$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KMtcz8kHONIkyurBXhwlEABEa6o.cer File: KMtcz8kHONIkyurBXhwlEABEa6o.cer (raw, json) Hash identifier: TC77xOz067MHLLsTg0V5KJnTWO8Evwr9wGMxrCNmfe8= Subject key identifier: 28:CB:5C:CF:C9:07:38:D2:24:CA:EA:C1:5E:1C:25:10:00:44:6B:AA Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 34F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLCATV/KMtcz8kHONIkyurBXhwlEABEa6o.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLCATV/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:08 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 211.76.80.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13559 (0x34f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=28CB5CCFC90738D224CAEAC15E1C251000446BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:66:3b:8e:b5:98:b4:22:bf:5a:08:b5:ec: 46:5e:a7:f8:98:72:25:6e:d8:7e:7b:28:ad:58:fd: d1:8e:07:86:16:ae:4b:16:e6:d1:98:6a:25:a7:8b: 8c:5b:00:0e:e9:03:bb:98:cd:e7:e8:28:b1:23:de: 73:b6:25:ac:43:0f:31:a0:a6:ce:73:e3:5b:75:3c: a5:dd:e0:fd:bc:b2:b3:4c:e2:3a:68:78:ce:91:59: 16:11:17:3b:1d:3d:c6:85:ed:10:f6:11:0a:01:ff: 3b:5d:c5:b8:73:dc:f9:43:9c:d4:a0:81:85:fb:bd: d5:76:c2:ad:cd:ad:c0:ea:90:23:88:8b:62:92:e9: c4:64:0a:fb:19:c8:1d:4d:3a:ce:1e:ca:3e:e7:f3: e7:0c:59:66:d5:37:72:f1:17:cc:87:cd:3d:73:98: 21:26:2e:dd:c5:3a:db:86:70:f2:6a:4b:2c:16:11: 3c:85:90:9d:0e:27:d7:fc:0c:0f:89:6f:2d:6f:59: 74:89:3e:70:d9:e7:6a:8f:d1:86:5d:8c:c7:fc:b7: 45:58:03:19:b5:94:23:ff:4e:4c:0c:1e:bc:13:0b: 02:35:3c:e5:21:01:51:d9:f3:e7:a2:72:c6:96:06: 28:57:03:0d:b7:71:55:0e:06:22:0c:3d:8d:98:19: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:5C:CF:C9:07:38:D2:24:CA:EA:C1:5E:1C:25:10:00:44:6B:AA X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLCATV/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLCATV/KMtcz8kHONIkyurBXhwlEABEa6o.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.80.0/20 Signature Algorithm: sha256WithRSAEncryption 9b:f0:e8:d3:17:55:95:1f:03:e1:80:f1:c6:29:d9:38:58:68: 70:46:fd:bc:8b:50:c7:54:24:af:c3:95:49:bc:ea:de:eb:d2: d9:0e:5e:1a:cc:05:65:00:25:87:ec:30:26:f6:63:1d:b0:e2: 4a:82:61:1a:c4:f1:c3:2c:dc:8b:a1:5b:f2:7a:0e:52:2a:f0: b1:13:29:6f:34:6d:53:84:d5:16:f8:83:e1:09:8b:54:e1:97: c3:e5:b7:cb:25:bc:b0:aa:11:41:8c:d2:6a:9f:dd:55:7a:1f: ec:cd:6c:81:f9:14:74:e7:7a:c3:42:77:33:75:54:1d:19:53: 6f:df:e3:0e:e5:d1:35:c3:3a:69:80:e9:12:b0:de:91:aa:35: b6:be:5a:bd:79:03:bc:19:e3:6c:d1:23:5a:42:cc:06:72:4e: e1:63:25:fd:f8:2e:9c:d0:e5:1a:3d:d7:fc:0e:57:99:a7:d0: 67:0b:0d:cc:5f:9b:8d:e1:41:e3:97:c6:5b:c3:75:0e:f3:10: d7:14:76:7b:9f:0f:c5:65:78:f9:44:c6:14:fd:4d:7c:75:df: 76:4a:77:86:40:dd:53:ee:40:51:70:8c:17:d7:a0:61:f4:09: da:d0:0e:e4:0f:9f:99:aa:3c:c8:56:9f:4e:39:2b:a3:47:b9: 76:af:33:11 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICNPcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMjhDQjVDQ0ZDOTA3MzhEMjI0Q0FFQUMxNUUxQzI1MTAwMDQ0NkJB QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALlnZjuOtZi0Ir9aCLXs Rl6n+JhyJW7YfnsorVj90Y4HhhauSxbm0ZhqJaeLjFsADukDu5jN5+gosSPec7Yl rEMPMaCmznPjW3U8pd3g/byys0ziOmh4zpFZFhEXOx09xoXtEPYRCgH/O13FuHPc +UOc1KCBhfu91XbCrc2twOqQI4iLYpLpxGQK+xnIHU06zh7KPufz5wxZZtU3cvEX zIfNPXOYISYu3cU624Zw8mpLLBYRPIWQnQ4n1/wMD4lvLW9ZdIk+cNnnao/Rhl2M x/y3RVgDGbWUI/9OTAwevBMLAjU85SEBUdnz56JyxpYGKFcDDbdxVQ4GIgw9jZgZ oncCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBQoy1zPyQc40iTK6sFeHCUQAERrqjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSExDQVRWLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0hMQ0FUVi9LTXRjejhrSE9OSWt5dXJCWGh3bEVBQkVhNm8ubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE00xQMA0GCSqGSIb3DQEBCwUAA4IBAQCb 8OjTF1WVHwPhgPHGKdk4WGhwRv28i1DHVCSvw5VJvOre69LZDl4azAVlACWH7DAm 9mMdsOJKgmEaxPHDLNyLoVvyeg5SKvCxEylvNG1ThNUW+IPhCYtU4ZfD5bfLJbyw qhFBjNJqn91Veh/szWyB+RR053rDQnczdVQdGVNv3+MO5dE1wzppgOkSsN6RqjW2 vlq9eQO8GeNs0SNaQswGck7hYyX9+C6c0OUaPdf8DleZp9BnCw3MX5uN4UHjl8Zb w3UO8xDXFHZ7nw/FZXj5RMYU/U18dd92SneGQN1T7kBRcIwX16Bh9Ana0A7kD5+Z qjzIVp9OOSujR7l2rzMR -----END CERTIFICATE-----Generated at Sat Apr 12 10:52:02 2025 by rpki-client