$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer File: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (raw, json) Hash identifier: I98MEeQC1Jbr03BWKzFcgcrkHcX7dDxsjuJumwSJ2v4= Subject key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 160.25.104.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 02:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6621 (0x19dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:09:61:de:c2:c3:69:3b:42:f8:25:48:a7: 2f:35:12:b3:ea:fd:b6:2d:f6:35:75:49:93:6b:dd: 73:75:a9:48:35:28:de:5f:7d:62:bc:df:4d:54:e5: e9:7b:74:e6:06:c0:1c:52:27:a5:d9:de:7b:9f:4e: 80:68:40:c9:0b:1c:0e:c8:cb:69:a0:21:20:fb:ff: 58:99:b8:dc:a7:1a:97:70:0a:85:0d:14:51:94:6e: 80:3a:9c:d2:0d:c1:ee:2e:02:bf:b6:1b:87:6d:63: 21:7a:ec:09:96:bf:c1:e4:79:8d:53:27:d3:a9:3c: 11:95:6c:a1:08:9f:05:cd:ce:90:6c:cf:c6:db:5b: 09:a0:84:4e:fb:55:1e:0d:aa:b9:40:45:00:7c:be: 80:a0:cd:5b:86:64:98:6d:c2:3c:6d:55:9f:b0:b6: 60:39:86:33:d0:4f:75:0c:0c:f6:21:c4:11:6f:35: 5b:ec:a7:cb:11:11:a6:93:7e:9a:5a:75:4c:71:dc: e1:4a:f1:9c:5f:88:dd:d9:4a:fa:c9:a2:a5:b1:b0: 1b:56:b5:81:7b:61:ea:54:88:d1:35:f9:53:42:fd: 96:db:f9:89:25:77:c1:ea:ee:c3:e8:84:77:fc:09: 4e:b3:c2:12:70:9c:0e:60:0b:f2:4c:c9:c9:06:fd: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/23 Signature Algorithm: sha256WithRSAEncryption 83:8b:ff:98:e1:b8:af:ef:51:9c:e6:8c:89:20:aa:fb:36:6e: 5e:e8:8f:9c:b8:0b:3e:ff:bc:14:12:da:fb:2e:85:6e:d8:ea: 5d:42:b6:a4:ac:53:22:8a:42:a8:9e:f9:44:53:3e:96:17:b0: f5:65:be:1b:dd:79:3a:36:60:cd:c2:8f:5f:72:03:a2:9d:58: ba:30:85:4b:88:b0:d6:7c:84:01:ab:da:e9:64:9a:c9:cf:6f: 1e:02:6c:9d:cc:83:e1:66:09:ec:03:93:67:4e:91:2b:90:1e: b8:f8:1a:1b:d5:d5:55:6c:f4:51:6c:ae:d9:59:87:8e:03:85: e5:7b:3d:fd:38:81:6f:be:92:bb:75:4b:af:69:50:38:cc:d6: b2:c8:3e:cb:eb:d6:b1:38:b4:0c:36:06:4d:79:0b:3b:06:34: a8:10:06:ba:cb:45:16:50:c9:03:3e:ef:cb:f7:a1:4c:e7:e3: dd:41:5a:e8:c2:ca:72:32:21:33:99:66:86:90:0a:2b:b8:85: e5:f6:b2:a0:5b:1e:b8:77:f6:d0:28:d1:b7:c2:75:12:e1:62: 5b:4f:bd:15:e1:3f:2e:89:4a:d1:66:14:27:af:ed:f8:15:be: 57:0d:02:bb:09:fc:a0:93:30:f5:04:a6:79:10:2a:05:84:1f: 1e:dc:7d:9e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICGd0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoN0U5Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOPyCWHewsNpO0L4JUin LzUSs+r9ti32NXVJk2vdc3WpSDUo3l99YrzfTVTl6Xt05gbAHFInpdnee59OgGhA yQscDsjLaaAhIPv/WJm43Kcal3AKhQ0UUZRugDqc0g3B7i4Cv7Ybh21jIXrsCZa/ weR5jVMn06k8EZVsoQifBc3OkGzPxttbCaCETvtVHg2quUBFAHy+gKDNW4ZkmG3C PG1Vn7C2YDmGM9BPdQwM9iHEEW81W+ynyxERppN+mlp1THHc4UrxnF+I3dlK+smi pbGwG1a1gXth6lSI0TX5U0L9ltv5iSV3weruw+iEd/wJTrPCEnCcDmAL8kzJyQb9 vl8CAwEAAaOCAlIwggJOMB0GA1UdDgQWBBR+nO8nyN7RNQazOZ2ZLs/2JrV5UTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVDSC8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9DQ0VURUNIL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgGWgwDQYJKoZIhvcNAQELBQADggEB AIOL/5jhuK/vUZzmjIkgqvs2bl7oj5y4Cz7/vBQS2vsuhW7Y6l1CtqSsUyKKQqie +URTPpYXsPVlvhvdeTo2YM3Cj19yA6KdWLowhUuIsNZ8hAGr2ulkmsnPbx4CbJ3M g+FmCewDk2dOkSuQHrj4GhvV1VVs9FFsrtlZh44DheV7Pf04gW++krt1S69pUDjM 1rLIPsvr1rE4tAw2Bk15CzsGNKgQBrrLRRZQyQM+78v3oUzn491BWujCynIyITOZ ZoaQCiu4heX2sqBbHrh39tAo0bfCdRLhYltPvRXhPy6JStFmFCev7fgVvlcNArsJ /KCTMPUEpnkQKgWEHx7cfZ4= -----END CERTIFICATE-----Generated at Sat Apr 5 23:11:59 2025 by rpki-client