$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer File: EUZfw0oIeBMpxIgj9JEEdltcMzs.cer (raw, json) Hash identifier: uVtmZX9OpYQEXn0Ubw86bGpZyeAbuVBwc590xJ9RotA= Subject key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 344B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:01 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 17718 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13387 (0x344b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=11465FC34A08781329C48823F49104765B5C333B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:af:f4:7a:f3:28:bd:f4:90:1c:c9:fc:4f: 69:5b:64:b6:35:0f:72:bd:71:13:51:b7:96:12:bc: c5:a3:ff:8c:5d:0a:38:b2:da:37:8f:c2:db:b0:b9: 45:b1:c4:f2:2f:3b:0d:1d:6a:8d:d6:25:73:de:9b: 48:08:58:69:5d:5d:37:11:db:f3:50:97:9f:2c:7a: 76:5e:be:11:f1:18:e6:c0:eb:14:4a:71:1d:6d:aa: 4b:84:04:43:9e:00:48:ea:cd:00:21:9d:22:4d:d1: 6d:83:af:89:14:7a:01:f0:69:95:c3:86:ee:9b:75: c5:e3:fd:9a:73:d4:49:39:97:40:94:0f:2b:1d:fc: 0e:85:95:ac:5e:99:7c:a1:3e:db:9c:11:10:2e:05: 4f:47:4d:af:52:5a:49:e8:dd:d0:10:e9:86:ff:1e: fd:e5:c9:e5:e4:68:1f:cd:6e:81:fe:c5:24:74:5c: 29:2e:35:93:70:5f:c9:74:c0:98:67:af:c7:e4:d2: 8d:90:00:87:9f:72:82:b9:85:63:6f:36:3f:2a:30: 05:19:7c:3b:10:26:8f:8e:fa:e2:92:98:68:60:90: b6:f1:14:ae:ad:47:07:66:f4:e6:c7:35:d4:e1:d8: f2:be:55:a3:19:c3:d5:a3:61:1b:c2:25:2f:fe:0a: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17718 Signature Algorithm: sha256WithRSAEncryption 97:14:ca:0e:a4:d1:34:79:68:ae:29:9d:5b:4b:59:d4:cc:55: 17:1d:0e:97:16:09:b0:86:f1:25:bf:5f:49:8d:80:66:ba:1b: 2d:7b:72:92:cd:9e:ca:08:08:05:3d:2b:32:d9:f3:f1:95:d8: 21:d6:d4:87:5b:8e:d7:a6:bb:17:e2:92:64:bf:9d:c1:c7:5f: ca:53:85:2b:59:a2:64:71:59:9b:b0:06:3b:eb:cb:c8:6e:4a: 99:9f:2b:ff:d5:56:29:1a:5c:da:f5:7b:0b:4c:67:0b:4a:8e: 0a:8a:e6:71:97:01:ba:59:c7:d2:b8:0a:d7:fd:8a:5d:ce:3c: 27:1d:a7:f3:eb:42:e4:72:3f:12:cd:74:c4:43:4d:dd:c6:7f: 6a:46:a7:02:b3:1b:a6:ba:d5:38:56:98:58:e1:41:8f:16:a8: 3c:a7:f3:16:40:5b:0d:7d:15:96:58:de:7e:20:36:b3:2c:3f: 27:c1:3f:e3:5e:74:25:41:2c:65:ae:61:f1:51:82:0c:0e:dc: 6e:f0:d9:85:ed:bf:0d:cf:f8:97:69:da:07:b4:28:50:e9:a8: 9a:6f:f2:f0:27:e0:e5:c3:6f:db:36:bb:9f:68:75:1c:c1:59: 0e:c8:35:58:ab:c3:39:79:c6:9b:f9:8e:0a:de:40:14:6c:78: d1:11:8f:27 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICNEswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwMVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMTE0NjVGQzM0QTA4NzgxMzI5QzQ4ODIzRjQ5MTA0NzY1QjVDMzMz QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALb+r/R68yi99JAcyfxP aVtktjUPcr1xE1G3lhK8xaP/jF0KOLLaN4/C27C5RbHE8i87DR1qjdYlc96bSAhY aV1dNxHb81CXnyx6dl6+EfEY5sDrFEpxHW2qS4QEQ54ASOrNACGdIk3RbYOviRR6 AfBplcOG7pt1xeP9mnPUSTmXQJQPKx38DoWVrF6ZfKE+25wREC4FT0dNr1JaSejd 0BDphv8e/eXJ5eRoH81ugf7FJHRcKS41k3BfyXTAmGevx+TSjZAAh59ygrmFY282 PyowBRl8OxAmj4764pKYaGCQtvEUrq1HB2b05sc11OHY8r5VoxnD1aNhG8IlL/4K dgsCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBQRRl/DSgh4EynEiCP0kQR2W1wzOzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBSUpJTi8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9DSEFJSklOL0VVWmZ3MG9JZUJNcHhJZ2o5SkVFZGx0Y016cy5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICRTYwDQYJKoZIhvcNAQELBQADggEBAJcUyg6k 0TR5aK4pnVtLWdTMVRcdDpcWCbCG8SW/X0mNgGa6Gy17cpLNnsoICAU9KzLZ8/GV 2CHW1IdbjtemuxfikmS/ncHHX8pThStZomRxWZuwBjvry8huSpmfK//VVikaXNr1 ewtMZwtKjgqK5nGXAbpZx9K4Ctf9il3OPCcdp/PrQuRyPxLNdMRDTd3Gf2pGpwKz G6a61ThWmFjhQY8WqDyn8xZAWw19FZZY3n4gNrMsPyfBP+NedCVBLGWuYfFRggwO 3G7w2YXtvw3P+Jdp2ge0KFDpqJpv8vAn4OXDb9s2u59odRzBWQ7INVirwzl5xpv5 jgreQBRseNERjyc= -----END CERTIFICATE-----Generated at Sat Apr 12 14:34:24 2025 by rpki-client