$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer File: RXsQNypobj_3Nla-tc0968kyNxo.cer (raw, json) Hash identifier: lmkUnPXMaEfnmvWkomNi7etpg3fdzs/nRTzqtYv+C/M= Subject key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 134.208.0.0/16 IP: 140.109.0.0 -- 140.138.255.255 IP: 192.83.166.0 -- 192.83.196.255 IP: 192.192.0.0/16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6629 (0x19e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:25:77:c2:25:bc:d3:39:e1:9d:02:fa:47: dd:bf:1a:5d:b8:a9:d8:d8:eb:00:de:6d:d1:56:8d: 4b:04:6f:7f:5f:43:e1:71:da:32:36:db:a0:2b:74: c2:ac:98:3d:35:e5:51:70:5e:9d:a3:0d:3e:a6:15: e5:25:f6:11:b8:a4:da:d9:93:c6:2c:58:8d:91:1e: 52:e4:aa:4d:f3:88:31:33:9a:cc:f3:f0:97:5f:44: 29:b5:2b:07:eb:88:0e:59:9e:15:42:04:4c:ae:36: 79:4a:a3:04:ab:ae:a8:b4:9b:a0:5b:96:cb:80:a9: ce:c2:30:50:1c:e7:e8:c7:d0:9b:30:4f:91:d1:38: 1a:b6:5f:92:98:8e:2f:cd:ec:31:f7:1b:40:b8:36: 77:f6:90:fe:42:96:fe:b3:9c:bd:e5:b2:54:88:14: cb:86:6a:53:c7:e0:24:a0:60:a9:ee:25:62:cd:b8: 67:ab:f0:ea:1f:47:fe:aa:d4:7c:99:70:fd:b0:14: 4f:4e:f8:62:59:8f:ab:4b:d2:b6:06:4d:c7:84:a8: d1:22:89:2c:96:f3:da:0e:c4:f6:1d:f4:5e:a5:9c: 02:d8:f9:e5:9a:b8:e5:4c:a3:64:1b:9f:f5:05:28: ac:1e:0f:c4:b4:6a:32:57:4e:48:dc:4b:95:f8:06: 4a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 134.208.0.0/16 140.109.0.0-140.138.255.255 192.83.166.0-192.83.196.255 192.192.0.0/16 Signature Algorithm: sha256WithRSAEncryption 47:f9:10:20:2b:36:83:0c:af:cb:86:5f:7c:b7:98:cb:e6:f3: eb:d9:c8:ba:a1:1c:44:b6:34:ee:42:8a:b4:4b:21:25:b0:ba: 26:3c:9e:c9:ef:9c:10:b4:1b:c1:de:4a:ba:9d:2d:0f:0a:5b: 7b:c7:e3:7a:63:35:31:6d:ee:2b:d6:ff:8a:b8:39:34:47:45: 1c:68:a5:5a:26:9f:1e:33:c0:6c:4c:61:03:c6:12:e3:35:d0: d0:04:ca:d4:37:45:a8:fd:68:6c:09:34:ab:3b:02:8e:1b:a0: 33:8e:f8:bd:3f:ce:7d:55:11:35:ba:08:44:41:30:8d:99:bc: a8:c7:f5:57:89:ca:53:c9:a2:33:e4:4b:2f:b3:b5:c8:b7:77: 8b:44:3c:bf:6c:9b:cc:71:86:d3:68:40:a2:d1:49:de:8e:11: 49:39:c0:5d:1e:44:71:26:fa:3a:b5:7f:2c:cf:19:8d:f3:c0: b7:8f:66:79:31:15:97:14:88:2c:d9:33:e3:51:e0:b2:a7:de: d9:e5:27:27:b7:d3:4c:d5:ca:96:cf:99:47:00:cb:dd:47:f2: df:be:cd:2f:94:75:58:3a:8c:a1:1a:fd:68:bb:f3:3a:d2:b6: 51:78:46:85:69:6f:96:e0:ac:a2:78:2b:89:40:0f:15:5a:12: db:01:3f:88 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICGeUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNDU3QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcx QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJ5JXfCJbzTOeGdAvpH 3b8aXbip2NjrAN5t0VaNSwRvf19D4XHaMjbboCt0wqyYPTXlUXBenaMNPqYV5SX2 Ebik2tmTxixYjZEeUuSqTfOIMTOazPPwl19EKbUrB+uIDlmeFUIETK42eUqjBKuu qLSboFuWy4CpzsIwUBzn6MfQmzBPkdE4GrZfkpiOL83sMfcbQLg2d/aQ/kKW/rOc veWyVIgUy4ZqU8fgJKBgqe4lYs24Z6vw6h9H/qrUfJlw/bAUT074YlmPq0vStgZN x4So0SKJLJbz2g7E9h30XqWcAtj55Zq45UyjZBuf9QUorB4PxLRqMldOSNxLlfgG Sk0CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBRFexA3KmhuP/c2Vr61zT3ryTI3GjAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev VEFORVQvUlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDA9BggrBgEF BQcBBwEB/wQuMCwwKgQCAAEwJAMDAIbQMAoDAwCMbQMDAIyKMAwDBAHAU6YDBADA U8QDAwDAwDANBgkqhkiG9w0BAQsFAAOCAQEAR/kQICs2gwyvy4ZffLeYy+bz69nI uqEcRLY07kKKtEshJbC6Jjyeye+cELQbwd5Kup0tDwpbe8fjemM1MW3uK9b/irg5 NEdFHGilWiafHjPAbExhA8YS4zXQ0ATK1DdFqP1obAk0qzsCjhugM474vT/OfVUR NboIREEwjZm8qMf1V4nKU8miM+RLL7O1yLd3i0Q8v2ybzHGG02hAotFJ3o4RSTnA XR5EcSb6OrV/LM8ZjfPAt49meTEVlxSILNkz41Hgsqfe2eUnJ7fTTNXKls+ZRwDL 3Ufy377NL5R1WDqMoRr9aLvzOtK2UXhGhWlvluCsongriUAPFVoS2wE/iA== -----END CERTIFICATE-----Generated at Sat Apr 5 16:32:28 2025 by rpki-client