$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer File: 7NL9w4Uip0pCLee9HAJtVeCNnpo.cer (raw, json) Hash identifier: /7ER8r7vXEgOQc41ehOC3BcZYlvEsXRVozjYX4PPMoY= Subject key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 355B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:12 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 7534 IP: 202.160.64.0/19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 12:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13659 (0x355b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:a6:78:eb:ac:0e:9f:a2:21:90:a0:0f:a6: 72:90:b5:82:1e:0f:45:57:16:d8:a6:9e:ab:91:78: ef:8d:39:f1:f7:67:b5:15:20:69:98:37:77:e1:d1: 78:f0:cb:8e:cf:c5:e8:ca:b5:14:f8:1b:9a:fb:64: 4e:7c:bf:48:1c:ee:d9:87:b1:e5:8c:2d:31:56:64: 3f:55:4f:d9:98:47:b4:c3:ed:92:0f:5e:b9:92:51: 31:7f:6a:7f:b4:c0:52:91:c5:1e:a7:be:95:72:1c: 0f:d2:56:67:6a:95:ab:b1:8f:0c:67:cd:d1:da:2d: b5:49:10:39:3b:aa:87:d8:ba:0a:a2:2b:e5:92:c5: 09:24:19:99:e1:0b:c3:4c:b1:93:00:cd:aa:15:1b: 8a:f4:c7:00:cd:f4:29:75:29:17:6a:a8:40:40:60: 50:d9:a6:aa:47:ef:22:55:88:17:0a:3f:43:2c:ba: 13:c1:ad:5f:73:15:2d:50:94:32:2e:f6:e1:42:d7: d1:c3:f9:3d:41:d0:dd:af:8b:f5:1d:8c:88:b4:d9: 21:20:24:7b:0a:b3:ca:2b:3f:b2:71:3a:6f:32:46: 25:93:ae:07:4f:aa:7d:c5:bd:28:a5:20:c5:88:53: 10:11:af:4f:45:e0:5b:6b:b3:ac:1e:51:23:9c:9d: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7534 sbgp-ipAddrBlock: critical IPv4: 202.160.64.0/19 Signature Algorithm: sha256WithRSAEncryption 57:64:d9:5a:09:d2:f3:ca:de:c8:4c:f6:b3:ff:6b:73:4a:6d: 48:96:23:31:d5:77:3e:88:2c:32:81:b4:47:c5:ba:0b:26:4b: eb:24:dd:23:8c:46:5f:b3:9a:88:8f:10:a9:4e:a4:db:6a:ce: 26:51:12:57:f1:5f:0f:45:3d:47:0d:a2:22:77:eb:a3:6c:0f: 37:ad:09:ea:3c:6f:fe:9b:ad:ef:db:35:0e:1d:b6:dd:bd:95: dd:f7:bd:e7:29:65:7b:cb:78:6f:f2:78:94:19:6d:9d:62:04: 81:67:db:fe:33:da:b0:0a:d7:5a:a5:53:c8:28:f4:7c:b3:5a: 4e:79:71:5f:f3:f8:2e:64:7e:c2:c2:4c:de:92:ac:84:ab:cd: 1f:35:0f:4e:78:57:bc:f8:f3:5a:1e:24:9a:d9:df:9a:d4:15: e4:04:0d:2b:67:13:8b:20:fd:e6:1b:7a:ac:8d:3f:24:d0:01: 8c:5d:9e:89:19:a0:48:1c:55:36:e1:2c:4d:d5:f6:e2:fe:95: 4f:d4:fa:48:f4:f5:82:e3:a7:02:0e:98:a7:f8:11:9d:cb:c8: 2d:ac:c3:d8:f2:8c:06:42:8f:df:05:94:d3:24:03:11:fd:15: 87:d1:28:e3:f9:6b:91:f1:fc:4f:90:9a:df:ad:f4:a3:d2:11: 62:92:4d:2e -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICNVswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRUNEMkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYmpnjrrA6foiGQoA+m cpC1gh4PRVcW2Kaeq5F474058fdntRUgaZg3d+HRePDLjs/F6Mq1FPgbmvtkTny/ SBzu2Yex5YwtMVZkP1VP2ZhHtMPtkg9euZJRMX9qf7TAUpHFHqe+lXIcD9JWZ2qV q7GPDGfN0dottUkQOTuqh9i6CqIr5ZLFCSQZmeELw0yxkwDNqhUbivTHAM30KXUp F2qoQEBgUNmmqkfvIlWIFwo/Qyy6E8GtX3MVLVCUMi724ULX0cP5PUHQ3a+L9R2M iLTZISAkewqzyis/snE6bzJGJZOuB0+qfcW9KKUgxYhTEBGvT0XgW2uzrB5RI5yd 9PcCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTs0v3DhSKnSkIt570cAm1V4I2emjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJB LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1RQU0lMS0VSQS83Tkw5dzRVaXAwcENMZWU5SEFKdFZlQ05ucG8ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAh1uMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyqBAMA0GCSqGSIb3DQEBCwUAA4IBAQBXZNlaCdLzyt7ITPaz/2tz Sm1IliMx1Xc+iCwygbRHxboLJkvrJN0jjEZfs5qIjxCpTqTbas4mURJX8V8PRT1H DaIid+ujbA83rQnqPG/+m63v2zUOHbbdvZXd973nKWV7y3hv8niUGW2dYgSBZ9v+ M9qwCtdapVPIKPR8s1pOeXFf8/guZH7CwkzekqyEq80fNQ9OeFe8+PNaHiSa2d+a 1BXkBA0rZxOLIP3mG3qsjT8k0AGMXZ6JGaBIHFU24SxN1fbi/pVP1PpI9PWC46cC Dpin+BGdy8gtrMPY8owGQo/fBZTTJAMR/RWH0Sjj+WuR8fxPkJrfrfSj0hFikk0u -----END CERTIFICATE-----Generated at Sun Apr 6 11:30:44 2025 by rpki-client