$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer File: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (raw, json) Hash identifier: y3gnmAD4VUlr6VReqxjug8ksetmNNHg4KIjmIOzTCS4= Subject key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 160.25.220.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 12:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6633 (0x19e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:d0:b8:ad:bc:04:02:3e:91:87:f7:ab:8f: 56:53:e8:6b:7e:72:2e:d7:6f:cc:9c:75:73:e5:43: f4:e3:1f:28:e0:c1:18:50:3d:75:4b:13:33:8b:9f: 8e:97:fa:41:5d:d1:3b:f8:a6:61:1d:dc:e0:31:c6: bc:c0:a3:0c:13:82:65:d6:2f:99:3a:30:7f:07:cb: 60:7c:c9:df:52:a8:f3:32:6d:9f:c1:68:23:81:a8: 7e:a2:13:5c:f0:a1:86:3f:d2:eb:4b:82:ea:60:24: cf:1f:ba:25:f2:b7:ad:dd:d3:2f:3a:39:d4:2a:1f: 97:7e:20:9a:7e:c0:20:6f:99:e4:8d:cf:68:34:e0: 70:10:20:ab:54:6e:a0:09:9c:4c:ab:ff:77:54:25: d0:a9:c1:5e:44:a5:87:ed:63:1b:78:b9:58:12:77: 39:db:6e:02:2e:4a:d4:d5:50:09:f4:ac:a8:43:f4: fa:51:b5:66:37:91:1a:de:9a:ef:8f:5a:c9:7a:4b: b7:28:18:f6:4b:81:83:3f:7f:36:15:33:63:44:a4: ab:cf:7d:77:55:6c:e7:5b:33:f2:74:34:b7:ab:a6: b8:b9:70:01:33:d8:b5:d7:5a:93:59:ec:69:70:85: f8:88:5f:e3:0a:5b:0f:14:b1:62:7c:c8:17:63:61: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.220.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:8c:52:aa:3a:1e:a2:21:d3:6b:24:cc:d7:c5:ed:23:5c:4b: d8:85:0a:30:1c:d2:b6:53:43:86:a9:fe:9e:83:2e:df:aa:11: 28:56:db:5e:dd:a2:26:bf:e1:ff:a1:c4:06:97:92:4d:68:f7: 6b:a1:c1:6e:98:1b:69:26:7e:84:4b:13:cc:85:6b:9a:d8:6b: d8:94:ee:9e:2f:24:48:c6:09:1b:6d:a2:97:22:5b:45:94:51: 16:98:99:f4:ad:52:25:e4:9e:f4:cb:99:92:51:a4:fd:a6:19: 3e:db:6f:87:e1:0f:b5:e2:68:59:cb:20:f8:3d:1e:7a:d0:29: 84:68:e6:70:cf:3b:b3:da:d8:0a:e5:b8:14:a0:e2:44:75:5e: cf:1a:72:89:1e:85:c3:3d:fb:c8:80:99:10:1a:7f:91:ed:33: af:fc:2c:64:75:2d:05:97:28:e8:c2:6b:88:22:40:85:00:34: d4:12:ba:3b:fb:7f:67:c8:e6:e1:37:4c:dd:0d:cf:7e:90:d6: 85:fc:f6:16:0d:5a:b5:dd:38:4e:41:f4:e2:f8:69:7f:f0:44: 70:de:e2:b4:38:26:2a:1f:b8:43:23:68:2b:fe:08:d9:bc:47: 4a:89:d6:27:b2:a8:5d:15:42:ff:1c:6d:32:40:63:20:fe:31: 13:e5:36:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGekwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNDIyRTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVE MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcv0LitvAQCPpGH96uP VlPoa35yLtdvzJx1c+VD9OMfKODBGFA9dUsTM4ufjpf6QV3RO/imYR3c4DHGvMCj DBOCZdYvmTowfwfLYHzJ31Ko8zJtn8FoI4GofqITXPChhj/S60uC6mAkzx+6JfK3 rd3TLzo51Cofl34gmn7AIG+Z5I3PaDTgcBAgq1RuoAmcTKv/d1Ql0KnBXkSlh+1j G3i5WBJ3OdtuAi5K1NVQCfSsqEP0+lG1ZjeRGt6a749ayXpLtygY9kuBgz9/NhUz Y0Skq899d1Vs51sz8nQ0t6umuLlwATPYtddak1nsaXCF+Ihf4wpbDxSxYnzIF2Nh 6o8CAwEAAaOCAlQwggJQMB0GA1UdDgQWBBRCLnyV2H3prushKgxMywF05lyl0DAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRFQ0gv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvU0tJUFRFQ0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZ3DANBgkqhkiG9w0BAQsFAAOC AQEAKoxSqjoeoiHTayTM18XtI1xL2IUKMBzStlNDhqn+noMu36oRKFbbXt2iJr/h /6HEBpeSTWj3a6HBbpgbaSZ+hEsTzIVrmthr2JTuni8kSMYJG22ilyJbRZRRFpiZ 9K1SJeSe9MuZklGk/aYZPttvh+EPteJoWcsg+D0eetAphGjmcM87s9rYCuW4FKDi RHVezxpyiR6Fwz37yICZEBp/ke0zr/wsZHUtBZco6MJriCJAhQA01BK6O/t/Z8jm 4TdM3Q3PfpDWhfz2Fg1atd04TkH04vhpf/BEcN7itDgmKh+4QyNoK/4I2bxHSonW J7KoXRVC/xxtMkBjIP4xE+U2Iw== -----END CERTIFICATE-----Generated at Sat Apr 5 08:29:40 2025 by rpki-client