$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer File: u4ipF4WngsjqPN3tPnwfCdp59kc.cer (raw, json) Hash identifier: pXA0oKPXgUjd7jiuIka+EJuR8oLDWwoaBUaj0sqPDB4= Subject key identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 1919 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:26 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 2.58.240.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 22:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6425 (0x1919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000 Validity Not Before: Feb 10 14:29:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:ea:68:5f:ff:a7:ce:0c:7f:7c:82:fa:32: 5c:d0:67:20:91:3f:4f:99:8e:44:5d:26:e6:8f:95: 35:95:2d:23:01:82:94:90:de:5a:53:88:d6:5b:91: ff:c7:15:d9:a8:d2:83:e1:fa:21:34:b7:ed:ef:67: 85:89:a7:6a:27:b2:08:bd:46:18:6c:7d:0e:03:09: ed:67:c2:37:89:81:91:75:48:34:0b:3b:b7:6b:d2: 1f:32:81:4f:45:e7:3c:89:f9:17:9d:80:86:2b:38: 46:6a:75:de:cd:65:25:79:aa:a9:53:50:df:f6:a6: e8:5e:9c:cd:90:26:bc:01:8e:67:cc:c2:95:c3:eb: fb:a3:77:e7:f3:f8:0f:e1:64:18:51:03:e8:e1:b1: cf:1b:b9:0b:1c:41:e4:3e:60:9a:57:b7:5f:85:64: 77:42:61:40:c1:2c:06:1f:1e:20:e6:b5:bf:2d:10: 8e:71:72:55:ca:74:83:d1:0f:da:4c:69:e9:b6:be: 87:0d:67:a1:88:c9:0e:3e:5f:e9:6d:cf:00:86:5b: 53:40:75:b6:3a:ff:2e:9f:32:3b:f8:37:b4:fc:a2: 58:eb:4a:cc:eb:47:b4:10:29:20:dd:eb:d3:8f:68: 39:13:91:6c:78:af:2f:89:70:f1:92:7c:57:af:dd: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 2.58.240.0/22 Signature Algorithm: sha256WithRSAEncryption 25:71:fc:99:47:a6:70:75:56:b4:ca:46:63:fb:b8:4d:d9:88: 17:55:42:7c:99:37:0b:b3:f2:55:86:bf:79:09:2d:e4:ce:ee: cd:55:73:01:51:0d:3d:04:75:01:a8:58:72:eb:7d:23:0a:d2: e7:9c:91:7b:97:1c:47:1f:93:26:54:24:e2:8d:66:dd:39:9e: 99:99:44:6d:52:9d:5c:57:0d:c9:7d:c5:59:d0:39:20:b3:73: 8a:30:a6:75:88:4a:d1:0b:f2:2d:fb:60:48:06:69:1a:11:a2: 97:89:15:12:ab:64:fe:03:90:45:3c:85:e1:6b:4c:07:7d:54: d3:76:69:08:61:25:d0:8d:97:c8:1a:0b:5c:df:1b:a9:d1:ab: ba:ee:26:16:90:60:0b:3d:af:12:a5:49:7d:85:44:5b:e8:76: c8:e9:4f:39:93:11:ec:ba:d1:e5:72:b0:08:3d:7d:99:5e:af: c1:61:91:7e:87:e6:6e:88:9d:b7:98:f3:19:2c:79:36:b6:8e: c8:d4:68:8e:99:b9:93:17:b3:63:01:f4:8f:b9:a7:e2:df:81: 59:03:d4:df:94:08:e8:0b:64:76:83:12:2f:f9:d8:89:39:20: a5:f1:8c:cd:76:cf:ac:f5:d3:99:17:6a:7d:93:75:23:42:d3: 6b:b1:58:6c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGRkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI1MDIxMDE0MjkyNloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQkI4OEE5MTc4NUE3ODJDOEVBM0NEREVEM0U3QzFGMDlEQTc5RjY0 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANnn6mhf/6fODH98gvoy XNBnIJE/T5mORF0m5o+VNZUtIwGClJDeWlOI1luR/8cV2ajSg+H6ITS37e9nhYmn aieyCL1GGGx9DgMJ7WfCN4mBkXVINAs7t2vSHzKBT0XnPIn5F52Ahis4Rmp13s1l JXmqqVNQ3/am6F6czZAmvAGOZ8zClcPr+6N35/P4D+FkGFED6OGxzxu5CxxB5D5g mle3X4Vkd0JhQMEsBh8eIOa1vy0QjnFyVcp0g9EP2kxp6ba+hw1noYjJDj5f6W3P AIZbU0B1tjr/Lp8yO/g3tPyiWOtKzOtHtBApIN3r049oORORbHivL4lw8ZJ8V6/d mNUCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBS7iKkXhaeCyOo83e0+fB8J2nn2RzAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0hPU1RJTi91NGlwRjRXbmdzanFQTjN0UG53ZkNkcDU5a2MubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjrwMA0GCSqGSIb3DQEBCwUAA4IBAQAl cfyZR6ZwdVa0ykZj+7hN2YgXVUJ8mTcLs/JVhr95CS3kzu7NVXMBUQ09BHUBqFhy 630jCtLnnJF7lxxHH5MmVCTijWbdOZ6ZmURtUp1cVw3JfcVZ0Dkgs3OKMKZ1iErR C/It+2BIBmkaEaKXiRUSq2T+A5BFPIXha0wHfVTTdmkIYSXQjZfIGgtc3xup0au6 7iYWkGALPa8SpUl9hURb6HbI6U85kxHsutHlcrAIPX2ZXq/BYZF+h+ZuiJ23mPMZ LHk2to7I1GiOmbmTF7NjAfSPuafi34FZA9TflAjoC2R2gxIv+diJOSCl8YzNds+s 9dOZF2p9k3UjQtNrsVhs -----END CERTIFICATE-----Generated at Sat Apr 5 18:58:39 2025 by rpki-client