$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer File: Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer (raw, json) Hash identifier: cF22nYKtUVYFjRuiaji7jiPXkxu9vk9lu1rF82NLCjc= Subject key identifier: 62:5D:84:5D:79:53:51:9D:71:9E:BD:CC:92:C1:76:32:17:70:22:CF Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:26 +0000 Certificate not after: Fri 09 Jan 2026 15:30:37 +0000 Subordinate resources: IP: 161.248.134.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6585 (0x19b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:26 2025 GMT Not After : Jan 9 15:30:37 2026 GMT Subject: CN=625D845D7953519D719EBDCC92C17632177022CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:15:87:c6:b8:2d:09:c2:c8:eb:14:b7:69:39: 3f:48:9b:9f:20:ba:7e:85:4d:db:60:87:48:3a:44: 1a:b0:54:16:49:64:19:ba:f1:1f:c0:cc:54:ea:d7: 19:c0:97:fb:8e:86:1d:a9:a7:c9:fb:7a:6f:44:e4: 09:e3:34:ff:1c:e9:73:86:b8:d4:01:34:40:e5:9f: 89:80:c8:dc:30:ea:ae:5f:ba:b6:ab:e1:53:8e:4d: f5:9f:cd:20:43:8a:09:41:f7:43:b4:ec:57:de:b4: 7b:5e:18:e4:7d:7a:c1:fd:85:0c:80:3f:75:95:eb: 47:7e:e9:2f:f3:20:f2:bd:db:6f:98:e9:fb:10:3e: 27:48:da:6a:e0:18:76:1c:99:ca:7f:e8:6b:18:f0: a7:3d:f7:d8:91:45:08:c4:86:39:5c:dc:7b:10:d3: 91:c7:5e:2c:1d:61:a9:29:b3:63:6f:96:b9:61:83: e5:0a:f4:dd:c0:39:3c:a1:8f:75:2a:1e:68:3f:80: 60:e4:b2:03:4e:cc:b5:ee:01:7d:18:3a:22:a6:ab: 9b:3f:49:0b:1b:d1:0e:43:4d:06:ab:59:3d:b8:11: 4a:6e:ea:cc:77:f3:2a:27:9a:83:bf:dc:7c:f0:83: 17:ca:3f:2a:aa:a5:4b:8a:36:f3:a9:78:73:9a:ee: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5D:84:5D:79:53:51:9D:71:9E:BD:CC:92:C1:76:32:17:70:22:CF X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.134.0/23 Signature Algorithm: sha256WithRSAEncryption 26:f7:50:e3:79:a8:7e:2c:2f:40:bf:ee:a6:64:3c:e2:11:a2: ae:89:ae:f8:dc:1b:f9:88:4f:e7:45:46:e4:0c:35:80:b0:ef: 70:ba:84:1a:a5:c5:58:df:a9:d2:b0:67:cb:b2:9c:4b:e8:a1: 7d:a1:8c:a1:c3:f3:43:09:bc:34:a9:7a:74:0e:d6:50:7e:7a: 39:1e:49:50:8a:ee:4a:f0:b7:7a:18:22:c4:9c:11:a8:4e:a6: 6b:23:e2:83:0d:6d:53:90:29:11:1d:9e:01:98:35:cf:02:7e: 53:98:71:d5:52:43:2b:12:6c:d8:69:15:af:6a:a3:bf:5e:03: f4:57:24:91:e8:9b:9f:4d:f8:9c:25:6c:3f:50:8a:c3:38:a9: f7:ac:99:9f:da:9a:70:e4:f6:0a:c8:0a:4b:95:2d:3d:2a:11: c7:69:6a:82:7e:15:e2:26:17:39:4f:cc:5c:2d:b6:52:0c:67: a4:88:66:90:d7:89:37:ed:be:f0:e2:11:4c:fc:48:30:ce:90: 24:dd:a7:fd:2e:a7:31:41:b3:a2:36:df:e5:ea:05:12:b2:72: ab:ec:b6:0c:65:7e:11:a5:89:c4:97:54:18:4e:7a:23:cf:6a: 5e:42:10:6a:d1:f8:a1:11:87:e5:fe:ea:b0:bc:26:ce:9e:41: f9:95:a3:1b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGbkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyNloXDTI2MDEwOTE1MzAzN1owMzEx MC8GA1UEAxMoNjI1RDg0NUQ3OTUzNTE5RDcxOUVCRENDOTJDMTc2MzIxNzcwMjJD RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAP0Vh8a4LQnCyOsUt2k5 P0ibnyC6foVN22CHSDpEGrBUFklkGbrxH8DMVOrXGcCX+46GHamnyft6b0TkCeM0 /xzpc4a41AE0QOWfiYDI3DDqrl+6tqvhU45N9Z/NIEOKCUH3Q7TsV960e14Y5H16 wf2FDIA/dZXrR37pL/Mg8r3bb5jp+xA+J0jaauAYdhyZyn/oaxjwpz332JFFCMSG OVzcexDTkcdeLB1hqSmzY2+WuWGD5Qr03cA5PKGPdSoeaD+AYOSyA07Mte4BfRg6 Iqarmz9JCxvRDkNNBqtZPbgRSm7qzHfzKieag7/cfPCDF8o/KqqlS4o286l4c5ru MlkCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBRiXYRdeVNRnXGevcySwXYyF3AizzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElORVBBWVRX LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0xJTkVQQVlUVy9ZbDJFWFhsVFVaMXhucjNNa3NGMk1oZHdJczgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBofiGMA0GCSqGSIb3DQEBCwUA A4IBAQAm91Djeah+LC9Av+6mZDziEaKuia743Bv5iE/nRUbkDDWAsO9wuoQapcVY 36nSsGfLspxL6KF9oYyhw/NDCbw0qXp0DtZQfno5HklQiu5K8Ld6GCLEnBGoTqZr I+KDDW1TkCkRHZ4BmDXPAn5TmHHVUkMrEmzYaRWvaqO/XgP0VySR6JufTficJWw/ UIrDOKn3rJmf2ppw5PYKyApLlS09KhHHaWqCfhXiJhc5T8xcLbZSDGekiGaQ14k3 7b7w4hFM/EgwzpAk3af9LqcxQbOiNt/l6gUSsnKr7LYMZX4RpYnEl1QYTnojz2pe QhBq0fihEYfl/uqwvCbOnkH5laMb -----END CERTIFICATE-----Generated at Sat Apr 5 12:57:08 2025 by rpki-client