$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer File: --Di_UF6N7G1a7N9oWg0Ipo5klY.cer (raw, json) Hash identifier: M0/Lq3Vjxil1mam4QxH175+Nz/xkTQslOQVIMa7/r8g= Subject key identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:01 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.69.52.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13381 (0x3445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FBE0E2FD417A37B1B56BB37DA16834229A399256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:32:43:d2:00:a1:2c:bd:98:3d:7a:a0:84: 0b:d2:21:94:04:a4:4f:a1:da:e9:fc:5b:e8:63:ad: 37:e6:c9:b1:af:cb:57:4c:66:85:af:52:97:34:49: a9:4b:d1:db:b4:4a:4a:78:72:dd:72:3d:29:eb:bb: c0:3e:56:fe:1b:ca:34:2d:f4:c2:a7:6a:a6:9e:27: e8:ae:1a:7b:05:b5:09:2d:1e:0b:ee:bb:c1:87:83: da:d3:6e:08:08:e4:60:f9:a3:62:17:73:eb:92:1d: 39:b9:9e:2a:40:38:8e:a6:6e:07:01:8d:01:93:a3: 63:19:46:89:99:be:b6:08:b0:01:9e:4a:04:7a:f1: ed:58:b3:10:4b:87:37:c4:bd:a9:6f:39:eb:11:18: 33:47:be:23:8e:af:fc:ac:ec:a3:e6:8b:9e:ee:4d: 37:dd:cb:72:a1:f5:10:31:78:f5:39:16:0f:43:30: dc:4f:5e:64:63:28:75:bd:77:2b:73:94:20:61:ce: b4:67:be:a6:0f:b5:cd:39:04:1e:54:ab:1c:05:fc: 1b:64:c8:c9:6d:6f:09:7b:07:cf:26:e9:0b:a9:e5: aa:33:01:4a:eb:f2:9a:d1:4b:ca:75:c0:11:42:a7: 12:ba:d8:df:94:a3:d4:2c:9a:3e:8b:4d:99:f2:4b: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.69.52.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:07:b7:1f:55:af:fe:82:c4:92:e8:74:81:68:09:65:3f:ed: 7a:a1:72:38:bc:50:24:44:c8:01:8a:c1:95:50:03:b3:ea:9c: 08:b9:3c:7a:80:1d:64:31:7e:0d:ff:8d:cb:3b:98:1a:32:d8: 3f:d1:51:64:d7:f4:34:fb:54:4b:6f:ba:3d:b5:57:08:04:4b: da:66:e2:33:92:e0:a0:3b:c1:17:45:ff:ee:49:17:da:85:4d: c2:ef:61:70:d8:b8:de:34:52:87:d3:55:4f:85:97:c5:7d:1c: 03:3d:b9:d2:b8:15:c7:ea:9c:f1:43:e1:10:68:af:db:17:fc: 1b:bd:fd:75:58:c8:69:f4:70:46:a4:f3:bb:3d:db:ec:49:f0: a2:49:cd:41:8f:fe:5a:4f:1c:7f:83:9d:94:8a:47:71:2a:d2: 2b:cc:7d:24:f3:68:36:d6:56:ed:33:6f:ff:6d:e1:21:48:e4: c8:78:1a:68:bd:87:43:af:ae:83:23:65:9b:eb:b9:a0:07:a4: 1e:46:a5:07:6c:88:70:23:eb:56:fb:e8:28:de:e8:f7:5c:ca: 08:f9:e4:19:49:fa:62:ec:26:54:92:0b:da:3e:b3:cd:70:da: 5f:11:87:6d:e6:1f:0c:a3:19:ca:e5:18:dd:d3:80:22:60:cb: a2:d8:6a:5e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICNEUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwMVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRkJFMEUyRkQ0MTdBMzdCMUI1NkJCMzdEQTE2ODM0MjI5QTM5OTI1 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANetMkPSAKEsvZg9eqCE C9IhlASkT6Ha6fxb6GOtN+bJsa/LV0xmha9SlzRJqUvR27RKSnhy3XI9Keu7wD5W /hvKNC30wqdqpp4n6K4aewW1CS0eC+67wYeD2tNuCAjkYPmjYhdz65IdObmeKkA4 jqZuBwGNAZOjYxlGiZm+tgiwAZ5KBHrx7VizEEuHN8S9qW856xEYM0e+I46v/Kzs o+aLnu5NN93LcqH1EDF49TkWD0Mw3E9eZGModb13K3OUIGHOtGe+pg+1zTkEHlSr HAX8G2TIyW1vCXsHzybpC6nlqjMBSuvymtFLynXAEUKnErrY35Sj1CyaPotNmfJL WVMCAwEAAaOCAlIwggJOMB0GA1UdDgQWBBT74OL9QXo3sbVrs32haDQimjmSVjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElMSUFORy8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9MSUxJQU5HLy0tRGlfVUY2TjdHMWE3TjlvV2cwSXBvNWtsWS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnRTQwDQYJKoZIhvcNAQELBQADggEB ABsHtx9Vr/6CxJLodIFoCWU/7Xqhcji8UCREyAGKwZVQA7PqnAi5PHqAHWQxfg3/ jcs7mBoy2D/RUWTX9DT7VEtvuj21VwgES9pm4jOS4KA7wRdF/+5JF9qFTcLvYXDY uN40UofTVU+Fl8V9HAM9udK4FcfqnPFD4RBor9sX/Bu9/XVYyGn0cEak87s92+xJ 8KJJzUGP/lpPHH+DnZSKR3Eq0ivMfSTzaDbWVu0zb/9t4SFI5Mh4Gmi9h0OvroMj ZZvruaAHpB5GpQdsiHAj61b76Cje6Pdcygj55BlJ+mLsJlSSC9o+s81w2l8Rh23m HwyjGcrlGN3TgCJgy6LYal4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:32 2025 by rpki-client on console.sobornost.net