$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer File: C9olxjD4_0bjB7GUzSqtHm0GMx0.cer (raw, json) Hash identifier: VZ4YvkM3URoi8FlDipq66S6wzV4S/+Er2SAzenjcp/4= Subject key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 35AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:16 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.126.88.0/22 IP: 2405:67c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13743 (0x35af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:14:f1:c6:f0:0e:91:35:77:e3:0d:e5:78: 22:bf:76:47:b6:aa:20:9e:b4:df:c9:b5:7a:5a:38: 83:3a:c2:69:4d:42:1e:c0:26:ca:85:57:18:e1:4e: 3f:bf:78:84:89:11:fe:80:b7:6a:56:c6:f0:45:df: b9:a4:09:b6:27:83:99:72:3c:f0:c9:a6:04:a0:56: b7:a9:85:ff:fd:97:fd:ff:5a:9b:12:26:e5:98:ef: b3:15:ea:7c:bd:a1:38:6e:1e:91:be:9d:f4:fa:8d: ac:62:83:92:30:21:38:ad:cb:df:7d:9a:a7:f6:71: 5a:57:4f:56:3f:12:9b:cf:54:93:38:67:12:36:46: 67:bc:c3:74:1e:f7:23:f3:40:44:96:ea:ac:58:aa: 5d:ce:50:a1:a3:0e:87:fa:e9:ed:3d:06:84:a1:1d: 32:64:77:77:2a:20:10:35:12:74:88:16:e0:4a:2d: dc:1a:60:16:d6:c7:b0:d3:41:11:7c:5b:59:89:9b: 92:e4:c5:7a:b1:57:10:6b:f3:cd:a9:2e:86:4f:f1: 7a:1e:27:34:b4:82:f3:fe:11:05:ed:a5:33:24:b7: 83:e5:75:b1:0b:44:28:27:01:7a:91:d2:f8:7c:fe: f9:72:9a:7e:ce:ec:30:b6:3e:50:85:53:15:37:be: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.126.88.0/22 IPv6: 2405:67c0::/32 Signature Algorithm: sha256WithRSAEncryption 23:ef:70:77:28:00:e1:6d:0a:80:12:f9:ac:f4:78:ea:2e:fc: 54:32:36:71:d5:92:36:f5:03:eb:32:76:f2:d4:2e:57:28:24: f6:40:81:26:69:d5:4e:14:b2:d3:da:c9:c2:24:73:2f:2e:4f: ff:c0:5b:43:39:06:75:9a:56:ce:1e:eb:68:9d:8b:74:d9:94: 02:90:0e:26:31:74:10:ff:1b:28:75:c1:0a:86:ac:af:cc:03: 6c:4f:7e:26:5d:38:ba:ca:d5:07:56:0e:5a:1d:fc:5b:ce:d3: a5:e2:67:c0:d6:5e:df:8a:87:04:6b:f2:03:9a:25:51:70:4a: 09:a3:e2:24:ec:e0:7d:e1:ac:92:c3:c3:88:04:d3:65:c8:42: 57:b2:98:be:11:ab:75:af:57:6b:d8:ac:44:c3:e7:a4:53:0d: e9:70:a3:32:9b:6e:8d:18:e0:6f:5b:5f:9f:2c:52:d3:a4:2e: eb:38:68:9c:24:15:42:16:42:c2:a3:ce:5d:a1:8f:b7:d4:2e: d3:f9:f3:14:29:7b:50:65:94:0f:c7:5e:5d:d2:13:c8:f8:e6: 6c:aa:a5:3f:84:f1:07:b3:04:a4:60:78:63:c7:57:89:0d:61: 90:68:c2:b8:35:77:20:32:94:5c:13:eb:b3:df:a8:7c:8e:0e: f8:cd:5a:2c -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICNa8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxNloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMEJEQTI1QzYzMEY4RkY0NkUzMDdCMTk0Q0QyQUFEMUU2RDA2MzMx RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqxFPHG8A6RNXfjDeV4 Ir92R7aqIJ6038m1elo4gzrCaU1CHsAmyoVXGOFOP794hIkR/oC3albG8EXfuaQJ tieDmXI88MmmBKBWt6mF//2X/f9amxIm5ZjvsxXqfL2hOG4ekb6d9PqNrGKDkjAh OK3L332ap/ZxWldPVj8Sm89UkzhnEjZGZ7zDdB73I/NARJbqrFiqXc5QoaMOh/rp 7T0GhKEdMmR3dyogEDUSdIgW4Eot3BpgFtbHsNNBEXxbWYmbkuTFerFXEGvzzaku hk/xeh4nNLSC8/4RBe2lMyS3g+V1sQtEKCcBepHS+Hz++XKafs7sMLY+UIVTFTe+ ZNMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQL2iXGMPj/RuMHsZTNKq0ebQYzHTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hBTkdGVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSEFOR0ZVL0M5b2x4akQ0XzBiakI3R1V6U3F0SG0wR014MC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnflgwDQQCAAIwBwMFACQFZ8AwDQYJ KoZIhvcNAQELBQADggEBACPvcHcoAOFtCoAS+az0eOou/FQyNnHVkjb1A+sydvLU LlcoJPZAgSZp1U4UstPaycIkcy8uT//AW0M5BnWaVs4e62idi3TZlAKQDiYxdBD/ Gyh1wQqGrK/MA2xPfiZdOLrK1QdWDlod/FvO06XiZ8DWXt+KhwRr8gOaJVFwSgmj 4iTs4H3hrJLDw4gE02XIQleymL4Rq3WvV2vYrETD56RTDelwozKbbo0Y4G9bX58s UtOkLus4aJwkFUIWQsKjzl2hj7fULtP58xQpe1BllA/HXl3SE8j45myqpT+E8Qez BKRgeGPHV4kNYZBowrg1dyAylFwT67PfqHyODvjNWiw= -----END CERTIFICATE-----Generated at Wed May 7 22:40:30 2025 by rpki-client