$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer File: -cYtwWoyWUFWZBQsknjF3cTYKZ0.cer (raw, json) Hash identifier: QckMjUmjyrMulr198XvDVb91NhX/8SfaMGDDp9HzCsM= Subject key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1BBC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 May 2025 04:23:58 +0000 Certificate not after: Sat 23 May 2026 15:30:20 +0000 Subordinate resources: IP: 165.99.66.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Jun 2025 09:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7100 (0x1bbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: May 26 04:23:58 2025 GMT Not After : May 23 15:30:20 2026 GMT Subject: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:55:fc:00:c6:3c:50:be:b6:d8:d4:7c:9b: c8:c7:08:c6:32:70:a9:3d:2b:2e:98:53:3e:4d:55: 57:f1:a9:ee:bf:d5:74:31:cc:79:96:4b:6a:68:23: 12:83:f3:8b:05:e2:0c:ea:1d:8b:c8:27:38:7d:46: 9f:13:16:0d:4a:2e:67:4c:ba:c2:eb:bd:93:25:25: 1b:1b:f9:6c:5d:6d:90:5c:76:7e:a0:af:30:e7:e3: 0e:f4:90:ca:2e:4b:cd:65:f6:e8:a4:ed:ab:83:95: 36:a5:d5:20:53:74:83:4f:b8:1a:9a:09:7a:36:b3: 91:43:d8:4a:a8:44:64:3e:d3:99:88:51:d4:11:eb: ad:dc:5e:db:de:6e:7c:f5:09:78:66:5f:de:1a:e8: 58:a4:d7:e3:60:4d:a6:c4:94:31:c8:bb:1d:a3:87: d1:ad:b7:f7:80:0d:63:16:93:b6:ea:c4:8c:3b:fa: 1d:4c:01:95:f6:75:35:41:eb:30:ca:bf:87:1e:0c: 64:98:82:3b:1a:d3:ef:a7:6a:d6:55:16:f3:f0:95: 77:0a:e4:4c:36:4c:f9:e6:9a:14:09:58:c0:a5:df: 5a:1a:57:4e:bd:f9:03:68:b1:5b:74:2e:0d:51:12: 77:df:5a:1e:b0:e9:6a:cf:6e:18:1d:cd:71:62:16: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.99.66.0/23 Signature Algorithm: sha256WithRSAEncryption ab:c3:4d:55:ab:48:0a:f6:7a:27:19:02:df:b5:41:e7:cb:9b: e0:5b:94:b6:09:83:be:df:eb:76:91:63:e4:20:20:ac:57:7c: d2:3a:3f:1c:c0:9d:cb:de:d5:fa:d6:1a:92:15:a8:6d:b3:75: 22:c3:1d:d9:30:55:8a:56:38:89:0a:64:6d:86:7b:30:35:68: 0d:36:65:16:2e:2a:10:4f:43:c6:ec:f1:ec:4a:09:d8:79:03: 22:b3:c9:07:47:7e:e7:b7:7c:61:26:f3:b0:77:33:e9:1b:0e: 0e:51:9f:e6:08:3d:43:30:01:01:23:a0:88:98:ff:07:b5:f0: 58:c0:67:2e:4a:27:8c:cb:4b:ed:b2:63:77:20:4e:4c:2a:88: 90:cb:ff:9e:ba:4c:5a:66:09:ad:12:35:c2:91:c8:59:4d:b8: f2:3b:0a:8d:59:ec:53:35:39:e1:ac:a8:b2:97:3d:40:58:58: 0d:eb:65:75:78:c6:d0:6f:b0:9e:88:f2:80:d6:55:d1:b2:b7: 99:40:30:60:ae:ec:6e:02:81:5d:48:b5:89:ab:65:c0:40:24: 9d:2a:88:73:2d:eb:1a:d8:d9:c5:03:b6:05:eb:e7:d3:1e:8e: 3d:6f:6f:2b:a2:8e:2a:11:a1:aa:86:88:f6:17:7d:5e:ab:fb: 10:93:e8:b7 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICG7wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDUyNjA0MjM1OFoXDTI2MDUyMzE1MzAyMFowMzEx MC8GA1UEAxMoRjlDNjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMexVfwAxjxQvrbY1Hyb yMcIxjJwqT0rLphTPk1VV/Gp7r/VdDHMeZZLamgjEoPziwXiDOodi8gnOH1GnxMW DUouZ0y6wuu9kyUlGxv5bF1tkFx2fqCvMOfjDvSQyi5LzWX26KTtq4OVNqXVIFN0 g0+4GpoJejazkUPYSqhEZD7TmYhR1BHrrdxe295ufPUJeGZf3hroWKTX42BNpsSU Mci7HaOH0a2394ANYxaTturEjDv6HUwBlfZ1NUHrMMq/hx4MZJiCOxrT76dq1lUW 8/CVdwrkTDZM+eaaFAlYwKXfWhpXTr35A2ixW3QuDVESd99aHrDpas9uGB3NcWIW WoMCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBT5xi3BajJZQVZkFCySeMXdxNgpnTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1VXQVlJTy8tY1l0d1dveVdVRldaQlFza25qRjNjVFlLWjAubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpWNCMA0GCSqGSIb3DQEBCwUAA4IBAQCr w01Vq0gK9nonGQLftUHny5vgW5S2CYO+3+t2kWPkICCsV3zSOj8cwJ3L3tX61hqS Fahts3Uiwx3ZMFWKVjiJCmRthnswNWgNNmUWLioQT0PG7PHsSgnYeQMis8kHR37n t3xhJvOwdzPpGw4OUZ/mCD1DMAEBI6CImP8HtfBYwGcuSieMy0vtsmN3IE5MKoiQ y/+eukxaZgmtEjXCkchZTbjyOwqNWexTNTnhrKiylz1AWFgN62V1eMbQb7CeiPKA 1lXRsreZQDBgruxuAoFdSLWJq2XAQCSdKohzLesa2NnFA7YF6+fTHo49b28roo4q EaGqhoj2F31eq/sQk+i3 -----END CERTIFICATE-----Generated at Mon Jun 2 07:22:58 2025 by rpki-client