$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Ay0zZk94CyxQHuYj57vx0iayYkg.cer File: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (raw, json) Hash identifier: Z2c1Un7MJOAwqTIzJ5IDeItdtpm8wNUPtP2fmXZ6rec= Subject key identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Tue 04 Nov 2025 15:30:21 +0000 Subordinate resources: IP: 160.191.168.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6601 (0x19c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Nov 4 15:30:21 2025 GMT Subject: CN=032D33664F780B2C501EE623E7BBF1D226B26248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:07:7a:9a:c1:99:e0:ef:d5:6b:2b:5d:7d: 45:2f:5a:bb:95:3c:ad:3f:b8:b7:3e:b4:48:42:7e: 13:8a:dc:67:d8:13:c2:6f:c2:09:e6:ca:94:ba:14: ea:19:2c:e6:69:2b:8c:cd:67:88:37:c1:86:41:a2: 49:ec:9e:74:74:c7:4e:9d:7c:e4:88:00:26:51:c0: a3:09:1e:34:a5:ee:f6:44:0d:b6:17:8f:cb:d5:84: 69:cb:4b:ef:2d:06:d6:60:a6:54:0a:e7:55:11:69: 6c:b4:db:4d:6f:48:42:29:8d:b5:3e:5b:7b:f8:42: 83:84:2c:9e:3d:81:10:e8:f3:1f:50:f8:8f:00:d4: ef:3c:a9:39:3f:58:5a:bc:0d:f1:c4:98:a4:a1:92: ad:49:16:96:54:4b:96:7a:09:86:d7:03:d7:9a:d3: 78:22:40:6a:b6:10:d6:48:58:77:f2:7f:d5:2b:ea: da:81:17:35:23:c4:9a:fd:d7:97:46:e4:f6:83:4a: 4c:3b:26:a2:f4:17:72:0d:96:9e:06:6f:1d:2b:b9: 63:a6:57:78:09:3b:e5:9a:11:83:73:f5:51:08:5a: 19:79:a9:ff:17:11:37:55:96:35:9c:91:b3:89:a8: ec:87:67:24:72:46:2a:58:7e:af:bc:ae:a3:c0:72: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.168.0/23 Signature Algorithm: sha256WithRSAEncryption ca:db:55:29:72:8a:25:d3:1f:9f:a6:e3:ac:ac:62:c4:98:75: 47:23:68:09:17:55:89:b5:0c:68:53:ea:3e:32:db:69:11:d7: cd:88:24:b4:a5:6c:61:77:6a:fa:32:e7:ff:32:10:83:5d:b9: 41:ec:b4:c9:63:0d:fa:59:7b:95:5d:f5:d6:ab:9a:5a:a0:52: f6:bf:cf:b5:8e:85:88:c4:5c:87:4b:27:19:d7:36:b6:aa:55: 9c:3f:5c:0e:5e:b6:f6:ae:51:b3:dc:4a:ff:ae:32:1b:5c:99: 91:19:9c:6a:44:24:1f:42:2e:ca:0c:b8:38:67:24:7f:8a:7e: 6b:c6:03:ea:74:8d:b4:2b:68:a4:0c:b9:19:f6:06:85:73:95: db:e8:70:4e:7b:99:90:e0:38:01:15:c1:11:e1:f3:aa:21:63: 35:63:a4:65:b2:94:df:b5:87:51:d0:c2:70:b1:9f:f5:81:15: 10:3a:e0:bf:bb:88:2d:0f:7d:b8:19:a4:2a:49:3e:b9:b3:ef: 36:b5:a4:81:d4:de:bc:b4:f1:88:bb:ba:dc:08:51:3e:07:9e: 3e:f8:51:3d:16:bb:ff:96:23:26:29:f9:a2:b2:ff:1d:bc:bc: 53:dc:0e:c3:c0:05:4e:c5:d5:ad:99:b1:c5:1e:c0:ec:e3:ce: e8:11:ba:f9 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGckwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MTEwNDE1MzAyMVowMzEx MC8GA1UEAxMoMDMyRDMzNjY0Rjc4MEIyQzUwMUVFNjIzRTdCQkYxRDIyNkIyNjI0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALWWB3qawZng79VrK119 RS9au5U8rT+4tz60SEJ+E4rcZ9gTwm/CCebKlLoU6hks5mkrjM1niDfBhkGiSeye dHTHTp185IgAJlHAowkeNKXu9kQNthePy9WEactL7y0G1mCmVArnVRFpbLTbTW9I QimNtT5be/hCg4Qsnj2BEOjzH1D4jwDU7zypOT9YWrwN8cSYpKGSrUkWllRLlnoJ htcD15rTeCJAarYQ1khYd/J/1Svq2oEXNSPEmv3Xl0bk9oNKTDsmovQXcg2WngZv HSu5Y6ZXeAk75ZoRg3P1UQhaGXmp/xcRN1WWNZyRs4mo7IdnJHJGKlh+r7yuo8By 2L8CAwEAAaOCAlAwggJMMB0GA1UdDgQWBBQDLTNmT3gLLFAe5iPnu/HSJrJiSDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOQU5HLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1hJTkFORy9BeTB6Wms5NEN5eFFIdVlqNTd2eDBpYXlZa2cubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoL+oMA0GCSqGSIb3DQEBCwUAA4IBAQDK 21Upcool0x+fpuOsrGLEmHVHI2gJF1WJtQxoU+o+MttpEdfNiCS0pWxhd2r6Muf/ MhCDXblB7LTJYw36WXuVXfXWq5paoFL2v8+1joWIxFyHSycZ1za2qlWcP1wOXrb2 rlGz3Er/rjIbXJmRGZxqRCQfQi7KDLg4ZyR/in5rxgPqdI20K2ikDLkZ9gaFc5Xb 6HBOe5mQ4DgBFcER4fOqIWM1Y6RlspTftYdR0MJwsZ/1gRUQOuC/u4gtD324GaQq ST65s+82taSB1N68tPGIu7rcCFE+B54++FE9Frv/liMmKfmisv8dvLxT3A7DwAVO xdWtmbHFHsDs487oEbr5 -----END CERTIFICATE-----Generated at Sat Apr 5 12:56:50 2025 by rpki-client