$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer File: m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer (raw, json) Hash identifier: eNqOEtlpRlqCk4NbIGiZa4x1QEkP4SCKyZnxkvIijsE= Subject key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3EE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 30 Oct 2025 07:48:49 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: IP: 103.51.88.0/23 IP: 103.196.172.0/23 IP: 2400:c9a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16103 (0x3ee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Oct 30 07:48:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:a2:30:65:ba:2b:87:3f:31:a2:cf:00:00: 74:1b:a5:c0:47:45:e7:9b:12:54:0e:80:71:75:8d: c2:6d:cc:25:d4:db:66:ca:27:4f:0a:82:9a:62:ca: b1:f7:a4:4d:f1:2d:82:21:50:d7:7e:13:e3:44:0f: 55:d0:b2:ae:bc:64:f8:03:07:49:36:a9:58:60:2f: 43:4a:72:3a:e0:3f:ea:e0:26:0b:ec:04:84:e9:62: 5e:cb:52:16:6b:99:83:98:9a:73:68:4f:fa:18:c5: 3a:f5:de:fd:86:04:fa:11:aa:76:70:a0:05:f2:a7: c4:f3:bb:e8:61:00:5d:05:3b:2b:fe:a6:24:bd:11: 65:60:25:68:16:4d:14:47:18:03:43:82:4a:42:aa: c4:6f:b3:78:bd:78:c7:42:9b:db:09:39:4e:02:cb: ca:7a:4c:85:07:64:b8:64:63:b0:21:88:52:98:b7: 51:cd:25:fe:ab:c8:73:63:4d:c8:bd:d9:4f:60:3f: 91:3e:fb:d4:64:4e:bd:e3:05:e0:a7:65:f6:da:1d: 18:28:b0:82:47:3d:02:41:c4:8a:d1:63:df:c6:b6: 0d:69:43:f1:bb:93:a4:0e:77:48:3a:6d:2b:f8:3d: 8c:11:53:b3:77:fe:3e:19:07:d1:dd:41:1c:91:41: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.51.88.0/23 103.196.172.0/23 IPv6: 2400:c9a0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:5b:54:c5:cf:57:09:65:59:b4:50:31:f0:f9:87:d3:ff:9e: 48:76:b1:cd:88:f5:5b:dc:cb:3e:2c:29:a6:4a:19:fb:47:cb: 84:7b:c8:2c:33:93:93:b7:50:21:d7:ee:45:2e:5b:c1:0d:1c: ed:a1:35:5f:c7:ac:89:2c:af:12:1c:14:22:7b:7a:74:53:58: 09:50:ac:58:f2:00:77:bd:99:71:86:37:23:b0:32:c0:01:e3: db:10:64:05:e0:c4:be:06:18:c9:db:bb:7a:a5:13:cb:70:83: 70:a8:a4:01:ca:eb:dd:e8:fe:a6:36:62:04:37:55:55:8d:82: 9c:95:9a:51:b7:6b:0b:17:57:d6:7c:44:69:39:dd:0f:ef:32: bc:94:c0:38:a4:53:ba:e3:8b:37:1a:c4:2a:91:15:30:93:c4: b6:3c:58:16:9f:7e:d7:e9:b5:90:17:d5:2f:e7:b5:02:5c:49: 88:7c:f0:b2:23:f7:81:87:65:43:95:79:02:5b:fa:9d:a7:35: 91:49:bd:71:a8:a7:c9:81:c7:4d:a6:ac:58:15:7a:aa:40:38: 09:41:c3:fc:17:c4:03:b9:f0:9d:72:3a:32:e5:a0:e0:8a:d7: 03:23:83:48:bd:42:ec:d2:3b:4d:6c:5a:95:76:30:a6:e1:3a: 58:4e:9b:cc -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICPucwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MTAzMDA3NDg0OVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoOUJGQ0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJE MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKTNojBluiuHPzGizwAA dBulwEdF55sSVA6AcXWNwm3MJdTbZsonTwqCmmLKsfekTfEtgiFQ134T40QPVdCy rrxk+AMHSTapWGAvQ0pyOuA/6uAmC+wEhOliXstSFmuZg5iac2hP+hjFOvXe/YYE +hGqdnCgBfKnxPO76GEAXQU7K/6mJL0RZWAlaBZNFEcYA0OCSkKqxG+zeL14x0Kb 2wk5TgLLynpMhQdkuGRjsCGIUpi3Uc0l/qvIc2NNyL3ZT2A/kT771GROveMF4Kdl 9todGCiwgkc9AkHEitFj38a2DWlD8buTpA53SDptK/g9jBFTs3f+PhkH0d1BHJFB xcsCAwEAAaOCAm0wggJpMB0GA1UdDgQWBBSb/PqiEGdCssCZ4/TCpQQo5c1i0zAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERSSVZF Ti8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9URUNIRFJJVkVOL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAFnM1gDBAFnxKwwDQQCAAIw BwMFACQAyaAwDQYJKoZIhvcNAQELBQADggEBAH5bVMXPVwllWbRQMfD5h9P/nkh2 sc2I9Vvcyz4sKaZKGftHy4R7yCwzk5O3UCHX7kUuW8ENHO2hNV/HrIksrxIcFCJ7 enRTWAlQrFjyAHe9mXGGNyOwMsAB49sQZAXgxL4GGMnbu3qlE8twg3CopAHK693o /qY2YgQ3VVWNgpyVmlG3awsXV9Z8RGk53Q/vMryUwDikU7rjizcaxCqRFTCTxLY8 WBafftfptZAX1S/ntQJcSYh88LIj94GHZUOVeQJb+p2nNZFJvXGop8mBx02mrFgV eqpAOAlBw/wXxAO58J1yOjLloOCK1wMjg0i9QuzSO01sWpV2MKbhOlhOm8w= -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:06 2025 by rpki-client