$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer File: B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer (raw, json) Hash identifier: 6WLm4oaRNkB+JDh/8It0WtSdLGPSR4YQVa3S192SvMc= Subject key identifier: 07:D3:E7:3E:C5:EB:3D:70:48:63:88:9E:22:18:45:B7:69:5D:40:9C Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/B9PnPsXrPXBIY4ieIhhFt2ldQJw.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 157.20.134.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6641 (0x19f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=07D3E73EC5EB3D704863889E221845B7695D409C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:0e:8d:b9:9f:31:a9:1d:5c:d4:5c:30:57: e8:c2:65:f7:a7:b3:b6:4d:e2:dc:42:23:62:9a:47: ed:03:e3:78:46:4a:66:db:db:4c:7e:f1:f2:29:a0: aa:2e:dd:54:4e:39:b3:23:b3:d7:b7:98:a5:95:50: 87:8a:e9:1a:75:1c:78:be:8a:6f:75:f5:b4:c3:b8: ff:4b:89:4e:7c:29:a4:4c:e8:67:83:77:7a:ca:e4: 8a:76:16:52:87:fd:8e:88:3f:0e:6a:16:e3:13:61: 23:cc:4b:35:80:82:89:1c:8c:c3:6d:7f:3f:14:a1: 80:a7:61:a7:6c:80:b8:5b:35:d3:53:7f:3b:72:1d: 3b:b8:95:52:bd:fa:90:72:5c:df:b6:0f:30:af:5d: 36:17:31:c7:78:95:79:92:74:99:de:d2:03:75:6b: 9b:78:40:02:04:3a:bf:3a:c6:c5:b4:1d:e9:38:62: 9b:f2:2c:71:a4:d5:e3:eb:4d:ac:b9:5f:e1:36:c1: da:1d:99:5d:df:73:a0:a2:65:db:10:58:7d:96:f1: 6a:d3:5a:e1:a0:21:59:b1:c5:72:c0:c4:08:e4:59: df:59:ab:f8:c9:eb:c3:eb:c8:74:d9:88:70:db:37: d6:a7:b8:b9:56:9d:f8:6a:c4:3b:64:be:33:76:37: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D3:E7:3E:C5:EB:3D:70:48:63:88:9E:22:18:45:B7:69:5D:40:9C X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/B9PnPsXrPXBIY4ieIhhFt2ldQJw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.134.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:74:7a:76:20:26:e7:71:5c:48:f9:7d:06:2e:df:84:7a:4b: 9a:88:8b:40:42:df:f7:35:82:87:cf:60:ca:cd:ad:b8:4b:76: 16:f0:71:96:81:27:a0:38:7e:16:4f:eb:12:b3:db:87:15:3b: 19:64:a4:7c:4f:6e:ca:0a:42:a4:8c:ec:03:ec:d7:94:76:3d: 6c:52:0b:2a:12:74:df:5c:de:72:38:f9:8b:40:f1:eb:6c:c8: cf:1e:01:d4:d5:5d:a3:32:fc:a4:98:b4:8c:bf:21:ed:a7:da: 34:dc:51:ee:b2:87:ff:bd:be:e3:62:c4:cd:04:e9:5c:95:e5: 4a:83:26:14:14:fc:49:c1:b4:be:29:43:eb:fe:93:f7:91:82: 79:33:62:54:d7:08:39:8c:d6:97:eb:cf:1c:1b:3c:25:13:6b: 5f:ec:a8:a8:c8:a0:4f:f2:05:d1:a3:e8:91:bd:81:8a:34:eb: e1:e1:42:06:d5:2a:b4:ab:5d:55:3e:12:c5:f3:7b:66:b8:07: db:68:b4:63:a1:a6:7e:82:55:39:92:55:af:48:87:5e:c4:a1: 09:3c:82:2b:0c:97:f1:e8:38:7f:75:12:28:00:5d:9c:ac:cc: c1:d4:ad:d2:c8:69:04:53:37:f7:ee:a3:8e:9c:47:f7:63:8a: 4c:25:c1:76 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICGfEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDdEM0U3M0VDNUVCM0Q3MDQ4NjM4ODlFMjIxODQ1Qjc2OTVENDA5 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALR/Do25nzGpHVzUXDBX 6MJl96eztk3i3EIjYppH7QPjeEZKZtvbTH7x8imgqi7dVE45syOz17eYpZVQh4rp GnUceL6Kb3X1tMO4/0uJTnwppEzoZ4N3esrkinYWUof9jog/DmoW4xNhI8xLNYCC iRyMw21/PxShgKdhp2yAuFs101N/O3IdO7iVUr36kHJc37YPMK9dNhcxx3iVeZJ0 md7SA3Vrm3hAAgQ6vzrGxbQd6Thim/IscaTV4+tNrLlf4TbB2h2ZXd9zoKJl2xBY fZbxatNa4aAhWbHFcsDECORZ31mr+Mnrw+vIdNmIcNs31qe4uVad+GrEO2S+M3Y3 9ScCAwEAAaOCAk4wggJKMB0GA1UdDgQWBBQH0+c+xes9cEhjiJ4iGEW3aV1AnDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTTJOSU0vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TTJOSU0vQjlQblBzWHJQWEJJWTRpZUloaEZ0MmxkUUp3Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0UhjANBgkqhkiG9w0BAQsFAAOCAQEAG3R6 diAm53FcSPl9Bi7fhHpLmoiLQELf9zWCh89gys2tuEt2FvBxloEnoDh+Fk/rErPb hxU7GWSkfE9uygpCpIzsA+zXlHY9bFILKhJ031zecjj5i0Dx62zIzx4B1NVdozL8 pJi0jL8h7afaNNxR7rKH/72+42LEzQTpXJXlSoMmFBT8ScG0vilD6/6T95GCeTNi VNcIOYzWl+vPHBs8JRNrX+yoqMigT/IF0aPokb2BijTr4eFCBtUqtKtdVT4SxfN7 ZrgH22i0Y6GmfoJVOZJVr0iHXsShCTyCKwyX8eg4f3USKABdnKzMwdSt0shpBFM3 9+6jjpxH92OKTCXBdg== -----END CERTIFICATE-----Generated at Sat Apr 5 12:57:07 2025 by rpki-client