$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer File: 8M4QvXwrOaA6cMMCuisIZSwIB9I.cer (raw, json) Hash identifier: FNnR0gdpJGGaHfNFb7MZXdzKG/Aj4fKNI4tkjvxkWdE= Subject key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:21 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 131588 IP: 103.229.132.0/22 IP: 2400:e480::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13863 (0x3627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:00:2a:e3:e6:ea:d7:49:9a:ac:17:ae:e6: 13:31:c6:dc:26:b5:8b:05:be:e3:5a:86:47:68:4b: e3:75:60:f7:11:5d:a8:91:df:cb:d6:14:32:4a:91: 5e:35:c0:3c:6a:81:90:c9:21:11:8e:b1:08:63:9f: 3f:ce:97:89:8d:2b:3c:e9:db:51:19:ef:f5:d3:61: 1e:04:59:98:7f:01:4a:ff:b6:46:47:45:e7:5d:8d: d3:28:4c:e7:a2:f4:10:cb:dd:88:7c:72:6b:f1:16: 63:5a:98:13:e2:cf:d6:f0:38:d8:7d:9b:1c:c9:b0: dc:33:34:c1:5f:e0:84:2a:a8:fc:26:79:03:5e:dd: fe:18:8f:31:ef:9d:36:88:ca:31:5b:91:d0:84:bd: 70:d6:43:76:ad:46:52:de:e0:36:18:a5:ea:89:ca: 97:a9:cb:76:34:4f:49:2a:92:0b:e5:53:2c:2f:83: 2f:52:ad:3a:49:94:db:8f:52:fa:0d:af:bc:dc:4a: 22:32:cf:c1:df:4c:e7:f9:cc:4d:97:3f:a2:82:1b: b5:c9:a3:2d:6b:6c:20:f1:f9:d0:77:8f:2f:4a:f3: f5:a6:6d:7b:af:f7:11:bd:f4:27:ad:06:98:09:fd: 81:5d:26:b2:a4:fd:7d:c6:cf:95:c8:d4:84:ef:23: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131588 sbgp-ipAddrBlock: critical IPv4: 103.229.132.0/22 IPv6: 2400:e480::/32 Signature Algorithm: sha256WithRSAEncryption 16:cb:88:4c:08:52:a3:ba:99:65:6f:ea:3e:2c:6d:be:4c:59: 9e:09:0d:13:aa:a2:58:90:2a:9a:79:30:a2:1e:8c:90:39:a0: 86:cb:00:24:cd:96:17:4e:3c:81:92:06:e0:6e:18:43:af:0f: dc:93:c9:fc:79:94:b7:bc:c6:47:be:b8:e9:da:48:19:96:48: 84:d3:59:e2:78:7a:c0:78:44:22:c9:53:76:db:41:2b:0a:2f: bb:2a:70:b4:8b:2a:7c:c8:ea:1e:ee:39:8e:22:e3:ba:05:b3: 7a:fa:5c:c4:cb:5e:61:db:76:5b:69:3d:a3:73:08:e6:5d:cd: cf:44:de:75:6e:d8:ae:c6:e6:4a:4b:2b:55:bb:8e:d6:0b:88: 32:18:20:ac:77:c2:20:33:38:58:08:b3:a3:c3:e2:59:88:f5: 6c:8f:e6:fc:82:57:0d:00:00:33:7d:b4:77:7c:8d:20:cc:75: 92:fb:63:32:18:a3:a6:42:c7:2b:45:2e:03:73:71:8a:b6:74: 86:94:19:88:62:bc:eb:16:88:2c:92:6f:6c:22:d8:fb:2b:7b: 35:38:95:54:78:44:34:af:4a:82:da:1d:b6:59:e2:cb:f9:c0: 37:4a:b5:1f:03:22:95:50:19:26:39:c8:eb:82:13:ef:e1:5b: 0d:2c:82:a8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICNicwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkyMVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRjBDRTEwQkQ3QzJCMzlBMDNBNzBDMzAyQkEyQjA4NjUyQzA4MDdE MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMdWACrj5urXSZqsF67m EzHG3Ca1iwW+41qGR2hL43Vg9xFdqJHfy9YUMkqRXjXAPGqBkMkhEY6xCGOfP86X iY0rPOnbURnv9dNhHgRZmH8BSv+2RkdF512N0yhM56L0EMvdiHxya/EWY1qYE+LP 1vA42H2bHMmw3DM0wV/ghCqo/CZ5A17d/hiPMe+dNojKMVuR0IS9cNZDdq1GUt7g Nhil6onKl6nLdjRPSSqSC+VTLC+DL1KtOkmU249S+g2vvNxKIjLPwd9M5/nMTZc/ ooIbtcmjLWtsIPH50HePL0rz9aZte6/3Eb30J60GmAn9gV0msqT9fcbPlcjUhO8j 4xkCAwEAAaOCAncwggJzMB0GA1UdDgQWBBTwzhC9fCs5oDpwwwK6KwhlLAgH0jAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRklTQy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9G SVNDLzhNNFF2WHdyT2FBNmNNTUN1aXNJWlN3SUI5SS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAgIEMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC Z+WEMA0EAgACMAcDBQAkAOSAMA0GCSqGSIb3DQEBCwUAA4IBAQAWy4hMCFKjupll b+o+LG2+TFmeCQ0TqqJYkCqaeTCiHoyQOaCGywAkzZYXTjyBkgbgbhhDrw/ck8n8 eZS3vMZHvrjp2kgZlkiE01nieHrAeEQiyVN220ErCi+7KnC0iyp8yOoe7jmOIuO6 BbN6+lzEy15h23ZbaT2jcwjmXc3PRN51btiuxuZKSytVu47WC4gyGCCsd8IgMzhY CLOjw+JZiPVsj+b8glcNAAAzfbR3fI0gzHWS+2MyGKOmQscrRS4Dc3GKtnSGlBmI YrzrFogskm9sItj7K3s1OJVUeEQ0r0qC2h22WeLL+cA3SrUfAyKVUBkmOcjrghPv 4VsNLIKo -----END CERTIFICATE-----Generated at Sat Apr 12 10:46:39 2025 by rpki-client