$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer File: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (raw, json) Hash identifier: zxpz/hmX6Ya/ZhyZHaM81xty9U07CEZcnRVMCUQvvMU= Subject key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:27 +0000 Certificate not after: Tue 23 Sep 2025 15:30:20 +0000 Subordinate resources: IP: 160.187.100.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6611 (0x19d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Feb 10 14:29:27 2025 GMT Not After : Sep 23 15:30:20 2025 GMT Subject: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:ba:8c:f3:9b:ff:0e:28:4f:86:b3:47:ee: 04:6e:c6:b7:a9:03:a3:ef:2c:a1:8c:f4:2f:3d:07: 4b:67:67:f7:11:52:25:a1:15:41:25:f1:2e:83:c0: bd:ff:5b:04:73:ab:41:5e:40:12:da:0a:1d:93:ce: 38:36:b7:0e:3a:42:78:c7:74:e5:b1:7b:51:4a:78: a7:50:03:b2:d3:4b:10:7f:05:db:9a:10:6c:55:60: c7:ae:38:b7:84:1b:c0:86:c3:07:a3:e3:73:e6:eb: 07:03:7a:be:b6:95:b7:9f:30:8c:a2:a2:8f:5d:72: 78:a6:e1:df:6a:26:21:52:02:d6:ff:d6:f5:fc:a4: 5a:e9:01:b9:e2:db:cb:84:3e:a8:87:47:64:e6:a0: fe:ed:a6:c4:11:49:65:e9:40:ce:57:55:58:a9:92: 6e:10:e3:30:db:68:e4:e1:f5:3a:b6:6e:d6:08:c9: 40:95:7f:4d:68:b8:41:de:86:17:a1:b5:ee:96:e0: 38:9b:98:15:2f:63:3d:14:18:4a:2d:9b:c3:43:34: 99:10:69:db:4b:33:6c:3d:21:ca:33:7f:45:81:8a: 0e:1f:9e:6a:4e:65:03:d5:27:f6:3a:3c:6f:97:71: 33:e5:d1:53:6a:c3:ab:a4:df:ef:a4:00:a6:9c:e2: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.100.0/23 Signature Algorithm: sha256WithRSAEncryption 96:87:15:39:17:db:70:8e:94:d7:2e:81:ae:e3:6c:5e:08:a7: 90:af:ca:35:19:0a:26:53:4f:68:16:33:e5:f8:3f:33:5a:bd: 26:b8:71:87:f2:5d:7f:29:b3:f2:02:3d:3d:da:8f:a6:14:54: 8c:0a:83:09:56:28:88:9a:8f:a2:eb:ed:79:ec:de:fa:e6:5e: b9:61:10:01:d5:71:02:96:43:7a:5e:5d:7b:1d:12:77:4f:bb: 04:a9:18:27:a7:bf:b4:7d:b0:26:00:ff:93:a9:de:b2:3b:90: d4:3e:2f:7b:e4:e6:64:3a:34:5b:da:83:b0:46:fb:42:e7:aa: 10:db:d7:77:74:bf:26:7e:66:0b:0b:e2:0a:59:45:32:ba:9e: c0:35:16:d7:73:bc:1e:54:b5:3c:d1:9e:a0:15:4c:bb:5c:eb: 85:e6:8c:52:86:af:bd:58:cb:28:75:b5:aa:c4:15:b6:5b:c8: 46:c9:20:5c:fd:79:2e:e9:5b:f1:98:cb:74:f9:cd:7c:25:dc: a3:b1:30:14:d6:33:ad:41:b8:c5:56:03:70:b2:74:b7:db:50: 17:4b:ad:18:ba:e6:56:59:89:41:30:9a:04:6f:60:37:a6:23: 52:85:20:23:51:16:70:5c:f4:3d:87:ca:ef:96:84:55:c0:17: 0b:18:ce:f5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICGdMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyN1oXDTI1MDkyMzE1MzAyMFowMzEx MC8GA1UEAxMoNkEyQjEzOTZDMTQyREE2NzExNTE4ODc1RTkwQzRBRUM5MEIwRjVD NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9zuozzm/8OKE+Gs0fu BG7Gt6kDo+8soYz0Lz0HS2dn9xFSJaEVQSXxLoPAvf9bBHOrQV5AEtoKHZPOODa3 DjpCeMd05bF7UUp4p1ADstNLEH8F25oQbFVgx644t4QbwIbDB6Pjc+brBwN6vraV t58wjKKij11yeKbh32omIVIC1v/W9fykWukBueLby4Q+qIdHZOag/u2mxBFJZelA zldVWKmSbhDjMNto5OH1OrZu1gjJQJV/TWi4Qd6GF6G17pbgOJuYFS9jPRQYSi2b w0M0mRBp20szbD0hyjN/RYGKDh+eak5lA9Un9jo8b5dxM+XRU2rDq6Tf76QAppzi Vf0CAwEAAaOCAlgwggJUMB0GA1UdDgQWBBRqKxOWwULaZxFRiHXpDErskLD1xDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9UX1RGTl9D Ty8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9OT1RfVEZOX0NPL2Fpc1Rsc0ZDMm1jUlVZaDE2UXhLN0pDdzljUS5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu2QwDQYJKoZIhvcNAQEL BQADggEBAJaHFTkX23COlNcuga7jbF4Ip5CvyjUZCiZTT2gWM+X4PzNavSa4cYfy XX8ps/ICPT3aj6YUVIwKgwlWKIiaj6Lr7Xns3vrmXrlhEAHVcQKWQ3peXXsdEndP uwSpGCenv7R9sCYA/5Op3rI7kNQ+L3vk5mQ6NFvag7BG+0LnqhDb13d0vyZ+ZgsL 4gpZRTK6nsA1FtdzvB5UtTzRnqAVTLtc64XmjFKGr71Yyyh1tarEFbZbyEbJIFz9 eS7pW/GYy3T5zXwl3KOxMBTWM61BuMVWA3CydLfbUBdLrRi65lZZiUEwmgRvYDem I1KFICNRFnBc9D2Hyu+WhFXAFwsYzvU= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net