$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer File: IKzKhxhQA3Ov93tBSyPcal8UdO4.cer (raw, json) Hash identifier: plvYQIJXHpEmf8muHkvHECOHMpIERcr1ZgA2qvsXrTU= Subject key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Wed 15 Oct 2025 15:30:20 +0000 Subordinate resources: IP: 160.191.8.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6605 (0x19cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Oct 15 15:30:20 2025 GMT Subject: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:2d:51:d3:88:62:7b:d9:0c:39:5f:b0:54: 57:6d:5c:db:b7:b0:d6:d8:bb:6d:5e:6f:7e:3a:a4: 2d:f8:02:09:f4:cc:b9:51:4f:72:99:2c:ea:14:cc: 1b:ef:40:67:fa:66:65:b8:75:c4:ae:db:93:93:36: e5:33:6c:7a:fa:82:f6:1b:09:51:8a:b6:ee:d7:d2: f0:50:eb:ac:9c:83:3b:53:35:86:89:ce:50:ee:ff: aa:d5:0c:ec:6a:f0:e4:a0:ce:5a:c9:89:06:af:06: 07:c5:ff:4e:6e:a3:27:d1:c7:2d:f6:aa:47:19:6a: 4f:54:1b:c0:fa:60:43:a8:72:9e:c0:c4:c2:23:7b: 02:43:b8:48:81:7f:b9:a8:36:a5:b9:b1:b8:c2:35: e1:28:8b:88:0b:9e:a1:6e:79:d8:ad:eb:e7:25:6f: 8c:ff:19:e3:c2:03:00:11:a5:47:27:ab:87:c7:46: a0:a4:1c:f2:3e:41:ab:81:62:b0:d2:c3:80:32:a9: e6:1a:2b:fb:7a:58:0a:ba:73:9e:88:34:7b:2b:5f: 9e:0e:f8:42:28:f6:f8:3f:29:28:ba:17:51:56:29: 06:f6:dd:d8:3a:73:85:a3:a4:98:b7:3a:6e:53:c4: 1b:94:c5:b9:70:ca:b4:af:d9:e8:e4:b1:5c:85:19: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.8.0/23 Signature Algorithm: sha256WithRSAEncryption 55:94:f4:a2:9f:b4:63:37:fa:23:98:c6:ba:42:47:75:bc:30: 34:77:39:d3:7f:9b:a7:cd:69:a7:1d:80:a9:68:67:6d:04:e4: a5:db:78:4a:1e:07:32:de:21:8b:68:61:68:a6:9c:0d:42:0a: 73:4d:4f:85:28:b5:87:95:c5:37:f9:ae:55:29:f4:03:bf:9a: 38:ee:a3:40:3e:20:0e:14:53:a1:73:70:42:91:d8:fc:5c:f5: 3e:0e:ef:cf:a4:ea:dd:0f:f8:f7:96:72:17:9e:4c:ef:1e:d9: 3a:bb:17:1b:54:9c:2c:23:17:08:20:b9:9b:96:78:4a:7b:bd: 16:de:29:ef:55:12:60:b4:25:eb:2f:e7:1d:47:89:60:86:bc: 87:99:1a:f4:61:8b:1b:d5:0f:a8:3f:98:0f:e2:1c:6c:67:db: a6:0b:a4:a3:f5:4c:44:b7:df:f1:f8:80:1a:cb:b9:fa:8c:0d: 7d:93:9a:d0:27:5d:39:45:49:e9:da:b1:17:04:bd:7b:3c:70: e6:3b:49:42:38:b4:e2:3b:c1:c2:ca:33:b2:cc:00:7c:79:fb: 5d:35:31:a9:8a:93:7c:db:ed:e4:06:4c:6c:1d:e6:7a:96:54: c8:88:5a:6f:d9:e3:0e:91:0d:de:d4:13:02:b6:d9:45:ac:77: c4:a8:68:49 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGc0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MTAxNTE1MzAyMFowMzEx MC8GA1UEAxMoMjBBQ0NBODcxODUwMDM3M0FGRjc3QjQxNEIyM0RDNkE1RjE0NzRF RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbYLVHTiGJ72Qw5X7BU V21c27ew1ti7bV5vfjqkLfgCCfTMuVFPcpks6hTMG+9AZ/pmZbh1xK7bk5M25TNs evqC9hsJUYq27tfS8FDrrJyDO1M1honOUO7/qtUM7Grw5KDOWsmJBq8GB8X/Tm6j J9HHLfaqRxlqT1QbwPpgQ6hynsDEwiN7AkO4SIF/uag2pbmxuMI14SiLiAueoW55 2K3r5yVvjP8Z48IDABGlRyerh8dGoKQc8j5Bq4FisNLDgDKp5hor+3pYCrpznog0 eytfng74Qij2+D8pKLoXUVYpBvbd2DpzhaOkmLc6blPEG5TFuXDKtK/Z6OSxXIUZ LpsCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBQgrMqHGFADc6/3e0FLI9xqXxR07jAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERELzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0NBVEhERC9JS3pLaHhoUUEzT3Y5M3RCU3lQY2FsOFVkTzQubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoL8IMA0GCSqGSIb3DQEBCwUAA4IBAQBV lPSin7RjN/ojmMa6Qkd1vDA0dznTf5unzWmnHYCpaGdtBOSl23hKHgcy3iGLaGFo ppwNQgpzTU+FKLWHlcU3+a5VKfQDv5o47qNAPiAOFFOhc3BCkdj8XPU+Du/PpOrd D/j3lnIXnkzvHtk6uxcbVJwsIxcIILmblnhKe70W3invVRJgtCXrL+cdR4lghryH mRr0YYsb1Q+oP5gP4hxsZ9umC6Sj9UxEt9/x+IAay7n6jA19k5rQJ105RUnp2rEX BL17PHDmO0lCOLTiO8HCyjOyzAB8eftdNTGpipN82+3kBkxsHeZ6llTIiFpv2eMO kQ3e1BMCttlFrHfEqGhJ -----END CERTIFICATE-----Generated at Sat Apr 5 12:56:48 2025 by rpki-client