$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer File: o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer (raw, json) Hash identifier: xHYAKsGy4MiE/9JW6NBtBk0JCIbWhWWk9I7Z0+kSrf0= Subject key identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 364D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:22 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 211.79.208.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13901 (0x364d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A37C6EE2B0ED0AF8321102E34E14B6A976F7989D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:48:0f:97:22:22:44:d5:90:d6:bd:20:ff: 91:79:dd:25:c6:fa:c3:49:13:b6:9d:0b:1c:ed:e9: fc:00:37:72:fc:9a:74:bc:ad:4b:75:77:7f:82:e5: 56:4b:70:f3:ff:c7:87:c9:51:7f:a1:90:7c:5a:a2: ed:cf:a0:56:5b:e0:85:74:f5:48:14:32:42:d9:a8: 4a:c7:35:fd:78:84:11:37:ce:43:2c:40:f3:29:d0: 39:45:99:de:82:11:0d:ff:fc:2d:cc:80:e2:45:4a: 62:68:3e:a3:76:c2:eb:f6:01:eb:9c:bc:da:13:5c: fd:47:65:95:57:2f:30:c8:7a:a0:ea:aa:12:b9:dd: 5d:58:c9:e1:21:91:89:19:60:5f:6c:e7:77:c7:bc: ca:4d:53:0e:04:96:6f:ee:b3:3d:4f:09:d2:2f:35: 67:21:fb:95:f5:62:53:e1:97:bd:ce:61:09:06:05: f9:34:34:aa:0f:bd:fe:07:99:33:48:ee:88:f3:e9: 23:6c:dd:bf:b3:67:c4:c3:f3:02:25:80:f2:17:1f: 31:df:ae:09:69:84:e6:60:ad:f5:2f:d3:18:01:6c: 0f:c4:19:cc:d0:d1:e8:13:fd:f9:df:fa:a5:cc:2a: 9a:43:19:c1:33:c9:20:bb:ad:cb:56:43:19:9d:82: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.208.0/20 Signature Algorithm: sha256WithRSAEncryption 43:2a:39:02:da:a8:97:f3:6d:f1:6b:2d:27:7e:ef:66:7a:2b: e3:4e:db:2e:3d:1f:45:10:6a:48:30:30:3e:e7:e1:e3:a6:19: c3:b9:c0:be:35:91:a2:39:31:7e:7b:9f:a1:74:86:aa:2a:49: 06:3a:13:1d:e5:24:db:37:33:6d:37:fe:f5:10:47:dd:50:6d: 83:90:39:08:3d:38:0a:84:39:26:88:56:aa:0d:11:0b:fc:fe: 87:25:46:42:ec:f0:81:74:f8:d9:45:3d:aa:21:4d:db:e1:6e: f3:8c:05:e1:eb:e8:be:cd:51:14:50:5b:1a:8e:a3:95:fc:ae: 7b:20:af:cc:d3:d8:b6:4b:6d:33:81:17:8d:34:03:c0:e8:47: 4d:9b:53:1e:32:57:75:ce:7f:a0:e1:d7:b8:f9:17:e8:c6:ce: 37:e3:71:7c:31:17:b9:42:77:78:0e:ce:5f:95:27:a8:c1:5a: cb:ed:f6:5b:b8:e8:1b:e2:0d:eb:12:1e:7d:14:9c:38:76:34: 47:60:59:7f:50:69:68:2a:f1:b1:73:c2:ab:51:76:69:44:44: 15:5e:aa:54:21:f7:cc:b6:93:5b:f1:f1:5e:e6:e7:8c:55:56: d6:d1:f2:89:d7:e7:4d:e3:29:a0:34:f8:e6:6e:79:78:bd:03: 35:de:0c:f9 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgICNk0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkyMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQTM3QzZFRTJCMEVEMEFGODMyMTEwMkUzNEUxNEI2QTk3NkY3OTg5 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN+dSA+XIiJE1ZDWvSD/ kXndJcb6w0kTtp0LHO3p/AA3cvyadLytS3V3f4LlVktw8//Hh8lRf6GQfFqi7c+g VlvghXT1SBQyQtmoSsc1/XiEETfOQyxA8ynQOUWZ3oIRDf/8LcyA4kVKYmg+o3bC 6/YB65y82hNc/UdllVcvMMh6oOqqErndXVjJ4SGRiRlgX2znd8e8yk1TDgSWb+6z PU8J0i81ZyH7lfViU+GXvc5hCQYF+TQ0qg+9/geZM0juiPPpI2zdv7NnxMPzAiWA 8hcfMd+uCWmE5mCt9S/TGAFsD8QZzNDR6BP9+d/6pcwqmkMZwTPJILuty1ZDGZ2C v7kCAwEAAaOCAkowggJGMB0GA1UdDgQWBBSjfG7isO0K+DIRAuNOFLapdveYnTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUJNLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lC TS9vM3h1NHJEdEN2Z3lFUUxqVGhTMnFYYjNtSjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQE00/QMA0GCSqGSIb3DQEBCwUAA4IBAQBDKjkC2qiX 823xay0nfu9meivjTtsuPR9FEGpIMDA+5+HjphnDucC+NZGiOTF+e5+hdIaqKkkG OhMd5STbNzNtN/71EEfdUG2DkDkIPTgKhDkmiFaqDREL/P6HJUZC7PCBdPjZRT2q IU3b4W7zjAXh6+i+zVEUUFsajqOV/K57IK/M09i2S20zgReNNAPA6EdNm1MeMld1 zn+g4de4+Rfoxs4343F8MRe5Qnd4Ds5flSeowVrL7fZbuOgb4g3rEh59FJw4djRH YFl/UGloKvGxc8KrUXZpREQVXqpUIffMtpNb8fFe5ueMVVbW0fKJ1+dN4ymgNPjm bnl4vQM13gz5 -----END CERTIFICATE-----Generated at Sat Apr 12 14:31:56 2025 by rpki-client