$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer (raw, json) Hash identifier: owuPbrU6RoUBRb5RYpivfgQeFiLCdYQESZv25yicMEg= Subject key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 346D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:02 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 18183 IP: 103.189.132.0/23 IP: 202.5.12.0/22 IP: 2400:85a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13421 (0x346d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:ed:f2:f4:a6:b4:3a:ff:16:52:0c:22:75: 65:fa:ad:b9:7f:21:d5:db:66:7e:4e:62:0a:d2:0e: af:dd:92:17:24:7f:a1:9b:d3:de:a7:cf:04:f8:10: ce:ce:19:11:3f:72:be:24:2c:f7:0c:76:a1:78:bf: 2e:01:d4:f4:c2:87:22:c0:50:ab:43:bf:67:76:87: df:e0:aa:67:af:f8:cf:0c:c6:1d:7e:21:50:09:05: 9f:11:ce:9e:a1:c7:02:43:a5:42:69:bd:1c:eb:d7: b9:fe:0d:d0:2c:4e:64:2d:c9:1e:ae:12:7e:73:00: ba:a8:fc:5f:78:38:eb:69:3e:b5:13:92:ef:1f:4d: 62:fd:58:f0:51:01:72:58:7f:00:e9:fb:1f:75:bb: 77:4b:27:ad:5a:01:c4:ec:06:a0:50:ec:c5:a0:84: 2b:95:e0:37:7a:c6:95:55:cc:ab:96:df:b0:e8:44: 97:f7:3a:7a:3c:83:ea:31:c6:8c:cf:6c:8d:ee:9e: 54:63:e6:10:b6:a3:a7:e0:41:0a:10:de:44:86:42: 47:88:6b:81:c0:82:3d:8b:6a:50:47:24:aa:2c:44: da:ca:15:52:36:05:99:41:68:06:9a:2c:4e:7d:25: 76:02:7d:d2:ec:47:1b:d6:ce:2f:c1:19:36:4e:e6: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18183 sbgp-ipAddrBlock: critical IPv4: 103.189.132.0/23 202.5.12.0/22 IPv6: 2400:85a0::/32 Signature Algorithm: sha256WithRSAEncryption 57:ca:3a:dc:95:a6:7f:a6:74:9c:39:55:4c:9a:d4:05:3b:9a: 6b:e4:c5:9e:7a:55:ae:a3:69:cd:35:b2:91:23:92:47:44:95: 69:9b:b3:f0:b6:01:82:fd:47:79:54:0b:8b:8a:af:ed:0c:4f: e9:1f:3f:31:88:e4:04:ed:4e:ba:fd:c0:00:77:6c:cc:a3:51: f1:74:7d:d8:e5:9f:39:12:eb:15:31:86:b1:71:ac:01:fd:89: 17:8f:5d:97:9b:92:34:59:5e:55:b9:2d:68:41:9d:88:92:a4: 2e:1f:e1:96:cc:2a:37:7a:97:60:95:11:1c:15:7d:70:59:2e: 31:b6:4e:b6:b1:f4:24:22:8e:d1:22:d1:14:bf:79:2e:6d:46: 04:7e:42:06:05:d2:33:ba:9d:19:af:ea:c4:74:bc:47:b2:b8: 5a:66:5c:a3:41:6d:f8:8c:7d:b0:d1:26:9a:bc:db:f3:3c:81: f7:a1:56:eb:72:e7:52:82:85:f4:36:f6:2e:2e:c6:7a:57:57: 3c:ae:01:a2:75:e6:e0:9b:7e:49:bb:6d:a7:17:ba:1e:97:30: bd:c8:47:b3:e7:ab:6e:3e:c6:ad:fa:3c:68:cd:75:a0:47:1d: 6d:76:7d:e4:61:4c:e5:5c:21:80:10:81:54:63:8e:f1:5d:43: 08:e0:fd:b3 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICNG0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoM0I0OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMx7fL0prQ6/xZSDCJ1 ZfqtuX8h1dtmfk5iCtIOr92SFyR/oZvT3qfPBPgQzs4ZET9yviQs9wx2oXi/LgHU 9MKHIsBQq0O/Z3aH3+CqZ6/4zwzGHX4hUAkFnxHOnqHHAkOlQmm9HOvXuf4N0CxO ZC3JHq4SfnMAuqj8X3g462k+tROS7x9NYv1Y8FEBclh/AOn7H3W7d0snrVoBxOwG oFDsxaCEK5XgN3rGlVXMq5bfsOhEl/c6ejyD6jHGjM9sje6eVGPmELajp+BBChDe RIZCR4hrgcCCPYtqUEckqixE2soVUjYFmUFoBposTn0ldgJ90uxHG9bOL8EZNk7m ENUCAwEAAaOCAn4wggJ6MB0GA1UdDgQWBBQ7Sbh6P/OJY0x9CQ122uqpb+79kDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TkNSRUUvTzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJHBzA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAME AWe9hAMEAsoFDDANBAIAAjAHAwUAJACFoDANBgkqhkiG9w0BAQsFAAOCAQEAV8o6 3JWmf6Z0nDlVTJrUBTuaa+TFnnpVrqNpzTWykSOSR0SVaZuz8LYBgv1HeVQLi4qv 7QxP6R8/MYjkBO1Ouv3AAHdszKNR8XR92OWfORLrFTGGsXGsAf2JF49dl5uSNFle VbktaEGdiJKkLh/hlswqN3qXYJURHBV9cFkuMbZOtrH0JCKO0SLRFL95Lm1GBH5C BgXSM7qdGa/qxHS8R7K4WmZco0Ft+Ix9sNEmmrzb8zyB96FW63LnUoKF9Db2Li7G eldXPK4BonXm4Jt+Sbttpxe6HpcwvchHs+erbj7Grfo8aM11oEcdbXZ95GFM5Vwh gBCBVGOO8V1DCOD9sw== -----END CERTIFICATE-----Generated at Sat Apr 12 10:42:49 2025 by rpki-client