$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer File: 5f38rnFoBdOTzrEk62PtHC37t3w.cer (raw, json) Hash identifier: +lVhHSVhedUNVtbYkNZyu0k9n8w6djdSzhKgXdE37M0= Subject key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:09 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 2001:4508::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13589 (0x3515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:5a:41:94:28:84:ac:db:8b:b2:9f:16:10: ea:bb:7d:47:94:6b:97:49:20:0e:00:ab:33:f7:21: 27:af:5a:49:f3:fe:dc:d4:9c:50:00:21:78:5e:52: 62:63:25:42:47:ce:8d:8c:5f:f1:8d:07:29:a5:7c: 52:a2:c1:36:c9:f0:38:05:46:2d:e3:a4:bc:c3:56: ae:55:a7:c9:4c:5a:25:92:2d:87:51:ae:5b:48:2e: e3:81:c9:d5:67:0e:6f:55:b3:1c:92:1e:c3:86:77: 3f:37:e4:9c:e1:63:00:6f:46:e5:a0:12:20:8c:2f: 1b:9d:0e:8c:62:13:c4:5b:7f:58:ec:47:ec:85:c9: 90:2f:c9:f9:76:4b:b5:62:e1:d3:6a:8c:12:21:61: 9a:8a:03:78:34:55:3f:82:46:9c:49:bd:92:38:91: a4:96:59:88:c1:b2:be:5a:45:ba:0c:7c:b0:f9:a8: 21:54:0b:5f:0e:c4:64:6c:a9:0e:ff:8a:c0:70:55: f9:63:db:99:7c:ea:ec:49:f0:ce:c7:4f:c1:b3:f5: 3e:6b:12:8b:6a:4a:5d:21:4d:92:b5:34:5b:ec:ce: d3:d5:60:dc:73:de:08:0d:49:15:19:d7:59:75:d3: fd:76:3b:9f:b9:49:8d:28:c8:a4:b7:46:b4:a1:38: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4508::/32 Signature Algorithm: sha256WithRSAEncryption 65:07:6c:4c:5c:a1:b4:68:bb:b2:8d:4c:81:af:5c:47:92:b4: e0:87:8f:11:b9:21:c7:5a:97:05:62:f4:c9:bd:8d:bc:ac:17: 84:7c:14:02:26:a2:c2:7c:1e:8e:6c:b0:5e:71:b6:ca:b6:58: f7:10:33:22:0e:ba:ea:df:13:f5:f6:62:6f:df:06:9f:00:c7: bc:cd:19:eb:2d:cc:52:85:29:47:e7:10:dd:80:d4:85:72:2e: ed:aa:36:6e:42:18:e0:90:37:89:bb:b4:c2:36:f7:28:b0:e7: a2:65:dc:c4:99:b4:41:a9:95:b4:5b:7d:1a:e1:3c:1e:94:27: 61:3e:39:82:71:a9:c7:04:bf:4b:4e:d7:97:ec:00:25:0c:c8: b1:7e:14:6c:04:a1:6f:13:61:3d:57:39:51:47:c8:d9:1b:05: 23:35:92:30:9b:83:ec:1d:17:8b:6e:68:b2:67:e2:bc:6d:5e: 70:df:ac:a2:3c:3b:39:a4:a5:ce:ec:4d:78:cc:58:df:c6:c3: 48:8e:df:7a:57:dd:c9:49:3c:23:7f:ca:92:63:6c:c8:84:74: 38:35:c5:15:1f:5b:8f:06:6a:b2:22:09:13:95:a8:60:18:37: d0:5c:43:07:72:f2:9c:66:a4:6c:4d:a8:81:cb:3d:57:a4:77: c3:6a:aa:5c -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNRUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwOVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRTVGREZDQUU3MTY4MDVEMzkzQ0VCMTI0RUI2M0VEMUMyREZCQjc3 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYDWkGUKISs24uynxYQ 6rt9R5Rrl0kgDgCrM/chJ69aSfP+3NScUAAheF5SYmMlQkfOjYxf8Y0HKaV8UqLB NsnwOAVGLeOkvMNWrlWnyUxaJZIth1GuW0gu44HJ1WcOb1WzHJIew4Z3PzfknOFj AG9G5aASIIwvG50OjGITxFt/WOxH7IXJkC/J+XZLtWLh02qMEiFhmooDeDRVP4JG nEm9kjiRpJZZiMGyvlpFugx8sPmoIVQLXw7EZGypDv+KwHBV+WPbmXzq7EnwzsdP wbP1PmsSi2pKXSFNkrU0W+zO09Vg3HPeCA1JFRnXWXXT/XY7n7lJjSjIpLdGtKE4 LPECAwEAAaOCAk8wggJLMB0GA1UdDgQWBBTl/fyucWgF05POsSTrY+0cLfu3fDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQVUvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QVNJQVUvNWYzOHJuRm9CZE9UenJFazYyUHRIQzM3dDN3Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACABRQgwDQYJKoZIhvcNAQELBQADggEBAGUH bExcobRou7KNTIGvXEeStOCHjxG5IcdalwVi9Mm9jbysF4R8FAImosJ8Ho5ssF5x tsq2WPcQMyIOuurfE/X2Ym/fBp8Ax7zNGestzFKFKUfnEN2A1IVyLu2qNm5CGOCQ N4m7tMI29yiw56Jl3MSZtEGplbRbfRrhPB6UJ2E+OYJxqccEv0tO15fsACUMyLF+ FGwEoW8TYT1XOVFHyNkbBSM1kjCbg+wdF4tuaLJn4rxtXnDfrKI8Ozmkpc7sTXjM WN/Gw0iO33pX3clJPCN/ypJjbMiEdDg1xRUfW48GarIiCROVqGAYN9BcQwdy8pxm pGxNqIHLPVekd8Nqqlw= -----END CERTIFICATE-----Generated at Sat Apr 12 14:29:21 2025 by rpki-client