$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer File: C2fHjjXSNjKiVTKu_otKn8q-O00.cer (raw, json) Hash identifier: FRQ8bWQC5DIuF99Ro0x8lj8/vXjcG1leUcME9dIo2mc= Subject key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Thu 28 Aug 2025 15:30:19 +0000 Subordinate resources: IP: 160.30.210.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6613 (0x19d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:c3:97:64:ab:48:c0:cc:45:f8:50:b8:6f: 49:fd:b0:dd:f3:62:69:85:a4:33:62:3f:fc:fe:4b: f1:6c:65:4c:36:38:83:79:1a:97:09:a1:f7:da:42: b5:9c:07:7e:b8:26:bb:79:4b:f9:7c:a3:b9:3b:47: 4c:c4:8e:82:0f:08:ee:a4:4c:02:4e:90:42:d5:dd: 87:46:01:17:e0:df:8f:72:c9:cb:b1:5e:02:63:a8: 34:7c:f8:70:a3:2f:fc:17:2b:2e:7b:26:90:f7:fd: 21:48:c2:c7:a3:e1:ad:a0:3a:7f:74:80:b3:50:7f: 33:81:ba:e6:a3:ef:0a:03:8f:ec:3d:0a:7c:18:e6: e9:4c:46:b2:c1:ec:3e:a0:c2:fd:01:cf:4a:37:43: 13:b2:8e:3d:83:50:0e:11:bc:39:ba:50:5f:42:1a: ec:16:5c:9f:02:a0:dd:9e:6a:66:cd:8d:0f:07:87: 7b:57:e8:1b:31:d4:49:67:67:30:fb:7f:67:ca:e3: fb:42:e2:b1:af:d0:d0:64:d0:3b:7a:8e:68:74:27: 32:7a:f3:23:5e:81:64:1c:cd:bd:42:16:77:ac:d3: fc:e2:b0:3b:5c:27:be:66:ee:f5:aa:f0:52:8c:f1: 32:c6:98:bc:a9:95:3b:9a:43:8e:ca:f2:56:fa:35: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.210.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:ab:31:ac:a4:39:1c:5a:1d:80:85:81:a4:bb:88:6a:48:54: e7:71:ac:97:23:4e:d6:f5:78:74:3a:14:8f:25:42:8a:79:4f: ad:95:9e:6f:b0:31:81:44:33:ae:ee:3c:d8:00:d1:ca:80:ef: 7d:e1:e4:ed:62:e3:95:ab:49:96:17:ab:90:6d:0d:c7:0e:f0: 59:ea:ad:f8:e1:42:b2:6a:99:4c:cd:63:b1:81:db:03:1e:3a: 11:e9:06:d6:0c:9a:32:f8:74:c4:ca:3b:82:61:d1:0b:88:20: e5:b6:5e:fa:b4:1e:d1:28:d2:30:88:f9:f1:46:e8:ea:bc:34: 4b:9c:e6:d2:06:79:9a:2b:ad:68:b3:19:d6:00:1c:3b:76:f0: 79:79:2f:b9:90:87:4e:08:51:9a:cc:13:cb:fd:b0:99:31:6a: 82:35:7a:45:e0:d4:76:29:a4:9a:e5:5f:ed:43:1e:e4:f9:44: 36:8b:bb:e9:86:f1:ff:ac:74:fd:bd:87:da:d1:b2:a9:f6:5b: 63:23:75:c0:3d:fa:c7:91:e2:8c:bc:ee:8a:3b:4c:d9:bf:4a: 52:f0:06:f7:23:3d:22:cb:0e:a4:6f:3a:ad:26:dc:d0:3c:52: 47:a2:a5:92:be:2f:f0:bf:2c:2a:05:f1:49:55:21:14:bd:10: 98:da:7c:c9 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICGdUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MDgyODE1MzAxOVowMzEx MC8GA1UEAxMoMEI2N0M3OEUzNUQyMzYzMkEyNTUzMkFFRkU4QjRBOUZDQUJFM0I0 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0bw5dkq0jAzEX4ULhv Sf2w3fNiaYWkM2I//P5L8WxlTDY4g3kalwmh99pCtZwHfrgmu3lL+XyjuTtHTMSO gg8I7qRMAk6QQtXdh0YBF+Dfj3LJy7FeAmOoNHz4cKMv/BcrLnsmkPf9IUjCx6Ph raA6f3SAs1B/M4G65qPvCgOP7D0KfBjm6UxGssHsPqDC/QHPSjdDE7KOPYNQDhG8 ObpQX0Ia7BZcnwKg3Z5qZs2NDweHe1foGzHUSWdnMPt/Z8rj+0Lisa/Q0GTQO3qO aHQnMnrzI16BZBzNvUIWd6zT/OKwO1wnvmbu9arwUozxMsaYvKmVO5pDjsryVvo1 MAUCAwEAAaOCAlgwggJUMB0GA1UdDgQWBBQLZ8eONdI2MqJVMq7+i0qfyr47TTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQVEVD SC8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9DT0RFVVBURUNIL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHtIwDQYJKoZIhvcNAQEL BQADggEBAJyrMaykORxaHYCFgaS7iGpIVOdxrJcjTtb1eHQ6FI8lQop5T62Vnm+w MYFEM67uPNgA0cqA733h5O1i45WrSZYXq5BtDccO8FnqrfjhQrJqmUzNY7GB2wMe OhHpBtYMmjL4dMTKO4Jh0QuIIOW2Xvq0HtEo0jCI+fFG6Oq8NEuc5tIGeZorrWiz GdYAHDt28Hl5L7mQh04IUZrME8v9sJkxaoI1ekXg1HYppJrlX+1DHuT5RDaLu+mG 8f+sdP29h9rRsqn2W2MjdcA9+seR4oy87oo7TNm/SlLwBvcjPSLLDqRvOq0m3NA8 UkeipZK+L/C/LCoF8UlVIRS9EJjafMk= -----END CERTIFICATE-----Generated at Sat Apr 5 01:08:42 2025 by rpki-client