW4ZkmG3C PG1Vn7C2YDmGM9BPdQwM9iHEEW81W+ynyxERppN+mlp1THHc4UrxnF+I3dlK+smi pbGwG1a1gXth6lSI0TX5U0L9ltv5iSV3weruw+iEd/wJTrPCEnCcDmAL8kzJyQb9 vl8CAwEAAaOCAlIwggJOMB0GA1UdDgQWBBR+nO8nyN7RNQazOZ2ZLs/2JrV5UTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVDSC8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9DQ0VURUNIL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgGWgwDQYJKoZIhvcNAQELBQADggEB AA1GOjFMbqIa3neugCQCnyW/iEGs2iT25GE/CjSO4Y36Ub9ycUc2PYzlGvmcjCbc p6Cub6B2PlSiHFWpA413AItnhOtJMCcTmTJSmzgVKyanjaovdSWdJkasbNkfRWQJ ysd3xLAq9Cv4BQPirBm26G7xNLXBU1ltqVwHSY5G9K5kEKW83aVWdSW3hC4VUr85 7kUqJFU3DwWsvNMbe+Vop7SC+q6M7PEFmzy/9ignJIMtYmuLNb1Ac/HpWmgfcXzQ aSojLr1Nk+EVCtApDiaLFKmCo3cAaSzr6o7Zuwuy6Z9yRRgDwd7la2HoddI2zyKE KOKtostPltmjOwGSqknbyuI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:10 2025 by rpki-client