$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer File: Bj-Bjayxcbg1QVq9J4mTki883F0.cer (raw, json) Hash identifier: Som6XU6OyGZOpt4M5sS1eHTgaF8BQMIgc1ZTolqLQMk= Subject key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:12 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.220.218.0/23 IP: 2401:a60::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=063F818DACB171B835415ABD278993922F3CDC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:02:25:a6:df:ab:7b:41:72:e4:5f:31:26: 72:95:b4:24:59:d1:0a:36:44:41:57:8b:d2:6b:8a: ba:02:88:01:c0:b1:f9:c4:6c:a3:df:99:1d:f5:80: e4:4e:7d:47:0a:6a:c3:3c:91:85:89:16:35:9b:07: 09:09:42:49:ba:b1:b6:b7:cb:27:7f:fb:82:9e:a9: 58:50:37:d9:58:a3:7b:9b:ec:ab:40:b8:1c:80:09: 46:37:39:be:b6:ac:df:bd:8e:ff:94:bc:e1:ea:0c: 40:ab:9e:f3:25:04:af:fe:b8:27:c2:fa:fc:86:57: 25:99:fc:f1:03:33:79:bf:66:4c:e2:de:d7:01:6f: 69:67:de:dd:1b:69:d2:35:73:16:0e:eb:b6:71:c6: 64:85:b6:b2:89:77:b5:92:4b:6a:aa:e1:dc:a2:e9: 34:f2:43:1d:b4:c1:0e:77:06:d5:94:93:21:79:5f: fa:f6:a0:6e:31:dc:81:3d:6c:7b:49:ce:72:91:d8: 90:c3:05:c2:53:d6:b4:c3:a2:27:d7:03:8f:53:28: 76:d8:b2:2a:36:f9:b6:4f:a8:fe:6a:9e:74:be:b6: 7c:1e:82:aa:ba:b3:0f:58:7f:1b:b7:9d:82:1d:9d: 57:31:f5:a8:41:16:3a:56:5a:32:70:ef:b5:0d:4d: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.218.0/23 IPv6: 2401:a60::/32 Signature Algorithm: sha256WithRSAEncryption 26:18:1a:8e:c2:92:1f:b8:85:4c:6d:cb:64:bf:2f:74:a5:76: 76:21:5b:7e:2f:4e:ad:2c:24:38:e3:8a:c0:06:07:55:2d:c4: ac:26:91:ff:f7:f7:58:05:ff:23:8f:ee:de:b3:7d:02:ba:0f: 2d:01:91:63:cb:2b:53:06:83:07:2c:cb:aa:ad:f3:18:83:7a: de:34:2b:1b:81:46:60:a4:b6:91:6f:4d:bd:ec:92:59:bc:21: 32:cd:81:86:d9:be:da:d4:ed:c0:29:2e:cc:d3:96:3d:b5:7c: bf:60:77:cd:ed:d6:51:97:ef:eb:9b:92:e8:25:03:59:d2:02: 0c:4c:fd:4c:35:db:f0:dc:06:7f:b5:5a:c3:91:0a:c9:a8:04: 71:c0:ad:a6:85:e3:15:e8:eb:45:41:5a:51:5c:70:a2:02:c5: ea:5e:9d:ab:a1:b4:5b:9f:c4:7e:49:f5:35:be:8e:23:e0:73: b5:87:2d:58:79:c2:d1:94:a5:cc:7e:97:52:ea:3b:f5:a2:25: da:f1:5a:cc:c9:ff:25:93:8a:fb:96:53:13:5e:76:c4:0e:9b: bb:07:83:bd:c2:fe:16:5b:43:65:0a:b2:f3:82:09:6a:47:6d: 72:2c:af:3d:b4:ca:48:ee:b2:cd:f0:a4:aa:cc:cf:3a:1f:84: 68:74:fb:31 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDYzRjgxOERBQ0IxNzFCODM1NDE1QUJEMjc4OTkzOTIyRjNDREM1 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJj/AiWm36t7QXLkXzEm cpW0JFnRCjZEQVeL0muKugKIAcCx+cRso9+ZHfWA5E59RwpqwzyRhYkWNZsHCQlC SbqxtrfLJ3/7gp6pWFA32Vije5vsq0C4HIAJRjc5vras372O/5S84eoMQKue8yUE r/64J8L6/IZXJZn88QMzeb9mTOLe1wFvaWfe3Rtp0jVzFg7rtnHGZIW2sol3tZJL aqrh3KLpNPJDHbTBDncG1ZSTIXlf+vagbjHcgT1se0nOcpHYkMMFwlPWtMOiJ9cD j1ModtiyKjb5tk+o/mqedL62fB6CqrqzD1h/G7edgh2dVzH1qEEWOlZaMnDvtQ1N XhcCAwEAAaOCAlkwggJVMB0GA1UdDgQWBBQGP4GNrLFxuDVBWr0niZOSLzzcXTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERDLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RE Qy9Cai1CamF5eGNiZzFRVnE5SjRtVGtpODgzRjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ9zaMA0EAgACMAcDBQAkAQpgMA0GCSqGSIb3DQEB CwUAA4IBAQAmGBqOwpIfuIVMbctkvy90pXZ2IVt+L06tLCQ444rABgdVLcSsJpH/ 9/dYBf8jj+7es30Cug8tAZFjyytTBoMHLMuqrfMYg3reNCsbgUZgpLaRb0297JJZ vCEyzYGG2b7a1O3AKS7M05Y9tXy/YHfN7dZRl+/rm5LoJQNZ0gIMTP1MNdvw3AZ/ tVrDkQrJqARxwK2mheMV6OtFQVpRXHCiAsXqXp2robRbn8R+SfU1vo4j4HO1hy1Y ecLRlKXMfpdS6jv1oiXa8VrMyf8lk4r7llMTXnbEDpu7B4O9wv4WW0NlCrLzgglq R21yLK89tMpI7rLN8KSqzM86H4RodPsx -----END CERTIFICATE-----Generated at Sun Apr 6 20:02:30 2025 by rpki-client