$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer File: -9Osn8RMPdKre10gvBWMgtg9Jgo.cer (raw, json) Hash identifier: Q0lj89xJmrWvWB1LO9Jy2QRrnjlnXFHVh96TAO/uT+w= Subject key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:04 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.130.248.0/22 IP: 2403:c1c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:4b:54:e4:99:10:10:3f:e8:3b:97:ca:3f: fe:bd:f2:04:54:3f:46:f8:f1:91:79:18:62:f8:06: f0:af:ea:df:fb:4f:1f:6f:56:a6:c3:1b:85:e9:6a: e6:ce:08:dc:56:32:2f:5a:cd:3c:d2:19:9e:dc:c6: 3a:1b:ad:e9:f8:e3:22:04:f2:9c:f3:24:52:08:b3: 22:6c:4d:6e:5d:36:bd:92:d6:10:51:6b:17:e9:1c: 16:92:99:4f:ca:c6:70:39:77:21:d9:8a:11:e3:b8: a8:18:b9:da:cf:90:ef:2c:21:ae:26:1e:a6:f5:06: 50:26:b1:1b:ab:24:ed:eb:dc:3c:4a:01:e7:a6:89: 6b:1b:63:2b:a1:32:8e:6f:6b:04:4b:fc:5c:a4:49: 99:48:01:51:f5:7c:89:2e:8b:60:50:fb:2c:78:31: 93:e0:4f:4f:ed:b2:f4:1c:40:1c:a4:e8:19:fa:65: 0c:82:61:dc:07:6b:cf:39:a3:ef:b0:ce:f5:ad:bf: 6d:2a:27:71:f7:f6:f4:98:9b:3e:75:0d:1c:f0:ec: 3d:31:ac:cd:18:d8:88:4d:8b:f5:08:55:59:83:d8: d1:51:14:a7:9a:62:df:54:af:4c:5e:96:e7:0e:d9: d3:47:d8:5e:9b:f5:1c:4c:c7:2e:98:d8:4e:9d:7f: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.248.0/22 IPv6: 2403:c1c0::/32 Signature Algorithm: sha256WithRSAEncryption 61:c4:99:5b:fe:3b:4b:a3:b8:b3:20:0b:74:5d:d9:55:bc:bd: 47:0b:a6:9c:8a:99:2a:35:0e:31:35:c4:81:c1:f3:ea:7f:6c: 89:2c:4f:ec:6f:c1:03:53:e5:de:00:e8:be:2e:03:cf:22:19: d6:14:c4:93:a0:ae:f1:ba:40:dc:dc:02:46:18:31:d0:9f:e1: ae:b8:1f:b2:3a:94:85:31:07:74:90:57:39:1e:1a:6e:49:d6: b1:15:9c:fa:c6:b6:b6:7f:19:9e:9e:a2:12:bb:80:81:21:69: 8a:52:b9:31:e2:25:8d:e9:7e:ab:b1:0e:58:66:d1:62:52:6e: b7:d4:8d:02:58:af:7b:84:16:4c:a7:23:9b:ec:26:88:8a:a9: b2:77:5d:bb:e8:c5:98:36:3c:3d:48:f8:01:d6:35:13:a2:90: 7d:31:b4:9c:a4:c1:23:0d:a5:21:99:fd:b5:c6:04:5f:fe:e8: 7c:dc:9a:0d:3a:84:f4:8c:f4:e8:ad:0e:5d:8e:58:05:6f:81: 09:af:9c:5b:f2:4a:eb:9b:16:cc:63:4f:63:4c:39:fd:70:56: ef:4f:67:33:f0:36:97:6d:79:93:ae:04:f9:33:e6:dd:38:7e: 61:72:2a:8a:05:e1:19:60:2b:ff:92:0a:50:f8:61:0d:9f:47: 7c:c5:9d:cf -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwNFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRkJEM0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0LS1TkmRAQP+g7l8o/ /r3yBFQ/RvjxkXkYYvgG8K/q3/tPH29WpsMbhelq5s4I3FYyL1rNPNIZntzGOhut 6fjjIgTynPMkUgizImxNbl02vZLWEFFrF+kcFpKZT8rGcDl3IdmKEeO4qBi52s+Q 7ywhriYepvUGUCaxG6sk7evcPEoB56aJaxtjK6Eyjm9rBEv8XKRJmUgBUfV8iS6L YFD7LHgxk+BPT+2y9BxAHKToGfplDIJh3Adrzzmj77DO9a2/bSoncff29JibPnUN HPDsPTGszRjYiE2L9QhVWYPY0VEUp5pi31SvTF6W5w7Z00fYXpv1HEzHLpjYTp1/ CMkCAwEAAaOCAlswggJXMB0GA1UdDgQWBBT706yfxEw90qt7XSC8FYyC2D0mCjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9D VElJLy05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJngvgwDQQCAAIwBwMFACQDwcAwDQYJKoZIhvcN AQELBQADggEBAGHEmVv+O0ujuLMgC3Rd2VW8vUcLppyKmSo1DjE1xIHB8+p/bIks T+xvwQNT5d4A6L4uA88iGdYUxJOgrvG6QNzcAkYYMdCf4a64H7I6lIUxB3SQVzke Gm5J1rEVnPrGtrZ/GZ6eohK7gIEhaYpSuTHiJY3pfquxDlhm0WJSbrfUjQJYr3uE FkynI5vsJoiKqbJ3XbvoxZg2PD1I+AHWNROikH0xtJykwSMNpSGZ/bXGBF/+6Hzc mg06hPSM9OitDl2OWAVvgQmvnFvySuubFsxjT2NMOf1wVu9PZzPwNpdteZOuBPkz 5t04fmFyKooF4RlgK/+SClD4YQ2fR3zFnc8= -----END CERTIFICATE-----Generated at Sat Apr 12 14:26:59 2025 by rpki-client