$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer File: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (raw, json) Hash identifier: ISB4umo25qh/0iV++TUopfHsL1yURELN6s0VaAYV7VQ= Subject key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 157.20.248.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6625 (0x19e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F33A72AAF798105BB277F094458E464B4659F803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:c2:dd:57:d3:dd:7f:21:f7:ae:20:1f:c0: f8:39:68:62:a8:78:7a:a6:aa:f4:50:01:23:6c:aa: e2:90:d2:28:6f:7d:dd:9a:89:35:83:b2:fc:f5:2a: d5:a1:92:c9:fe:e2:ee:a8:34:e2:da:5d:7e:93:5e: b2:26:60:c9:2f:2a:67:e2:30:ed:38:d1:bd:99:33: fc:e4:d3:e1:cf:cb:4b:b4:a3:a9:8f:97:b1:56:a7: 7c:32:44:02:80:6a:43:a1:29:1b:11:99:ee:38:4b: 6f:12:43:0d:72:15:07:d8:d2:f4:54:c6:ea:ee:f7: 8c:47:52:3e:34:02:ba:06:69:f0:9a:90:5f:84:00: 01:02:8d:e4:95:67:22:cd:02:d2:7f:6f:85:f5:af: 06:64:2a:6d:f8:d8:ec:08:95:5a:b2:74:6e:be:c6: 39:67:4a:c7:be:74:fb:e8:06:b9:b1:c4:3b:f3:05: 59:e0:e7:b5:e3:67:b0:d9:3c:1b:ca:64:78:ea:09: db:a4:ed:c0:41:e8:84:8c:aa:06:c3:a4:ea:2b:cf: 8f:cf:2d:8e:7b:be:ae:f8:b5:51:67:fe:1f:7c:7b: 86:bd:1f:04:e4:f6:4a:82:e3:fd:2a:93:fe:8b:0d: 15:a1:98:2a:e9:61:8c:d6:cc:0b:08:3c:54:08:0e: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.0/23 Signature Algorithm: sha256WithRSAEncryption 55:56:ed:7b:62:2b:65:f6:78:13:bb:79:3a:93:7d:8f:a2:3b: e7:2e:6e:4c:4b:35:18:19:cc:d7:47:ed:15:85:c5:a9:e8:6b: 13:bf:af:a0:96:72:a2:10:28:7b:ee:e5:d5:c7:ff:7f:df:01: e1:e0:3d:53:17:c8:b1:9b:32:85:c1:58:03:f2:43:ca:03:f9: 3f:73:df:b7:01:09:e1:06:8b:64:ba:eb:1e:43:5c:0f:fc:00: c9:86:51:20:f7:cf:4a:d5:23:04:53:ab:34:46:2c:1f:bf:04: e3:47:cb:77:7f:56:29:5b:e7:03:e2:b1:cb:40:c0:29:b2:f2: e6:f7:ac:c7:2e:00:cc:5c:19:ea:8c:cb:fd:bd:c9:db:c0:43: 30:43:6a:e8:63:c3:4b:41:42:36:9e:2a:2f:b5:53:f5:38:c4: d8:e1:24:3a:07:aa:07:0d:36:c3:02:41:5d:c6:1b:cf:f2:87: 07:95:fb:24:c1:26:0b:f5:3c:eb:85:5d:d2:91:f1:10:ff:cf: c9:2b:73:48:01:5a:7f:78:40:3a:1a:f8:40:35:35:86:6d:52: fa:f0:43:a5:0b:86:31:41:b0:eb:6d:a1:49:cd:07:cf:0d:21: fa:02:b5:47:67:35:7c:3c:fb:a5:b7:4f:0c:cb:fe:b2:56:1f: 02:f5:81:5a -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICGeEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRjMzQTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5Rjgw MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqiwt1X091/IfeuIB/A +DloYqh4eqaq9FABI2yq4pDSKG993ZqJNYOy/PUq1aGSyf7i7qg04tpdfpNesiZg yS8qZ+Iw7TjRvZkz/OTT4c/LS7SjqY+XsVanfDJEAoBqQ6EpGxGZ7jhLbxJDDXIV B9jS9FTG6u73jEdSPjQCugZp8JqQX4QAAQKN5JVnIs0C0n9vhfWvBmQqbfjY7AiV WrJ0br7GOWdKx750++gGubHEO/MFWeDnteNnsNk8G8pkeOoJ26TtwEHohIyqBsOk 6ivPj88tjnu+rvi1UWf+H3x7hr0fBOT2SoLj/SqT/osNFaGYKulhjNbMCwg8VAgO 7pMCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTzOnKq95gQW7J38JRFjkZLRln4AzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9J QU1ULzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFPgwDQYJKoZIhvcNAQELBQADggEBAFVW7Xti K2X2eBO7eTqTfY+iO+cubkxLNRgZzNdH7RWFxanoaxO/r6CWcqIQKHvu5dXH/3/f AeHgPVMXyLGbMoXBWAPyQ8oD+T9z37cBCeEGi2S66x5DXA/8AMmGUSD3z0rVIwRT qzRGLB+/BONHy3d/Vilb5wPisctAwCmy8ub3rMcuAMxcGeqMy/29ydvAQzBDauhj w0tBQjaeKi+1U/U4xNjhJDoHqgcNNsMCQV3GG8/yhweV+yTBJgv1POuFXdKR8RD/ z8krc0gBWn94QDoa+EA1NYZtUvrwQ6ULhjFBsOttoUnNB88NIfoCtUdnNXw8+6W3 TwzL/rJWHwL1gVo= -----END CERTIFICATE-----Generated at Sat Apr 5 12:56:47 2025 by rpki-client