$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer File: BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer (raw, json) Hash identifier: kEl0nn6ABjKKTOUj/MX/g+LAuQctV33rTIXmtAedd78= Subject key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 359B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:15 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 9915 IP: 103.67.160.0/23 IP: 2400:d4a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13723 (0x359b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:0c:d6:b2:98:fb:de:84:fe:ae:b0:f0:55: 2b:15:70:fc:33:4c:06:19:6a:23:1d:d5:95:a6:2a: be:7f:a9:70:0e:d9:08:5f:a6:49:c4:58:80:03:e8: 25:c5:29:a5:31:de:97:33:51:73:30:d9:14:51:15: 37:df:9a:0a:62:6f:f6:d0:50:8b:ef:db:bd:cc:8d: be:90:fe:73:8b:13:06:cb:26:5d:fe:36:69:bf:ca: 40:e8:26:da:57:cc:72:4b:06:86:6f:88:b9:6e:14: 8e:fb:9f:65:da:e7:c1:91:8c:8e:b3:f6:c3:e8:69: 1d:0d:01:b8:72:e8:26:1c:e5:ab:fb:68:6b:aa:6f: e5:f2:7e:bb:a2:06:91:ef:0a:4b:d4:91:2e:6f:1c: 60:8e:3c:9c:1c:f8:b7:dd:0c:74:d1:92:09:1f:18: 95:fe:7c:10:ee:36:72:96:ec:47:8f:92:2d:34:62: 78:dd:cd:0c:a8:25:11:01:1b:66:fd:ed:7b:93:51: f9:b0:84:ab:a9:ad:79:c5:a0:f5:21:bf:35:48:2d: 5d:7d:02:06:99:cc:0a:7d:c7:a5:46:97:f6:f3:e4: e7:70:78:d0:fe:56:8d:e1:0b:34:65:2a:a6:c3:76: f2:88:11:58:fa:e3:fe:3d:87:71:6f:b9:54:e5:ce: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9915 sbgp-ipAddrBlock: critical IPv4: 103.67.160.0/23 IPv6: 2400:d4a0::/32 Signature Algorithm: sha256WithRSAEncryption 53:73:9a:d0:78:7e:75:6c:fc:7e:4e:ba:70:21:c6:dd:4b:a6: 75:a2:1a:6f:72:66:64:30:b4:64:1f:ed:d2:fe:b7:e6:61:a3: 8f:3f:d7:af:41:22:f9:e1:db:d5:2d:f0:f8:11:2e:a2:0e:3d: 31:ed:b2:e1:46:55:70:15:92:57:49:6d:4d:27:bd:4c:64:39: 0c:e1:a1:ff:e0:97:8f:51:64:09:1b:79:1a:dd:57:b8:4b:4d: 12:b8:10:86:25:88:52:02:c8:6e:bd:de:29:0d:16:a2:31:c1: d5:29:96:fc:9a:6e:c6:29:b6:cc:44:14:8a:80:64:72:c3:ec: dc:5f:5e:8a:d0:24:51:68:64:05:98:a6:d0:ff:c8:cf:14:89: 70:a2:dd:1b:d3:df:c8:56:59:6e:b8:34:c1:02:83:93:1f:90: b0:51:a9:cf:d7:b1:0c:41:65:87:08:56:6d:5b:5b:32:1d:b8: 5a:8e:f5:f8:af:4c:04:b8:3a:e0:7c:a5:bc:3b:02:f6:b4:9e: 37:99:7d:d3:e3:56:09:90:c4:28:d5:72:00:85:a7:64:ff:f6: 2c:d9:0c:0b:6a:b4:f7:1a:31:77:b3:b2:ca:88:3d:b6:64:47: ef:df:ba:92:4f:3b:7c:83:71:8f:f8:78:8b:fc:5b:8f:9e:9a: ad:eb:7c:be -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICNZswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxNVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDQ4NkYxRDUxMUQyQzIyRUM5NTk5NEIxMjNCM0EyNDk2MkMxRTMy NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANN9DNaymPvehP6usPBV KxVw/DNMBhlqIx3VlaYqvn+pcA7ZCF+mScRYgAPoJcUppTHelzNRczDZFFEVN9+a CmJv9tBQi+/bvcyNvpD+c4sTBssmXf42ab/KQOgm2lfMcksGhm+IuW4UjvufZdrn wZGMjrP2w+hpHQ0BuHLoJhzlq/toa6pv5fJ+u6IGke8KS9SRLm8cYI48nBz4t90M dNGSCR8Ylf58EO42cpbsR4+SLTRieN3NDKglEQEbZv3te5NR+bCEq6mtecWg9SG/ NUgtXX0CBpnMCn3HpUaX9vPk53B40P5WjeELNGUqpsN28ogRWPrj/j2HcW+5VOXO Ht0CAwEAAaOCAnowggJ2MB0GA1UdDgQWBBQEhvHVEdLCLslZlLEjs6JJYsHjJzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9OLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0xFRU1PTi9CSWJ4MVJIU3dpN0pXWlN4STdPaVNXTEI0eWMubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAia7MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAG AwQBZ0OgMA0EAgACMAcDBQAkANSgMA0GCSqGSIb3DQEBCwUAA4IBAQBTc5rQeH51 bPx+TrpwIcbdS6Z1ohpvcmZkMLRkH+3S/rfmYaOPP9evQSL54dvVLfD4ES6iDj0x 7bLhRlVwFZJXSW1NJ71MZDkM4aH/4JePUWQJG3ka3Ve4S00SuBCGJYhSAshuvd4p DRaiMcHVKZb8mm7GKbbMRBSKgGRyw+zcX16K0CRRaGQFmKbQ/8jPFIlwot0b09/I VlluuDTBAoOTH5CwUanP17EMQWWHCFZtW1syHbhajvX4r0wEuDrgfKW8OwL2tJ43 mX3T41YJkMQo1XIAhadk//Ys2QwLarT3GjF3s7LKiD22ZEfv37qSTzt8g3GP+HiL /FuPnpqt63y+ -----END CERTIFICATE-----Generated at Sat Apr 12 14:26:59 2025 by rpki-client