$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer File: mgzAu2MdFRMQI4SQg9lBotvN-mU.cer (raw, json) Hash identifier: x0WT8eObVlmm4GTSYKJ31won1GAcUy8soWov4ATFFtM= Subject key identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Tue 14 Oct 2025 15:30:23 +0000 Subordinate resources: IP: 160.191.4.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 16:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6607 (0x19cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Oct 14 15:30:23 2025 GMT Subject: CN=9A0CC0BB631D15131023849083D941A2DBCDFA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:ce:e1:7c:11:28:c1:21:f3:2e:94:75:b0: 79:64:71:ea:79:7d:3d:9d:1e:c5:1b:c1:3c:f0:5f: f2:25:0b:cb:ae:16:41:5a:bd:23:98:f0:a8:71:9c: 74:02:f1:4e:47:e1:02:a0:cb:4f:3a:bd:4e:45:c4: 71:13:e6:e6:9b:3c:a6:66:d4:96:ce:8f:38:5b:49: 8e:55:5e:35:e3:34:10:86:2e:ad:0c:0c:b2:e3:74: f5:b0:c9:d5:64:76:a2:ea:68:3b:27:6f:01:37:c0: ee:ce:19:dc:03:bf:07:f1:5d:13:14:7d:69:77:d7: 55:b0:18:4b:14:71:59:c8:51:b1:5c:62:ee:93:0a: 03:70:e6:29:53:52:f6:d7:b5:1b:35:75:fb:68:77: ca:7b:3e:9f:bd:43:16:9b:e9:46:0c:db:ee:e6:f5: 2e:6f:51:ca:6d:a1:4f:79:40:ef:46:43:03:d3:51: a9:3c:81:5c:5c:eb:80:2d:f4:6f:b0:8f:d7:c2:f2: 3f:7a:9a:81:30:89:01:89:eb:07:e6:01:c4:84:0a: 5e:9a:21:7a:d8:d7:f7:a0:f2:35:04:eb:91:c8:e1: a5:75:73:d7:c0:30:3c:87:74:c7:85:57:f8:97:3e: 2b:78:01:79:5b:33:d8:13:90:7f:a6:ff:19:a5:6a: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.4.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:51:e1:ed:d0:e7:64:19:3d:aa:5f:be:78:d8:a8:ce:23:04: 9a:6b:13:50:e5:fc:51:a1:e8:b2:27:80:38:c6:e0:94:15:64: fa:00:c9:b7:7c:f9:36:49:28:df:fd:ab:6b:06:53:af:6d:72: de:a4:19:dc:f8:86:46:c2:9a:18:5c:91:2b:1c:08:fe:8e:90: 9d:0d:c4:4f:8a:62:ea:2a:58:24:5f:7c:a4:bb:f9:11:c6:81: ee:6b:a8:9f:d9:ae:ea:ee:c6:b6:16:08:55:52:df:5e:62:f7: 75:01:ce:aa:70:48:2c:99:dc:36:cb:e8:b6:f4:69:94:26:08: 47:10:a1:f4:94:93:67:60:37:50:5e:d5:46:6b:d6:80:a8:92: 28:69:17:81:f5:06:57:78:c8:fc:89:f6:d1:99:58:e1:b9:d4: 21:36:60:f2:03:44:42:ad:32:ca:6f:82:42:1a:d9:75:a5:b8: ec:aa:12:ba:09:ee:47:d2:f1:7c:72:e7:2c:ee:ed:ca:b5:2a: 94:23:92:db:01:05:9f:2b:e4:88:58:2f:c9:bb:77:a8:ed:b5: ef:3b:05:c2:53:d9:dd:1b:25:2c:17:c2:20:5e:15:8c:4a:c1: af:b2:01:06:a0:3b:e1:a6:54:c8:0f:04:6e:3a:7d:a0:d2:d2: 6a:38:c3:e7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICGc8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MTAxNDE1MzAyM1owMzEx MC8GA1UEAxMoOUEwQ0MwQkI2MzFEMTUxMzEwMjM4NDkwODNEOTQxQTJEQkNERkE2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK27zuF8ESjBIfMulHWw eWRx6nl9PZ0exRvBPPBf8iULy64WQVq9I5jwqHGcdALxTkfhAqDLTzq9TkXEcRPm 5ps8pmbUls6POFtJjlVeNeM0EIYurQwMsuN09bDJ1WR2oupoOydvATfA7s4Z3AO/ B/FdExR9aXfXVbAYSxRxWchRsVxi7pMKA3DmKVNS9te1GzV1+2h3yns+n71DFpvp Rgzb7ub1Lm9Rym2hT3lA70ZDA9NRqTyBXFzrgC30b7CP18LyP3qagTCJAYnrB+YB xIQKXpohetjX96DyNQTrkcjhpXVz18AwPId0x4VX+Jc+K3gBeVsz2BOQf6b/GaVq mCkCAwEAAaOCAk4wggJKMB0GA1UdDgQWBBSaDMC7Yx0VExAjhJCD2UGi2836ZTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1ZS0wvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SU1ZS0wvbWd6QXUyTWRGUk1RSTRTUWc5bEJvdHZOLW1VLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/BDANBgkqhkiG9w0BAQsFAAOCAQEAilHh 7dDnZBk9ql++eNioziMEmmsTUOX8UaHosieAOMbglBVk+gDJt3z5Nkko3/2rawZT r21y3qQZ3PiGRsKaGFyRKxwI/o6QnQ3ET4pi6ipYJF98pLv5EcaB7muon9mu6u7G thYIVVLfXmL3dQHOqnBILJncNsvotvRplCYIRxCh9JSTZ2A3UF7VRmvWgKiSKGkX gfUGV3jI/In20ZlY4bnUITZg8gNEQq0yym+CQhrZdaW47KoSugnuR9LxfHLnLO7t yrUqlCOS2wEFnyvkiFgvybt3qO217zsFwlPZ3RslLBfCIF4VjErBr7IBBqA74aZU yA8Ebjp9oNLSajjD5w== -----END CERTIFICATE-----Generated at Sat Apr 5 12:56:45 2025 by rpki-client