$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/uU530OicbkiYh7m6MhYTTB-VamQ.cer File: uU530OicbkiYh7m6MhYTTB-VamQ.cer (raw, json) Hash identifier: 0eiS9vVNH1evJZWh+x6ch4DxpngWxkWO0Qoc/rn7TaU= Subject key identifier: B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:55 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 38850 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15356 (0x3bfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B94E77D0E89C6E489887B9BA3216134C1F956A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:64:2c:72:d3:7f:ea:a9:a1:76:64:82:2e: 0b:6f:f1:25:c8:2d:7d:a9:ca:5f:6e:f2:e2:e7:9a: 78:bf:63:ba:bb:a9:df:c6:dc:82:73:2e:61:e4:45: e9:89:33:14:87:a5:fa:d8:69:ab:41:90:72:d2:61: d6:77:d6:83:9f:e4:68:ef:11:7c:68:62:2b:0f:91: 68:66:d3:df:d8:bb:0d:81:3a:cc:af:21:23:67:0f: 76:0b:32:63:86:76:b2:d3:0d:d4:20:79:fc:06:2a: 71:08:13:38:dd:b2:12:2d:88:88:0f:85:7d:5d:23: 4d:a5:89:1d:e2:42:d1:7c:57:cb:a8:de:50:3b:bb: c7:14:4f:d2:50:97:63:f8:4a:2b:18:27:3f:b6:58: 86:bf:cb:45:bf:74:63:7d:08:56:bc:27:c6:da:40: b2:34:7e:ac:9d:6f:a6:cb:16:a9:3e:04:af:06:21: 04:b3:48:89:d4:f9:03:23:11:4a:b0:47:9d:4a:03: f6:7f:82:3a:7b:be:02:a2:b4:5a:d2:fa:47:98:cb: 3d:56:0b:59:33:ac:b6:85:b4:b6:3e:ad:a7:68:87: dc:d7:4c:d6:7d:51:3c:ff:0e:ba:74:81:83:55:f1: 36:b0:e6:59:0c:f6:e5:ce:4b:5f:c4:03:fd:cb:72: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38850 Signature Algorithm: sha256WithRSAEncryption 41:96:c5:d0:84:a7:ee:0e:bc:6b:b3:84:00:d0:4a:76:15:e1: ea:41:bb:b8:76:18:6e:43:6e:66:30:e9:47:bc:fa:da:95:3e: 09:ac:12:90:10:b4:20:9e:a8:5c:20:ea:04:c3:39:3a:ff:35: ed:6c:48:be:7b:ff:77:95:69:5d:e4:43:3f:d8:e2:95:a4:d8: 2d:bd:3c:1a:be:e6:63:f2:b7:0c:cd:fb:3a:2e:54:50:d1:2d: 1a:33:76:75:df:6c:1e:32:17:92:a9:94:b1:dd:d1:96:73:44: cc:2a:0f:4f:83:2e:30:b9:53:a2:1f:af:b7:ae:f7:86:cb:93: e5:e2:bc:5f:12:23:90:15:b3:c1:0b:3b:b6:bb:24:30:9b:a3: ae:ea:6f:99:3e:eb:c1:2e:3d:bb:35:78:8f:71:1f:81:4e:17: b0:1b:71:67:16:9e:41:46:23:7b:86:96:88:17:dd:e9:a6:7a: ca:25:62:51:75:05:d5:a9:4d:cd:7d:70:43:0b:9a:a9:a1:f3: 85:13:4f:39:2c:3e:95:2a:12:84:81:98:f1:89:ec:a4:ed:99: 32:24:69:26:e0:63:17:86:3e:c5:10:3a:3f:70:33:d2:a6:c5: 99:c8:b7:a7:de:b6:b3:23:f1:b1:df:b9:9a:6b:53:f5:73:9d: 5a:3c:d7:c6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICO/wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQ1NVoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoQjk0RTc3RDBFODlDNkU0ODk4ODdCOUJBMzIxNjEzNEMxRjk1NkE2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALoQZCxy03/qqaF2ZIIu C2/xJcgtfanKX27y4ueaeL9jurup38bcgnMuYeRF6YkzFIel+thpq0GQctJh1nfW g5/kaO8RfGhiKw+RaGbT39i7DYE6zK8hI2cPdgsyY4Z2stMN1CB5/AYqcQgTON2y Ei2IiA+FfV0jTaWJHeJC0XxXy6jeUDu7xxRP0lCXY/hKKxgnP7ZYhr/LRb90Y30I VrwnxtpAsjR+rJ1vpssWqT4ErwYhBLNIidT5AyMRSrBHnUoD9n+COnu+AqK0WtL6 R5jLPVYLWTOstoW0tj6tp2iH3NdM1n1RPP8OunSBg1XxNrDmWQz25c5LX8QD/cty g+MCAwEAAaOCAkcwggJDMB0GA1UdDgQWBBS5TnfQ6JxuSJiHuboyFhNMH5VqZDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElHQy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9U SUdDL3VVNTMwT2ljYmtpWWg3bTZNaFlUVEItVmFtUS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJfCMA0GCSqGSIb3DQEBCwUAA4IBAQBBlsXQhKfuDrxr s4QA0Ep2FeHqQbu4dhhuQ25mMOlHvPralT4JrBKQELQgnqhcIOoEwzk6/zXtbEi+ e/93lWld5EM/2OKVpNgtvTwavuZj8rcMzfs6LlRQ0S0aM3Z132weMheSqZSx3dGW c0TMKg9Pgy4wuVOiH6+3rveGy5Pl4rxfEiOQFbPBCzu2uyQwm6Ou6m+ZPuvBLj27 NXiPcR+BThewG3FnFp5BRiN7hpaIF93ppnrKJWJRdQXVqU3NfXBDC5qpofOFE085 LD6VKhKEgZjxieyk7ZkyJGkm4GMXhj7FEDo/cDPSpsWZyLen3razI/Gx37maa1P1 c51aPNfG -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:38 2025 by rpki-client