$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer File: pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer (raw, json) Hash identifier: xFJXhzz5Jsz0PnuoaZ985MK/syZcHoFKvtKfBhm0mzA= Subject key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:15 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 131662 IP: 103.123.128.0/22 IP: 103.135.16.0/22 IP: 2403:a2c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13721 (0x3599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:15 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:39:a9:f9:a2:6f:cc:c9:57:41:b8:87:65: bd:b3:a3:a1:62:9c:5e:0c:c8:36:6d:70:2c:02:c3: 9c:28:a9:7f:41:66:19:c9:1e:2f:9f:25:50:96:08: ba:ac:80:f5:02:fd:90:19:05:37:10:14:4f:a4:55: 4d:66:12:8e:82:39:32:9a:9d:00:e0:31:c0:f9:6c: 81:92:ae:65:3b:34:18:3e:51:a6:b3:90:bb:a4:3c: f3:0e:1d:bc:27:58:30:11:e2:eb:85:f4:e4:4e:c8: 1f:70:d6:f5:d2:99:31:8b:17:3b:95:b0:54:f0:5c: 17:6d:b2:b0:2c:bc:83:63:99:07:7e:e6:b5:57:be: 73:b4:66:61:77:17:a1:d1:f3:8c:d2:d0:87:42:37: 45:49:ab:62:a6:da:1d:3c:f9:33:ae:4d:33:9e:ff: 9e:0f:46:c1:54:33:c2:56:da:af:cb:67:0b:e2:2f: 23:9f:4b:5e:b6:25:86:f5:08:66:fc:f2:67:0e:59: 4f:ef:73:c6:0a:57:a7:a4:b9:d4:ec:df:b2:c3:63: 02:c0:c4:97:5c:3e:4b:69:8a:43:a5:aa:e9:b1:96: 65:18:cd:b2:7d:ab:fd:47:f9:bb:1e:86:59:5d:b9: 20:41:96:ab:53:56:f7:69:91:39:28:2f:e8:f5:2a: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131662 sbgp-ipAddrBlock: critical IPv4: 103.123.128.0/22 103.135.16.0/22 IPv6: 2403:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption 1b:0b:7f:55:03:54:6a:ed:ee:09:1a:d5:5b:b8:52:db:48:57: f2:ce:25:93:0f:67:ba:a1:f7:66:d6:a7:bd:97:7f:e2:03:62: 43:ef:8d:4c:81:36:c0:61:b5:67:c7:37:69:f1:c3:7f:7a:fe: f6:2c:e1:70:fc:b4:00:86:89:2b:25:2d:70:25:5f:47:60:cf: 48:90:87:9c:b6:93:23:85:99:40:de:b7:24:ef:f8:2d:c0:00: b2:2d:39:57:5c:33:d8:92:b3:bf:9a:6f:42:f6:d3:2e:4a:9d: 58:61:d8:31:0f:ba:43:0f:04:ea:83:b5:ba:0c:81:3f:78:b1: 6b:bd:93:4b:36:50:24:2a:a4:a2:f7:71:93:10:c8:b7:00:17: 6c:f9:db:f3:40:a0:ae:aa:50:6f:3a:17:0b:1a:14:79:35:3e: d6:4b:de:4c:2b:95:6b:bc:c8:bf:5e:8f:13:c2:8b:c9:fa:6b: 58:3b:88:00:38:bf:6a:49:5a:50:e1:14:49:85:a2:ba:91:60: 6c:fa:6e:43:0f:70:a1:bb:43:81:d7:eb:62:89:8e:d3:41:cb: 01:28:a6:d0:c0:9a:48:e6:1d:f4:53:2d:98:d5:bc:39:a6:a9: 7e:45:21:5f:e6:b6:73:bc:54:a2:f8:38:1a:ee:a3:fc:64:0a: 41:3a:6a:c6 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICNZkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxNVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQTZFRDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANh1Oan5om/MyVdBuIdl vbOjoWKcXgzINm1wLALDnCipf0FmGckeL58lUJYIuqyA9QL9kBkFNxAUT6RVTWYS joI5MpqdAOAxwPlsgZKuZTs0GD5RprOQu6Q88w4dvCdYMBHi64X05E7IH3DW9dKZ MYsXO5WwVPBcF22ysCy8g2OZB37mtVe+c7RmYXcXodHzjNLQh0I3RUmrYqbaHTz5 M65NM57/ng9GwVQzwlbar8tnC+IvI59LXrYlhvUIZvzyZw5ZT+9zxgpXp6S51Ozf ssNjAsDEl1w+S2mKQ6Wq6bGWZRjNsn2r/Uf5ux6GWV25IEGWq1NW92mROSgv6PUq ZosCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBSm7RTbEhAaEl0xEtxMxWAtMNi0dzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJTy8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ERU5QQUlPL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgJOMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA ATAMAwQCZ3uAAwQCZ4cQMA0EAgACMAcDBQAkA6LAMA0GCSqGSIb3DQEBCwUAA4IB AQAbC39VA1Rq7e4JGtVbuFLbSFfyziWTD2e6ofdm1qe9l3/iA2JD741MgTbAYbVn xzdp8cN/ev72LOFw/LQAhokrJS1wJV9HYM9IkIectpMjhZlA3rck7/gtwACyLTlX XDPYkrO/mm9C9tMuSp1YYdgxD7pDDwTqg7W6DIE/eLFrvZNLNlAkKqSi93GTEMi3 ABds+dvzQKCuqlBvOhcLGhR5NT7WS95MK5VrvMi/Xo8TwovJ+mtYO4gAOL9qSVpQ 4RRJhaK6kWBs+m5DD3Chu0OB1+tiiY7TQcsBKKbQwJpI5h30Uy2Y1bw5pql+RSFf 5rZzvFSi+Dga7qP8ZApBOmrG -----END CERTIFICATE-----Generated at Sat Apr 5 03:39:23 2025 by rpki-client