$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/U0x2J0ozCwce_SDbBfbQQpKTdD4.cer File: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (raw, json) Hash identifier: 8s+ATDf5L1jasQZaZTJXWpmX3UYe3O9PjMF1aH+ucz0= Subject key identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 191B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:26 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 2001:7fa:1::/48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 07:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6427 (0x191b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=534C76274A330B071EFD20DB05F6D0429293743E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:16:eb:ee:2b:29:44:81:14:a2:40:4a:d9: 5c:e5:7f:5c:43:b3:3f:f1:9e:d5:25:2e:a7:52:b7: e4:8a:b2:4d:18:08:59:97:ec:92:86:2f:9c:a8:7e: bd:18:0d:18:4b:13:49:fd:71:5a:63:4a:97:0a:01: 56:40:85:7f:7d:ec:62:84:15:87:12:c2:54:51:ef: 86:77:a4:20:c5:a4:d5:a2:99:9e:43:22:89:88:6a: 93:5c:d5:0d:74:9f:b4:dd:e5:7c:76:2e:35:de:22: d5:f2:2e:7a:46:38:b7:cf:07:ba:5f:f7:5e:5b:e4: 91:22:6f:31:2d:0e:2c:78:82:69:25:f0:55:a6:96: 46:fe:3a:14:af:41:cb:db:40:11:5a:54:e1:bd:32: c4:cd:a9:46:28:a3:0f:73:1d:08:ea:eb:83:63:09: 64:3c:57:63:89:7f:36:3b:c6:47:17:ca:42:27:0b: cb:3a:dc:36:7f:eb:a0:da:68:48:22:ec:52:fa:6c: c7:39:24:e7:ef:da:c3:be:53:44:22:f1:75:27:ea: 18:53:1c:05:2f:02:fe:3a:d7:b0:d4:25:1a:5d:fe: 6d:25:39:96:16:40:f5:70:c2:c0:5e:c4:9c:e3:5f: f7:a8:73:44:ab:9c:6a:1b:90:95:f3:61:f2:d8:58: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:7fa:1::/48 Signature Algorithm: sha256WithRSAEncryption ba:54:bd:46:86:89:b6:6d:a9:18:7a:2b:92:bb:62:13:ac:7e: 7b:da:a7:4f:ea:dd:09:a3:86:d5:6f:bc:53:71:41:d3:0b:37: dd:f0:e5:b5:97:2c:f1:8d:8e:74:ba:18:74:63:a4:83:ff:a2: 15:9b:12:27:a0:90:91:17:d6:17:cc:8a:a0:fa:b4:a9:6d:f1: 23:d5:a1:26:8c:72:85:75:56:45:dd:14:bb:3e:05:df:62:fb: 6a:c6:49:09:4e:db:eb:7b:77:c8:54:c1:9e:9a:a0:e9:a0:73: fc:2f:3d:ec:9b:e8:49:38:29:f4:a6:a0:4e:36:57:11:66:5a: 5a:b9:09:74:a7:fd:69:fa:07:85:28:ea:8c:4a:82:08:f8:2e: 23:9a:49:e8:46:a3:d3:4e:20:0f:35:76:9b:6b:4f:fd:b5:99: 90:ae:8f:ae:f1:7f:9d:68:66:2b:34:85:c3:e1:d8:32:6d:8c: 69:4f:b4:0d:7d:d7:3c:98:db:0b:28:89:d9:e8:00:2d:c2:d9: 7b:20:72:4e:19:8b:82:fc:c2:99:d0:d6:be:db:85:ca:92:ed: b7:70:9a:e8:64:4b:a5:72:fd:8f:f6:54:a3:51:ca:77:c3:07: 19:03:82:6c:67:07:e0:c4:5e:d9:25:1a:a3:7d:96:e7:cf:ac: ac:56:c0:5d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICGRswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI1MDIxMDE0MjkyNloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNTM0Qzc2Mjc0QTMzMEIwNzFFRkQyMERCMDVGNkQwNDI5MjkzNzQz RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFyFuvuKylEgRSiQErZ XOV/XEOzP/Ge1SUup1K35IqyTRgIWZfskoYvnKh+vRgNGEsTSf1xWmNKlwoBVkCF f33sYoQVhxLCVFHvhnekIMWk1aKZnkMiiYhqk1zVDXSftN3lfHYuNd4i1fIuekY4 t88Hul/3XlvkkSJvMS0OLHiCaSXwVaaWRv46FK9By9tAEVpU4b0yxM2pRiijD3Md COrrg2MJZDxXY4l/NjvGRxfKQicLyzrcNn/roNpoSCLsUvpsxzkk5+/aw75TRCLx dSfqGFMcBS8C/jrXsNQlGl3+bSU5lhZA9XDCwF7EnONf96hzRKucahuQlfNh8thY wJECAwEAAaOCAlEwggJNMB0GA1UdDgQWBBRTTHYnSjMLBx79INsF9tBCkpN0PjAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SElORVQvVTB4Mkowb3pDd2NlX1NEYkJmYlFRcEtUZEQ0Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABB/oAATANBgkqhkiG9w0BAQsFAAOCAQEA ulS9RoaJtm2pGHorkrtiE6x+e9qnT+rdCaOG1W+8U3FB0ws33fDltZcs8Y2OdLoY dGOkg/+iFZsSJ6CQkRfWF8yKoPq0qW3xI9WhJoxyhXVWRd0Uuz4F32L7asZJCU7b 63t3yFTBnpqg6aBz/C897JvoSTgp9KagTjZXEWZaWrkJdKf9afoHhSjqjEqCCPgu I5pJ6Eaj004gDzV2m2tP/bWZkK6PrvF/nWhmKzSFw+HYMm2MaU+0DX3XPJjbCyiJ 2egALcLZeyByThmLgvzCmdDWvtuFypLtt3Ca6GRLpXL9j/ZUo1HKd8MHGQOCbGcH 4MRe2SUao32W58+srFbAXQ== -----END CERTIFICATE-----Generated at Sun Apr 6 06:50:34 2025 by rpki-client