$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/5Gdn630R4mIpsWgPaMEPdsUltpU.cer File: 5Gdn630R4mIpsWgPaMEPdsUltpU.cer (raw, json) Hash identifier: fRWU/VnkyoRA/49riP4CpHsa9sUgAdsZSlw0gKGeMog= Subject key identifier: E4:67:67:EB:7D:11:E2:62:29:B1:68:0F:68:C1:0F:76:C5:25:B6:95 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:10 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.18.128.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E46767EB7D11E26229B1680F68C10F76C525B695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:80:a7:81:b5:9c:bf:d6:06:d9:a4:09:66: 2d:68:da:f5:ce:8e:5d:35:d6:50:44:bf:77:af:6c: ec:33:80:e7:a4:71:f3:f7:13:db:b4:f2:a7:82:55: e6:07:aa:92:70:90:b2:8a:74:b8:5e:c3:ef:63:d9: 77:9e:6d:b6:9e:a0:3b:02:9b:a0:54:55:3a:26:f1: 06:7d:2b:7c:ed:94:3f:f7:0a:86:6d:96:26:37:0c: 33:86:e2:6a:ae:b0:c4:b3:fa:37:aa:eb:d0:9d:eb: 07:42:06:bf:2b:7a:3b:32:9b:65:6a:ed:78:ca:4b: d4:bb:75:c7:15:41:0c:e3:b9:0a:94:ef:b9:c5:71: a9:aa:c6:ab:62:12:c4:ca:68:e5:21:10:ba:9b:09: 91:bd:9e:fd:01:ad:2d:66:c9:b9:f7:7c:73:38:a7: 26:9c:a2:9e:f8:00:f8:88:26:bd:4d:9c:c1:93:a8: 2c:58:f7:28:01:b8:19:f3:26:1d:90:fd:f4:92:ef: e9:96:e1:fa:6f:c5:97:96:34:84:e9:81:26:07:33: 37:36:87:ae:19:f7:75:8c:46:73:01:1e:c0:fb:a4: 19:8e:b1:c2:6b:e9:82:7e:6f:77:da:48:50:9d:be: 31:9a:9d:f0:c4:92:f5:e1:14:61:bd:9f:7e:a0:e9: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:67:EB:7D:11:E2:62:29:B1:68:0F:68:C1:0F:76:C5:25:B6:95 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.18.128.0/22 Signature Algorithm: sha256WithRSAEncryption 91:34:cd:7d:7a:28:71:d4:1c:9d:f7:c3:ff:38:3f:1a:ca:d9: 97:d8:40:bb:f4:15:07:76:68:c4:1f:2e:9a:78:56:d0:34:53: 8a:86:e7:a0:5c:21:42:fa:3b:a0:fd:53:3d:20:67:69:b4:2e: 08:ce:af:d2:bf:30:86:bd:ea:fa:24:3e:36:8c:43:bd:ef:cc: ed:ed:64:87:d5:34:43:59:52:71:72:1f:dd:c3:88:a0:f3:53: c7:85:2a:d5:35:d1:82:29:94:78:af:24:50:87:af:32:5a:78: 20:5c:94:e7:13:e6:dd:b0:45:46:b7:7d:25:58:ab:d2:3a:36: 62:fb:cd:31:95:be:f4:7b:fb:74:22:2d:91:e2:ea:69:08:05: a3:f6:72:d9:f2:b5:b4:03:14:08:b4:32:5c:77:33:f7:3a:a7: 9a:1b:72:70:0b:06:08:8b:de:a9:04:60:b6:db:ac:15:bb:34: 74:99:fd:74:d6:7b:77:61:61:12:0e:55:9f:97:28:df:f2:d9: ec:07:b5:98:93:11:ac:34:c8:65:13:22:82:25:a7:ad:29:c9: 38:e1:db:05:d9:4c:71:48:84:a2:4f:ba:d9:dc:c2:18:8d:93: 9b:f8:92:70:31:c7:a7:03:89:d3:12:5e:44:55:82:c3:58:e4: c0:e5:65:00 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxMFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRTQ2NzY3RUI3RDExRTI2MjI5QjE2ODBGNjhDMTBGNzZDNTI1QjY5 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyogKeBtZy/1gbZpAlm LWja9c6OXTXWUES/d69s7DOA56Rx8/cT27Typ4JV5geqknCQsop0uF7D72PZd55t tp6gOwKboFRVOibxBn0rfO2UP/cKhm2WJjcMM4biaq6wxLP6N6rr0J3rB0IGvyt6 OzKbZWrteMpL1Lt1xxVBDOO5CpTvucVxqarGq2ISxMpo5SEQupsJkb2e/QGtLWbJ ufd8czinJpyinvgA+IgmvU2cwZOoLFj3KAG4GfMmHZD99JLv6Zbh+m/Fl5Y0hOmB JgczNzaHrhn3dYxGcwEewPukGY6xwmvpgn5vd9pIUJ2+MZqd8MSS9eEUYb2ffqDp SS8CAwEAAaOCAlIwggJOMB0GA1UdDgQWBBTkZ2frfRHiYimxaA9owQ92xSW2lTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09ER0FNRS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9HT0RHQU1FLzVHZG42MzBSNG1JcHNXZ1BhTUVQZHNVbHRwVS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnEoAwDQYJKoZIhvcNAQELBQADggEB AJE0zX16KHHUHJ33w/84PxrK2ZfYQLv0FQd2aMQfLpp4VtA0U4qG56BcIUL6O6D9 Uz0gZ2m0LgjOr9K/MIa96vokPjaMQ73vzO3tZIfVNENZUnFyH93DiKDzU8eFKtU1 0YIplHivJFCHrzJaeCBclOcT5t2wRUa3fSVYq9I6NmL7zTGVvvR7+3QiLZHi6mkI BaP2ctnytbQDFAi0Mlx3M/c6p5obcnALBgiL3qkEYLbbrBW7NHSZ/XTWe3dhYRIO VZ+XKN/y2ewHtZiTEaw0yGUTIoIlp60pyTjh2wXZTHFIhKJPutncwhiNk5v4knAx x6cDidMSXkRVgsNY5MDlZQA= -----END CERTIFICATE-----Generated at Sat Apr 12 10:45:14 2025 by rpki-client