$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TwAMtt3TdIem3h9-rb2hJwjrLBk.cer File: TwAMtt3TdIem3h9-rb2hJwjrLBk.cer (raw, json) Hash identifier: jQyd3tLuTzN1WEW8IRfu+mzrq/V1j8zAABy3flW4uPc= Subject key identifier: 4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Fri 07 Nov 2025 15:30:19 +0000 Subordinate resources: IP: 160.191.202.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6595 (0x19c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Nov 7 15:30:19 2025 GMT Subject: CN=4F000CB6DDD37487A6DE1F7EADBDA12708EB2C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:57:fc:7c:c2:94:14:19:7f:ae:44:cf:49: ce:99:f3:05:90:eb:26:f4:02:d7:fc:60:ec:e5:db: 46:b9:d7:13:07:cb:40:18:03:6e:a5:98:f3:72:d0: 8b:e9:e8:85:34:cb:a3:83:e5:1f:a6:d2:2b:a4:91: 8f:af:c6:24:20:94:e0:12:f0:ae:56:9f:96:54:99: 6c:8a:0d:92:ae:04:99:33:d4:1a:6c:6b:63:1b:6e: 7e:c5:0b:26:58:51:cc:6b:7a:c4:f5:8f:46:9b:8e: 2e:09:ae:b6:aa:21:36:5a:d3:ee:5b:02:95:d9:ba: d3:9c:e9:8f:fd:c1:b3:3e:4e:5a:3d:5c:bb:bb:5b: 01:27:0c:e2:ce:7f:d0:17:f5:cf:c0:2c:fb:64:79: 84:a8:f3:ba:2e:cf:77:46:70:75:a7:17:2d:e4:e7: 45:1d:dc:50:8c:89:a4:68:4d:99:c2:79:12:d8:0a: 9b:8d:2f:7e:d1:e1:93:ec:b3:cb:e5:f0:58:77:12: fb:1f:23:31:82:c2:fa:79:ff:31:3e:fd:1f:0a:c9: 0a:9e:c0:98:15:25:8e:92:62:67:c4:38:67:32:f0: 4c:ec:36:3e:dd:dd:dc:e7:32:37:35:52:a8:13:5e: 2e:b2:21:99:c5:42:7a:79:f9:c5:50:76:5c:4a:f4: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.202.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:e2:a6:3a:47:f8:3e:f9:29:4c:6f:21:ee:15:d1:05:37:76: b1:5f:67:26:57:43:6a:90:dd:7c:4a:68:ff:fe:91:00:63:75: d6:85:6b:7a:08:b8:19:3c:1f:6b:3e:41:af:14:83:43:08:66: c3:30:97:f6:b4:68:94:50:48:7a:a0:38:24:b9:6f:79:0c:bf: bb:71:da:4c:97:be:19:46:12:02:12:ee:7d:06:60:c6:77:93: 0b:3d:fe:96:69:0d:cf:75:77:72:32:73:2e:92:de:1e:c1:99: 2f:3b:aa:b5:64:4d:82:88:bf:36:1a:6c:e8:98:df:5d:85:e8: d2:25:04:d8:fd:71:ec:bd:9f:03:5c:93:05:8d:a2:1e:a7:57: 6b:bf:1a:94:49:ef:b3:2d:ef:b3:6b:25:01:2f:3b:92:e0:ed: 18:27:58:ba:0b:55:8d:97:f5:64:d6:8b:88:b5:fd:71:a4:e1: ae:d9:b8:2c:bd:63:ec:58:d9:08:b7:67:90:92:1e:36:01:48: 50:be:a5:e8:8d:39:30:d9:d3:1d:6d:86:99:09:d7:be:01:fa: 3f:2a:d6:09:b4:46:8c:bc:04:4d:67:84:73:3a:57:d0:77:4a: 13:e4:d5:03:98:7c:ad:58:05:5a:18:85:57:8b:c2:91:17:02: 87:39:c8:77 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICGcMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MTEwNzE1MzAxOVowMzEx MC8GA1UEAxMoNEYwMDBDQjZEREQzNzQ4N0E2REUxRjdFQURCREExMjcwOEVCMkMx OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzWV/x8wpQUGX+uRM9J zpnzBZDrJvQC1/xg7OXbRrnXEwfLQBgDbqWY83LQi+nohTTLo4PlH6bSK6SRj6/G JCCU4BLwrlafllSZbIoNkq4EmTPUGmxrYxtufsULJlhRzGt6xPWPRpuOLgmutqoh NlrT7lsCldm605zpj/3Bsz5OWj1cu7tbAScM4s5/0Bf1z8As+2R5hKjzui7Pd0Zw dacXLeTnRR3cUIyJpGhNmcJ5EtgKm40vftHhk+yzy+XwWHcS+x8jMYLC+nn/MT79 HwrJCp7AmBUljpJiZ8Q4ZzLwTOw2Pt3d3OcyNzVSqBNeLrIhmcVCenn5xVB2XEr0 OT8CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBRPAAy23dN0h6beH36tvaEnCOssGTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENTS1kvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev VENTS1kvVHdBTXR0M1RkSWVtM2g5LXJiMmhKd2pyTEJrLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/yjANBgkqhkiG9w0BAQsFAAOCAQEAOuKm Okf4PvkpTG8h7hXRBTd2sV9nJldDapDdfEpo//6RAGN11oVregi4GTwfaz5BrxSD QwhmwzCX9rRolFBIeqA4JLlveQy/u3HaTJe+GUYSAhLufQZgxneTCz3+lmkNz3V3 cjJzLpLeHsGZLzuqtWRNgoi/Nhps6JjfXYXo0iUE2P1x7L2fA1yTBY2iHqdXa78a lEnvsy3vs2slAS87kuDtGCdYugtVjZf1ZNaLiLX9caThrtm4LL1j7FjZCLdnkJIe NgFIUL6l6I05MNnTHW2GmQnXvgH6PyrWCbRGjLwETWeEczpX0HdKE+TVA5h8rVgF WhiFV4vCkRcChznIdw== -----END CERTIFICATE-----Generated at Sat Apr 5 23:10:34 2025 by rpki-client