$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/uU530OicbkiYh7m6MhYTTB-VamQ.cer File: uU530OicbkiYh7m6MhYTTB-VamQ.cer (raw, json) Hash identifier: JmjkUvRWLXpn+e61LXRKMZ8y0spKU5HF5++EUmoFEho= Subject key identifier: B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:04 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 38850 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B94E77D0E89C6E489887B9BA3216134C1F956A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:64:2c:72:d3:7f:ea:a9:a1:76:64:82:2e: 0b:6f:f1:25:c8:2d:7d:a9:ca:5f:6e:f2:e2:e7:9a: 78:bf:63:ba:bb:a9:df:c6:dc:82:73:2e:61:e4:45: e9:89:33:14:87:a5:fa:d8:69:ab:41:90:72:d2:61: d6:77:d6:83:9f:e4:68:ef:11:7c:68:62:2b:0f:91: 68:66:d3:df:d8:bb:0d:81:3a:cc:af:21:23:67:0f: 76:0b:32:63:86:76:b2:d3:0d:d4:20:79:fc:06:2a: 71:08:13:38:dd:b2:12:2d:88:88:0f:85:7d:5d:23: 4d:a5:89:1d:e2:42:d1:7c:57:cb:a8:de:50:3b:bb: c7:14:4f:d2:50:97:63:f8:4a:2b:18:27:3f:b6:58: 86:bf:cb:45:bf:74:63:7d:08:56:bc:27:c6:da:40: b2:34:7e:ac:9d:6f:a6:cb:16:a9:3e:04:af:06:21: 04:b3:48:89:d4:f9:03:23:11:4a:b0:47:9d:4a:03: f6:7f:82:3a:7b:be:02:a2:b4:5a:d2:fa:47:98:cb: 3d:56:0b:59:33:ac:b6:85:b4:b6:3e:ad:a7:68:87: dc:d7:4c:d6:7d:51:3c:ff:0e:ba:74:81:83:55:f1: 36:b0:e6:59:0c:f6:e5:ce:4b:5f:c4:03:fd:cb:72: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38850 Signature Algorithm: sha256WithRSAEncryption 16:58:29:ae:ca:19:b2:94:b9:e9:35:d8:04:eb:e4:cc:36:33: 10:38:fd:d1:bc:31:89:55:86:a1:a6:d8:4e:aa:c6:36:a6:5a: fe:44:a4:42:84:a5:62:3a:b1:23:eb:9b:20:0a:4e:d2:d9:9f: 05:e1:a2:85:6d:5f:9e:4b:bc:51:dd:c5:1f:c8:92:b1:e9:0c: 3d:b2:b8:aa:b8:0d:fb:d3:f3:94:0d:bd:d3:e6:11:2f:bc:b7: 71:58:68:d0:52:9c:17:fb:80:3c:1b:e2:59:ce:bc:7e:da:37: 28:5d:38:dc:60:69:39:80:4e:2a:57:b5:a4:c3:ec:7c:63:a8: 3d:99:a5:88:6a:72:03:a7:7f:e8:38:bb:76:b3:8a:c3:ea:3b: b3:2f:25:ca:de:8f:30:9c:c1:dd:a5:69:32:33:ab:e3:48:4f: e0:0a:7c:71:27:18:9a:ea:be:73:ef:c0:9a:c7:d9:bb:c8:5e: 4e:b2:8e:ce:a5:b0:47:e8:d2:91:15:58:03:b1:c6:7a:92:dd: ae:bc:22:e6:bf:89:0a:51:61:cd:c6:29:7f:b4:d8:5c:c7:47: 6c:43:bc:ee:03:b6:f8:2b:a2:70:08:91:27:23:dd:8e:52:28: 54:f8:51:93:98:87:ca:9b:83:d4:66:d8:4d:d4:37:a1:94:f1: 09:9f:26:cc -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNJswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwNFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQjk0RTc3RDBFODlDNkU0ODk4ODdCOUJBMzIxNjEzNEMxRjk1NkE2 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALoQZCxy03/qqaF2ZIIu C2/xJcgtfanKX27y4ueaeL9jurup38bcgnMuYeRF6YkzFIel+thpq0GQctJh1nfW g5/kaO8RfGhiKw+RaGbT39i7DYE6zK8hI2cPdgsyY4Z2stMN1CB5/AYqcQgTON2y Ei2IiA+FfV0jTaWJHeJC0XxXy6jeUDu7xxRP0lCXY/hKKxgnP7ZYhr/LRb90Y30I VrwnxtpAsjR+rJ1vpssWqT4ErwYhBLNIidT5AyMRSrBHnUoD9n+COnu+AqK0WtL6 R5jLPVYLWTOstoW0tj6tp2iH3NdM1n1RPP8OunSBg1XxNrDmWQz25c5LX8QD/cty g+MCAwEAAaOCAkcwggJDMB0GA1UdDgQWBBS5TnfQ6JxuSJiHuboyFhNMH5VqZDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElHQy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9U SUdDL3VVNTMwT2ljYmtpWWg3bTZNaFlUVEItVmFtUS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJfCMA0GCSqGSIb3DQEBCwUAA4IBAQAWWCmuyhmylLnp NdgE6+TMNjMQOP3RvDGJVYahpthOqsY2plr+RKRChKViOrEj65sgCk7S2Z8F4aKF bV+eS7xR3cUfyJKx6Qw9sriquA370/OUDb3T5hEvvLdxWGjQUpwX+4A8G+JZzrx+ 2jcoXTjcYGk5gE4qV7Wkw+x8Y6g9maWIanIDp3/oOLt2s4rD6juzLyXK3o8wnMHd pWkyM6vjSE/gCnxxJxia6r5z78Cax9m7yF5Oso7OpbBH6NKRFVgDscZ6kt2uvCLm v4kKUWHNxil/tNhcx0dsQ7zuA7b4K6JwCJEnI92OUihU+FGTmIfKm4PUZthN1Deh lPEJnybM -----END CERTIFICATE-----Generated at Sat Apr 12 14:34:26 2025 by rpki-client