$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer File: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (raw, json) Hash identifier: MzHenGjoLUcNjoiVfdlbYk2J+bq8Saitp2yC91azKsU= Subject key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:29 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 139.223.0.0/16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6653 (0x19fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Feb 10 14:29:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:ec:7c:fc:c1:a8:cf:cc:b1:e4:0d:b1:20: 9b:fa:75:ac:85:35:eb:5c:6d:bb:64:57:1b:0a:98: b7:99:2d:e0:80:6a:b2:f6:69:98:ac:c3:f9:7e:57: f4:7b:e3:84:d0:b9:7b:a9:5f:83:df:c4:33:53:9f: 40:35:d0:f3:7c:c9:9f:ce:81:ef:e2:02:b2:cc:15: 5b:d3:be:59:1f:97:27:b0:6b:28:9d:b6:76:3b:22: 16:2f:1a:24:fc:c7:b4:04:da:6d:55:a9:f3:6c:f1: 21:92:b3:e2:88:a6:e0:42:58:3a:04:ff:be:b3:ee: d4:41:c4:4a:16:00:83:cc:04:e8:f8:c4:13:85:8f: 93:67:2d:de:91:21:74:35:25:1b:fd:fb:d8:0f:78: 0f:99:a7:4e:b4:86:fc:6e:56:ac:09:ae:6b:c6:ac: 43:a0:21:64:21:e5:86:23:87:50:92:a4:6b:bb:12: d7:c1:4b:db:4a:58:38:11:51:56:ab:e7:d8:71:78: 37:69:38:62:a0:c7:df:da:b3:12:9f:50:ec:6f:6b: 45:90:6e:a4:7c:f9:07:80:41:92:ca:0b:97:9a:82: 4a:20:cc:e5:29:35:29:82:f8:54:08:7e:a2:50:dd: 2d:7a:5a:a6:97:c9:43:74:93:95:5f:61:8a:fa:b2: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:01:d3:00:5b:28:db:fe:a2:f6:9f:43:86:58:82:5b:67:5f: 00:8d:71:d3:bb:29:30:cd:5e:06:52:01:9a:68:8f:e0:83:57: d8:7d:10:0d:0e:08:00:cc:e3:1f:f0:d2:7b:fa:da:cb:37:14: e3:a3:ce:00:98:d7:43:23:1d:6b:37:70:90:cc:ae:97:c2:64: ee:0a:c1:12:56:f9:70:da:ed:50:5e:48:a9:ec:3d:ca:59:cf: 1b:89:1e:a9:dc:2a:f3:c5:f3:af:62:d3:d1:f1:90:f4:32:83: 7d:a9:e3:82:8c:5a:a2:6c:22:fc:f4:46:c3:37:83:e1:1c:18: 98:b6:65:35:7e:2e:15:4b:e8:e4:08:9f:98:56:91:5e:9b:aa: 35:d5:d2:ae:3f:a1:76:b8:76:f0:2e:ca:a8:8f:d2:ed:74:82: 09:d8:b4:0e:6c:19:ab:64:b0:16:bc:20:5c:0d:53:15:ea:50: bc:da:af:e6:ff:0a:54:30:b6:f5:bf:fa:2e:2b:ac:87:24:53: fd:f2:ab:a0:03:36:b2:c0:86:e0:91:63:74:83:0c:32:32:c3: b1:33:97:e6:ba:24:d1:42:78:60:10:92:38:b3:88:c4:23:ad: a2:cb:d6:ab:2d:64:d9:1c:be:da:c8:5c:2d:5d:81:96:41:c5: 88:7a:10:23 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICGf0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDZBRTE0ODBDRUZDNUNFMDgwMjkyOTdGNEQ0OUNCQ0FCRDZDRTJG MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6W7Hz8wajPzLHkDbEg m/p1rIU161xtu2RXGwqYt5kt4IBqsvZpmKzD+X5X9HvjhNC5e6lfg9/EM1OfQDXQ 83zJn86B7+ICsswVW9O+WR+XJ7BrKJ22djsiFi8aJPzHtATabVWp82zxIZKz4oim 4EJYOgT/vrPu1EHEShYAg8wE6PjEE4WPk2ct3pEhdDUlG/372A94D5mnTrSG/G5W rAmua8asQ6AhZCHlhiOHUJKka7sS18FL20pYOBFRVqvn2HF4N2k4YqDH39qzEp9Q 7G9rRZBupHz5B4BBksoLl5qCSiDM5Sk1KYL4VAh+olDdLXpappfJQ3STlV9hivqy o4kCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBQGrhSAzvxc4IApKX9NScvKvWzi8jAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElTTkVULzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1RJU05FVC9CcTRVZ003OFhPQ0FLU2xfVFVuTHlyMXM0dkkubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi98wDQYJKoZIhvcNAQELBQADggEBACIB 0wBbKNv+ovafQ4ZYgltnXwCNcdO7KTDNXgZSAZpoj+CDV9h9EA0OCADM4x/w0nv6 2ss3FOOjzgCY10MjHWs3cJDMrpfCZO4KwRJW+XDa7VBeSKnsPcpZzxuJHqncKvPF 869i09HxkPQyg32p44KMWqJsIvz0RsM3g+EcGJi2ZTV+LhVL6OQIn5hWkV6bqjXV 0q4/oXa4dvAuyqiP0u10ggnYtA5sGatksBa8IFwNUxXqULzar+b/ClQwtvW/+i4r rIckU/3yq6ADNrLAhuCRY3SDDDIyw7Ezl+a6JNFCeGAQkjiziMQjraLL1qstZNkc vtrIXC1dgZZBxYh6ECM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:33 2025 by rpki-client on console.sobornost.net