$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer File: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (raw, json) Hash identifier: UjZTOIWXU1rMa/a9zSSs8eyBYkf2wSmzDVHfqvQXghw= Subject key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 64.78.160.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6647 (0x19f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Feb 10 14:29:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:f1:b8:2d:ca:d3:63:08:2b:e4:0f:82:12: fe:c1:1c:8e:b5:21:63:8c:1f:64:ab:77:95:70:ae: ba:24:06:0f:77:bd:cb:89:75:4e:ac:fc:75:1e:65: 3a:13:32:85:3c:59:fe:68:7e:d7:05:83:d4:ea:48: 3b:01:8f:8b:12:db:24:40:35:ac:da:b9:fb:61:16: 18:fd:66:cf:0f:c3:e1:76:93:cf:bd:63:f6:16:c2: 64:b7:90:cc:0b:51:3e:7c:b7:4c:83:5a:9c:36:9e: 0a:bf:5e:ae:8d:79:01:a4:d1:09:76:81:1b:bf:9c: d6:7c:56:df:52:fe:0d:8b:36:28:f6:05:61:9e:e2: 70:6e:df:11:7d:36:d5:ce:4b:89:e4:ae:49:15:01: f7:56:99:83:02:43:90:ef:46:3b:95:08:54:ea:f7: 4c:61:96:c9:b1:b5:45:e6:9b:9f:db:b0:40:22:b9: fc:b6:3b:12:d0:2f:f5:11:d6:af:79:d4:b1:85:71: 53:ae:d0:3f:1e:69:ff:bc:5b:80:c7:9c:a5:1b:53: 27:af:76:1b:b6:68:7e:04:85:72:18:65:fb:2b:8a: db:34:d4:00:ec:75:4c:6f:72:1f:d8:dd:2e:43:a3: 3b:67:f9:7a:6b:11:27:ba:a4:12:d1:04:ca:9c:64: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 64.78.160.0/20 Signature Algorithm: sha256WithRSAEncryption 34:d8:de:3a:a7:02:eb:3c:2a:5c:ab:ef:4f:14:37:1c:e8:72: 4a:5f:48:f1:0a:85:57:89:ee:e9:c5:2d:e4:92:cd:e1:13:f8: fc:fb:29:45:64:70:81:31:83:e8:c1:ca:4a:66:cc:18:12:03: b4:e4:d4:4c:56:0c:55:2a:3d:89:ed:38:19:39:df:ec:70:68: 3d:94:33:f6:1d:a1:2d:3d:71:dc:1c:11:f8:0f:57:71:a0:86: 6e:86:b0:06:06:6d:45:9c:14:92:f9:8f:12:81:88:96:fe:7d: c8:d9:36:8f:07:dc:be:2e:4f:fa:a8:8e:23:92:ee:3b:78:6f: 97:92:c3:dd:ff:86:54:90:8d:6c:38:3d:73:ca:33:1d:1b:81: 9c:2c:0d:ee:c8:37:48:37:d5:e3:2b:5e:97:42:85:7c:6a:83: 26:1b:30:9a:7e:e8:9b:d5:d1:32:fb:bf:ac:d9:f1:9a:02:a0: f9:09:f4:05:5e:6f:44:44:17:0e:31:1b:81:17:b7:aa:c1:b9: 90:de:0f:56:6e:df:93:9d:a0:e5:d3:99:cf:67:b0:c9:54:f8: 2c:6e:23:e9:d8:51:ae:c6:bf:2a:6a:c7:43:fe:a3:63:f8:3f: 38:ac:b2:6a:1a:12:b7:af:37:90:db:99:2a:c6:8a:cb:2a:17: 46:da:e8:d2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGfcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMzczMEQ5QTE5NUFCNzEwMjg2NzIyQ0U1Q0NBNDY3Q0ZCQTVCRDQ5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQY8bgtytNjCCvkD4IS /sEcjrUhY4wfZKt3lXCuuiQGD3e9y4l1Tqz8dR5lOhMyhTxZ/mh+1wWD1OpIOwGP ixLbJEA1rNq5+2EWGP1mzw/D4XaTz71j9hbCZLeQzAtRPny3TINanDaeCr9ero15 AaTRCXaBG7+c1nxW31L+DYs2KPYFYZ7icG7fEX021c5LieSuSRUB91aZgwJDkO9G O5UIVOr3TGGWybG1Reabn9uwQCK5/LY7EtAv9RHWr3nUsYVxU67QPx5p/7xbgMec pRtTJ692G7ZofgSFchhl+yuK2zTUAOx1TG9yH9jdLkOjO2f5emsRJ7qkEtEEypxk EmUCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBQ3MNmhlatxAoZyLOXMpGfPulvUlDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09N LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL05JTUJVU0NPTS9OekRab1pXcmNRS0djaXpsektSbno3cGIxSlEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQE6gMA0GCSqGSIb3DQEBCwUA A4IBAQA02N46pwLrPCpcq+9PFDcc6HJKX0jxCoVXie7pxS3kks3hE/j8+ylFZHCB MYPowcpKZswYEgO05NRMVgxVKj2J7TgZOd/scGg9lDP2HaEtPXHcHBH4D1dxoIZu hrAGBm1FnBSS+Y8SgYiW/n3I2TaPB9y+Lk/6qI4jku47eG+XksPd/4ZUkI1sOD1z yjMdG4GcLA3uyDdIN9XjK16XQoV8aoMmGzCafuib1dEy+7+s2fGaAqD5CfQFXm9E RBcOMRuBF7eqwbmQ3g9Wbt+TnaDl05nPZ7DJVPgsbiPp2FGuxr8qasdD/qNj+D84 rLJqGhK3rzeQ25kqxorLKhdG2ujS -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net