$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DjrlLg48orgFrsL_itmlf3IHWqo.cer File: DjrlLg48orgFrsL_itmlf3IHWqo.cer (raw, json) Hash identifier: Zy7SNqYULCkq2Cj/tST6tTUeBzXkrjAbtw8lvYG+yes= Subject key identifier: 0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 358F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:14 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 152611 IP: 2401:b9a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13711 (0x358f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0E3AE52E0E3CA2B805AEC2FF8AD9A57F72075AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:71:9c:e8:cf:94:7b:f8:2c:51:fb:c5:bb: 7a:a7:6c:f6:00:17:f0:90:53:65:11:f7:2a:3b:68: e3:4d:97:32:5f:cb:73:74:4e:92:8d:3e:6d:91:3a: c5:17:a5:3f:c9:ad:07:3a:99:f6:b3:51:05:c8:be: 04:58:7a:bc:51:1c:77:5c:4f:df:79:46:21:2f:9c: 09:62:1d:50:84:e7:3e:6b:52:b1:ae:fe:61:29:c9: e5:d6:96:34:64:e0:42:bc:60:5e:19:7a:ca:6d:9b: 98:59:b9:5d:17:aa:b3:14:b3:07:b4:09:f6:fe:84: 36:73:8d:1e:89:e0:c2:17:1e:12:43:84:d3:c0:ed: ca:1a:e4:ea:55:22:d0:3b:6c:9a:35:56:3c:fb:3e: e5:4f:f3:d7:bd:6a:cc:c6:e2:ab:b5:aa:39:fa:ad: 50:f0:cc:64:ff:c2:1f:9a:1a:8f:0b:4b:3d:6c:4e: 0f:15:72:03:83:47:ad:91:7f:40:4c:94:b8:26:18: 09:a8:1b:f0:06:3a:c6:e5:19:14:f3:ab:fe:46:47: 81:f6:7c:44:52:af:67:20:d2:9b:ee:9c:27:2f:1a: 4f:41:42:56:7c:25:f7:1d:ef:1a:39:0f:01:95:1f: e8:62:bd:6f:40:5a:cd:cc:e4:13:6a:6e:33:a6:5b: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152611 sbgp-ipAddrBlock: critical IPv6: 2401:b9a0::/32 Signature Algorithm: sha256WithRSAEncryption 91:29:59:08:d0:58:56:ae:31:85:fd:bd:90:d5:a3:17:08:db: 99:e7:90:29:4f:77:5b:82:65:e0:5c:a1:fa:e1:a5:ca:8f:99: b5:9f:14:44:37:ec:c1:1a:d4:20:f9:78:61:8b:75:c5:d8:a8: b4:d7:e2:c6:3f:36:9d:a5:3d:75:54:eb:da:05:00:2a:08:73: 1e:7b:d0:8a:97:5b:62:7b:1d:61:5b:e0:08:bc:b3:c1:5d:3a: 89:f3:87:42:ae:99:49:12:92:4d:ea:0b:c9:32:f2:36:ae:30: 5f:5b:51:1c:b9:91:e4:3b:1a:a6:25:15:f9:7f:ee:98:9f:97: 31:2c:e5:74:5a:7f:b8:5d:6b:fc:b1:b5:e2:b0:c0:2a:e8:df: 22:d4:26:93:40:e5:a5:b5:e1:b4:55:c6:43:87:d3:df:16:f6: 42:1d:52:7c:8c:f5:1b:05:96:9a:fc:8b:9e:b5:d3:a8:3f:1b: c1:fc:5e:b6:92:07:8d:1f:f0:8f:cc:ec:95:da:1b:8f:c9:39: c8:6f:23:f9:b1:9f:8a:d7:45:63:50:b4:e1:18:bd:b6:9e:c8: b6:87:19:28:2d:24:3d:7d:e1:67:cc:b0:11:84:30:95:30:e8: bc:1b:38:64:21:01:8c:9f:f8:ec:c1:f1:11:a3:a9:5e:6d:bc: 77:94:6d:29 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICNY8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxNFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMEUzQUU1MkUwRTNDQTJCODA1QUVDMkZGOEFEOUE1N0Y3MjA3NUFB QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVQcZzoz5R7+CxR+8W7 eqds9gAX8JBTZRH3Kjto402XMl/Lc3ROko0+bZE6xRelP8mtBzqZ9rNRBci+BFh6 vFEcd1xP33lGIS+cCWIdUITnPmtSsa7+YSnJ5daWNGTgQrxgXhl6ym2bmFm5XReq sxSzB7QJ9v6ENnONHongwhceEkOE08Dtyhrk6lUi0DtsmjVWPPs+5U/z171qzMbi q7WqOfqtUPDMZP/CH5oajwtLPWxODxVyA4NHrZF/QEyUuCYYCagb8AY6xuUZFPOr /kZHgfZ8RFKvZyDSm+6cJy8aT0FCVnwl9x3vGjkPAZUf6GK9b0BazczkE2puM6Zb 0D0CAwEAAaOCAm0wggJpMB0GA1UdDgQWBBQOOuUuDjyiuAWuwv+K2aV/cgdaqjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0JFSURPVS9EanJsTGc0OG9yZ0Zyc0xfaXRtbGYzSUhXcW8ubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwJUIzAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBuaAwDQYJKoZIhvcNAQELBQADggEBAJEpWQjQWFauMYX9vZDVoxcI25nn kClPd1uCZeBcofrhpcqPmbWfFEQ37MEa1CD5eGGLdcXYqLTX4sY/Np2lPXVU69oF ACoIcx570IqXW2J7HWFb4Ai8s8FdOonzh0KumUkSkk3qC8ky8jauMF9bURy5keQ7 GqYlFfl/7piflzEs5XRaf7hda/yxteKwwCro3yLUJpNA5aW14bRVxkOH098W9kId UnyM9RsFlpr8i56106g/G8H8XraSB40f8I/M7JXaG4/JOchvI/mxn4rXRWNQtOEY vbaeyLaHGSgtJD194WfMsBGEMJUw6LwbOGQhAYyf+OzB8RGjqV5tvHeUbSk= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net