$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer File: BA2WgwOzZPdyp1NXgiDTU34WFm4.cer (raw, json) Hash identifier: FYOam+p/A0NEbbDz8kjEW+aZ6Hu+i/jYZQLH0n/bHyA= Subject key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:25 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.175.254.0/23 IP: 2400:1e20::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13969 (0x3691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=040D968303B364F772A753578220D3537E16166E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:0c:d8:4a:49:9f:ff:f1:9f:9f:99:54:1d: 99:26:33:4f:2c:bd:1d:df:07:9b:d5:b2:1b:b7:8e: 4f:fb:30:66:41:f5:44:ca:55:9b:93:76:e9:09:8d: 31:46:33:73:ad:84:b2:c8:bc:0d:8d:25:c0:12:46: f7:f7:91:50:b8:e7:e7:e5:0c:31:b0:6b:14:7b:07: 9c:12:f8:2d:22:99:81:2a:5c:7a:55:e6:f1:bf:cd: cc:4a:75:d9:bb:ae:f4:90:41:21:0b:d2:b4:0c:99: 10:cd:6e:fa:f2:38:65:35:80:5f:79:45:22:00:7b: 0f:22:e5:03:af:86:ed:7b:97:27:3d:97:b0:da:c7: 30:82:0b:90:23:a5:82:3b:25:b9:b4:1b:f9:eb:60: 26:22:e7:10:c5:5f:fb:69:dd:e1:0b:e5:73:09:bf: 67:c4:db:50:97:d6:ed:28:19:73:bb:a0:1a:b1:70: cf:81:a3:c0:f5:6e:80:cc:fb:18:bf:67:de:64:c4: fa:7a:8a:f7:4d:6f:ab:ad:91:a0:dd:b3:b0:ad:0b: f0:95:1c:8d:ec:22:1d:d7:df:4c:6b:ce:d6:b1:d5: 62:4d:75:b7:6f:4e:1c:15:4e:22:f9:77:de:78:88: 49:34:a5:4a:89:c0:f3:a1:7a:c7:ec:90:2b:62:74: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.175.254.0/23 IPv6: 2400:1e20::/32 Signature Algorithm: sha256WithRSAEncryption 38:9c:ed:af:71:1c:4b:5c:8e:09:9a:eb:5d:de:5f:66:ce:d0: 3d:3a:aa:9b:83:0e:e8:21:55:73:e4:ff:06:78:77:ef:28:2d: 95:ec:52:9e:2c:f6:c7:79:c0:e6:ba:3e:06:68:23:a1:bd:83: 1f:eb:f6:22:36:4f:a6:8c:41:04:35:92:d7:ed:d4:af:fe:b4: 76:52:58:03:f0:bc:d3:06:9e:39:c9:78:5f:3c:b6:f3:5c:f8: 19:1b:23:fa:28:df:4c:e2:76:f6:34:2f:29:7a:d6:4f:a0:76: ec:4b:c1:25:d2:08:2c:eb:a4:b3:1d:46:f4:fb:33:25:f9:c2: fe:89:b6:d0:bc:18:c7:7f:92:c8:37:10:ab:a6:b8:4f:01:7c: d6:61:e7:2b:ae:20:9d:ce:6a:ee:93:b0:e1:61:a3:7c:69:f7: f8:57:2e:c5:92:bb:6d:fe:d3:46:16:64:68:52:e0:0d:e5:da: 78:25:c5:33:6e:b0:03:87:84:3c:5d:16:a3:55:85:5e:91:35: b3:9d:45:b3:9a:56:22:a0:86:80:6b:59:a1:9d:d2:68:2b:30: 10:aa:05:83:06:77:9b:55:a7:15:04:55:09:56:27:bd:c8:9a: 85:d9:b7:37:b3:74:4a:24:58:4d:36:e7:73:2a:3d:69:81:6f: 34:a9:87:96 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICNpEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkyNVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDQwRDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAONMDNhKSZ//8Z+fmVQd mSYzTyy9Hd8Hm9WyG7eOT/swZkH1RMpVm5N26QmNMUYzc62Essi8DY0lwBJG9/eR ULjn5+UMMbBrFHsHnBL4LSKZgSpcelXm8b/NzEp12buu9JBBIQvStAyZEM1u+vI4 ZTWAX3lFIgB7DyLlA6+G7XuXJz2XsNrHMIILkCOlgjslubQb+etgJiLnEMVf+2nd 4Qvlcwm/Z8TbUJfW7SgZc7ugGrFwz4GjwPVugMz7GL9n3mTE+nqK901vq62RoN2z sK0L8JUcjewiHdffTGvO1rHVYk11t29OHBVOIvl33niISTSlSonA86F6x+yQK2J0 dSUCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQEDZaDA7Nk93KnU1eCINNTfhYWbjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSUFOR1lVL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnr/4wDQQCAAIwBwMFACQAHiAwDQYJ KoZIhvcNAQELBQADggEBADic7a9xHEtcjgma613eX2bO0D06qpuDDughVXPk/wZ4 d+8oLZXsUp4s9sd5wOa6PgZoI6G9gx/r9iI2T6aMQQQ1ktft1K/+tHZSWAPwvNMG njnJeF88tvNc+BkbI/oo30zidvY0Lyl61k+gduxLwSXSCCzrpLMdRvT7MyX5wv6J ttC8GMd/ksg3EKumuE8BfNZh5yuuIJ3Oau6TsOFho3xp9/hXLsWSu23+00YWZGhS 4A3l2nglxTNusAOHhDxdFqNVhV6RNbOdRbOaViKghoBrWaGd0mgrMBCqBYMGd5tV pxUEVQlWJ73ImoXZtzezdEokWE0253MqPWmBbzSph5Y= -----END CERTIFICATE-----Generated at Sat Apr 12 14:26:58 2025 by rpki-client