$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer File: ftgwlnECe35vya4nucaMnE4pxXU.cer (raw, json) Hash identifier: v5aBHR9/Z8sIZj9FQBwI4FWoDOpi6rjPGOD1EYVOOGY= Subject key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1CAA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Wed 09 Jul 2025 07:33:01 +0000 Certificate not after: Wed 08 Jul 2026 15:30:21 +0000 Subordinate resources: IP: 165.101.152.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7338 (0x1caa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Jul 9 07:33:01 2025 GMT Not After : Jul 8 15:30:21 2026 GMT Subject: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:ba:3f:1a:36:90:ec:65:58:1c:de:45:9f: 51:cb:ff:57:93:c9:84:35:3f:00:82:85:32:84:c1: b9:e3:eb:78:11:cf:87:f6:54:f1:a7:1f:52:9e:7f: 39:fc:5e:a7:36:4f:65:92:cb:92:2c:15:c1:36:4c: 64:e5:60:70:4e:db:31:63:33:96:03:d7:3d:a4:f3: 5f:60:fa:95:c7:be:5d:37:68:f9:81:ba:cb:83:5a: a6:01:f4:b6:83:8f:ce:cc:28:24:35:f6:bf:27:da: d2:0f:a9:e3:f7:30:c3:a3:06:7b:d9:29:03:1d:90: 4d:93:b7:5a:59:40:be:de:ac:17:63:35:1c:09:6b: 19:b5:99:d0:b1:2e:d9:03:bb:88:3d:16:77:f3:4f: 3b:b7:b8:fa:06:30:9b:be:67:1b:40:26:28:9f:eb: 21:6c:96:35:ac:05:40:2f:30:9c:25:d1:8e:cd:ff: 92:43:4f:aa:14:ab:55:b2:12:09:8d:0e:a6:bf:bd: 0a:b6:70:11:25:24:f3:91:5b:8d:89:8a:7f:c3:e1: 92:d7:64:73:69:93:f3:4d:d1:4e:38:5d:49:34:7c: 5b:61:22:dc:f4:d5:05:28:dc:89:30:fd:41:4a:64: 44:85:1a:d0:c8:95:ac:db:67:93:bc:7b:ce:06:67: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.152.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:5b:32:32:33:39:39:8e:b8:6c:b0:d0:59:d3:db:e2:a8:ca: 71:22:9f:fd:5a:71:5a:97:25:c7:a0:97:ce:bf:be:18:51:17: 5e:07:06:69:2d:8a:70:5a:e6:fc:69:3f:ef:b1:d4:85:e1:30: 3f:a9:86:9f:27:48:86:7d:a7:a1:5c:da:e3:f0:da:f7:1b:6b: a6:92:c1:bf:4e:a8:25:53:61:26:4c:82:de:9a:c6:d7:2e:f2: af:6c:d5:c4:99:f9:8a:cb:a1:ac:b0:79:ab:48:97:12:03:76: dd:e7:37:87:e1:d8:9d:ec:94:01:dd:37:34:7b:0d:1e:dd:d6: a6:be:9a:36:1e:56:1c:89:8f:72:61:21:eb:97:c0:d1:2a:2b: 0c:e2:09:84:49:2e:ca:34:b3:7c:c0:52:01:3b:8a:53:40:16: cf:da:96:12:45:62:f2:89:2d:5d:c6:49:b8:16:d3:77:b2:ea: db:48:42:c8:1c:26:b1:88:1c:a6:0a:85:42:f7:b7:9e:e3:05: f7:d7:f6:b9:13:b6:51:12:19:0e:59:9c:66:94:b6:7c:ee:24: cc:3f:19:2e:9a:9b:32:5d:3c:1b:ff:fd:95:d9:f1:71:39:e6: 5e:f1:33:0d:5e:f9:97:c4:b9:e6:c5:23:da:53:4a:6b:74:83: 8e:a0:ea:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHKowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDcwOTA3MzMwMVoXDTI2MDcwODE1MzAyMVowMzEx MC8GA1UEAxMoN0VEODMwOTY3MTAyN0I3RTZGQzlBRTI3QjlDNjhDOUM0RTI5QzU3 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQRuj8aNpDsZVgc3kWf Ucv/V5PJhDU/AIKFMoTBuePreBHPh/ZU8acfUp5/OfxepzZPZZLLkiwVwTZMZOVg cE7bMWMzlgPXPaTzX2D6lce+XTdo+YG6y4NapgH0toOPzswoJDX2vyfa0g+p4/cw w6MGe9kpAx2QTZO3WllAvt6sF2M1HAlrGbWZ0LEu2QO7iD0Wd/NPO7e4+gYwm75n G0AmKJ/rIWyWNawFQC8wnCXRjs3/kkNPqhSrVbISCY0Opr+9CrZwESUk85FbjYmK f8Phktdkc2mT803RTjhdSTR8W2Ei3PTVBSjciTD9QUpkRIUa0MiVrNtnk7x7zgZn /bMCAwEAAaOCAlQwggJQMB0GA1UdDgQWBBR+2DCWcQJ7fm/Jrie5xoycTinFdTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNQkVTT04v MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvR0FNQkVTT04vZnRnd2xuRUNlMzV2eWE0bnVjYU1uRTRweFhVLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaVlmDANBgkqhkiG9w0BAQsFAAOC AQEAPFsyMjM5OY64bLDQWdPb4qjKcSKf/VpxWpclx6CXzr++GFEXXgcGaS2KcFrm /Gk/77HUheEwP6mGnydIhn2noVza4/Da9xtrppLBv06oJVNhJkyC3prG1y7yr2zV xJn5isuhrLB5q0iXEgN23ec3h+HYneyUAd03NHsNHt3Wpr6aNh5WHImPcmEh65fA 0SorDOIJhEkuyjSzfMBSATuKU0AWz9qWEkVi8oktXcZJuBbTd7Lq20hCyBwmsYgc pgqFQve3nuMF99f2uRO2URIZDlmcZpS2fO4kzD8ZLpqbMl08G//9ldnxcTnmXvEz DV75l8S55sUj2lNKa3SDjqDqCQ== -----END CERTIFICATE-----Generated at Thu Jul 24 05:23:53 2025 by rpki-client