$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0SSAw3OkqF1efXJZMUQ137NEBEA.cer File: 0SSAw3OkqF1efXJZMUQ137NEBEA.cer (raw, json) Hash identifier: 9LuHoylXb2RDxbHQzEw6aSKHjJc4lX9s0NPskqH3fMQ= Subject key identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:04 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 18043 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D12480C373A4A85D5E7D7259314435DFB3440440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:97:33:72:99:25:93:68:76:6c:82:8b:5e: 33:b4:e5:e0:df:39:56:c1:24:d7:26:3d:02:51:c1: e7:af:b2:e3:3a:5d:80:71:26:85:e1:8f:0e:a6:9f: 40:b5:d2:c0:da:b2:fe:c5:8f:b3:80:3b:51:71:d1: 4b:1d:a1:c6:6d:31:77:65:55:d2:81:cc:2b:59:a6: 7b:34:7f:af:56:5e:fb:15:f3:2f:38:ba:b1:24:d7: 9e:e4:d3:cf:f7:60:2b:31:9e:2c:be:0c:c1:43:71: e2:73:73:6d:da:85:f9:59:3b:42:a0:92:c1:76:ed: 33:a6:0c:23:78:a4:d0:5a:a6:de:38:26:83:3a:f3: 00:3b:10:cd:d9:2a:6e:f5:66:ea:a8:61:60:1e:44: 14:46:c6:2f:c9:2b:29:79:66:27:38:83:87:45:67: f8:89:2b:dc:53:b6:f9:45:fe:02:7b:1b:c0:f3:1e: 89:dd:76:18:fa:79:37:7a:4d:27:02:df:3f:2b:72: 37:27:7e:ad:cb:94:7f:b6:fa:65:89:cc:1c:2d:d8: 66:99:54:6c:8f:ad:4d:85:80:ef:34:0a:62:20:ca: 9a:c7:a9:41:e5:9a:ae:db:e4:26:0e:46:00:27:a7: 34:18:27:17:4a:56:a6:f6:fe:3e:84:0e:93:1e:b9: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18043 Signature Algorithm: sha256WithRSAEncryption 8c:45:3c:52:ed:2f:8a:84:84:93:0b:07:34:dd:4b:fe:b2:3d: e4:a0:39:a4:6b:fe:2c:40:92:d3:2a:b4:58:d2:62:fa:d1:2a: 41:a0:51:be:4e:66:ba:b0:78:a6:7b:c8:08:59:cd:b3:31:af: 4e:12:cc:19:2a:bf:b5:bd:e0:e6:eb:f8:f5:6d:51:88:87:9c: a0:3e:64:81:38:2f:7a:9e:d0:45:10:d2:41:bf:f6:f0:16:b8: ba:c0:33:ba:b1:1f:16:f9:d7:f3:ec:d5:26:3a:cc:eb:3a:bf: 9e:27:b2:40:1c:17:ae:76:2d:01:2f:55:2d:83:e3:a8:05:a2: 0c:c1:97:c5:a2:31:be:c3:11:a4:75:6a:ba:aa:9f:7e:ac:e6: 8b:9a:04:23:c7:ac:63:50:3e:4d:87:02:92:df:10:2b:0f:d3: 9b:1a:ed:d9:22:0d:78:35:5a:1a:8d:b5:c4:9e:38:3b:b4:4e: 8b:86:10:55:30:33:15:33:36:de:c6:59:21:98:cd:c2:ed:6a: 6f:63:33:3c:15:e7:3b:77:ca:49:be:2b:4f:e3:24:d2:d0:24: a9:98:07:10:e9:ac:7e:65:4f:00:cc:42:39:56:65:01:fa:71: 09:e1:97:96:ad:05:2e:b3:15:a3:60:41:29:d9:9f:04:9b:86: 9b:ee:13:87 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwNFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRDEyNDgwQzM3M0E0QTg1RDVFN0Q3MjU5MzE0NDM1REZCMzQ0MDQ0 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMH3lzNymSWTaHZsgote M7Tl4N85VsEk1yY9AlHB56+y4zpdgHEmheGPDqafQLXSwNqy/sWPs4A7UXHRSx2h xm0xd2VV0oHMK1mmezR/r1Ze+xXzLzi6sSTXnuTTz/dgKzGeLL4MwUNx4nNzbdqF +Vk7QqCSwXbtM6YMI3ik0Fqm3jgmgzrzADsQzdkqbvVm6qhhYB5EFEbGL8krKXlm JziDh0Vn+Ikr3FO2+UX+AnsbwPMeid12GPp5N3pNJwLfPytyNyd+rcuUf7b6ZYnM HC3YZplUbI+tTYWA7zQKYiDKmsepQeWartvkJg5GACenNBgnF0pWpvb+PoQOkx65 fjMCAwEAAaOCAkgwggJEMB0GA1UdDgQWBBTRJIDDc6SoXV59clkxRDXfs0QEQDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0VUT1AvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev R0VUT1AvMFNTQXczT2txRjFlZlhKWk1VUTEzN05FQkVBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJGezANBgkqhkiG9w0BAQsFAAOCAQEAjEU8Uu0vioSE kwsHNN1L/rI95KA5pGv+LECS0yq0WNJi+tEqQaBRvk5murB4pnvICFnNszGvThLM GSq/tb3g5uv49W1RiIecoD5kgTgvep7QRRDSQb/28Ba4usAzurEfFvnX8+zVJjrM 6zq/nieyQBwXrnYtAS9VLYPjqAWiDMGXxaIxvsMRpHVquqqffqzmi5oEI8esY1A+ TYcCkt8QKw/Tmxrt2SINeDVaGo21xJ44O7ROi4YQVTAzFTM23sZZIZjNwu1qb2Mz PBXnO3fKSb4rT+Mk0tAkqZgHEOmsfmVPAMxCOVZlAfpxCeGXlq0FLrMVo2BBKdmf BJuGm+4Thw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:32 2025 by rpki-client on console.sobornost.net