$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer File: RPjc9msltxkFbR7WXBbqklflVT0.cer (raw, json) Hash identifier: 4nZyVnsKigzOeKNZkLbr0fg1aK6Le997hfoMs1Trqpg= Subject key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 19E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 160.30.78.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 22:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6627 (0x19e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Feb 10 14:29:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:82:a8:79:a9:cd:70:c3:1e:ef:29:a4:5d: 47:6f:29:26:ec:33:e2:f9:fb:f4:a1:5b:2b:b3:d0: 67:d8:dd:ce:59:6b:ab:ec:b9:65:af:6c:34:f3:95: 9d:81:db:8e:9c:40:12:d1:c0:e2:4d:fc:bd:7f:3d: b7:39:db:b7:46:9d:20:d3:fd:ec:6e:d4:80:9e:d2: 62:31:90:14:4a:63:f2:0e:0d:c7:8c:54:1f:ab:1e: 67:72:e7:20:2a:61:34:6a:d5:a0:ba:cc:72:f6:8a: 4c:1b:8e:84:55:c2:d6:90:81:a9:ba:c9:36:b7:a0: 5f:49:fa:7d:e8:2d:a7:0c:ea:e6:bb:cd:2f:24:ff: 8e:fa:b9:68:e7:71:5b:04:cd:e8:b2:7e:35:f1:29: b1:c2:70:95:51:f5:69:bc:99:24:59:33:87:fa:69: aa:e1:6d:e9:6a:f0:3f:75:4e:06:57:9b:a7:bd:63: 43:8c:35:60:56:28:d1:b3:ee:36:6a:bc:9c:1e:44: bc:e3:00:24:ae:08:57:64:26:94:54:18:23:68:3d: 4c:06:89:aa:02:1b:e6:4f:b3:3a:ca:75:be:c9:2d: 6e:2d:6d:20:e0:26:88:68:d6:8d:17:f4:66:3c:23: c6:3a:2a:15:87:19:e5:ea:7c:ae:46:43:de:e8:83: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.78.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:04:7f:26:f7:a1:2d:13:03:b8:15:84:bc:e5:9d:ea:37:67: 71:dc:c8:52:8c:3d:37:e3:77:c5:24:51:3c:29:41:99:cd:93: fa:06:9e:71:ca:a5:8a:c9:bc:1a:c1:0b:7c:1b:ee:95:8b:89: 1e:7d:17:45:2d:64:74:47:71:1f:e5:74:a1:53:68:51:ec:f6: 69:f5:3f:c1:3d:91:75:f9:c6:6d:47:69:22:05:70:f7:8d:04: b0:ca:8f:9a:91:21:fa:49:17:ca:e3:75:f2:6f:3d:f7:79:89: 76:96:9c:bb:c0:46:7c:ee:b3:68:c0:94:37:aa:62:f5:b0:89: 3c:b5:2a:e6:ff:cb:a4:29:99:61:09:a1:50:83:a4:a7:6c:53: 74:69:43:b6:77:86:7a:3e:c8:aa:50:17:33:df:1a:78:53:2a: fe:e1:0c:88:37:c3:3b:e0:25:8c:95:6c:12:b2:09:8c:53:ef: 77:aa:ef:e1:0f:b0:c6:05:9e:fd:4d:b7:f2:8f:b3:43:60:02: c8:88:52:00:cc:c4:84:15:6b:09:78:1c:24:85:44:69:23:b5: 87:3e:e8:33:5f:71:a6:56:82:4a:8a:e4:57:ac:6e:e0:1e:2f: 5a:d3:3a:85:df:ec:d5:2e:e7:30:4c:10:79:f1:a4:79:57:4f: 4a:a8:81:ae -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGeMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNDRGOERDRjY2QjI1QjcxOTA1NkQxRUQ2NUMxNkVBOTI1N0U1NTUz RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOJzgqh5qc1wwx7vKaRd R28pJuwz4vn79KFbK7PQZ9jdzllrq+y5Za9sNPOVnYHbjpxAEtHA4k38vX89tznb t0adINP97G7UgJ7SYjGQFEpj8g4Nx4xUH6seZ3LnICphNGrVoLrMcvaKTBuOhFXC 1pCBqbrJNregX0n6fegtpwzq5rvNLyT/jvq5aOdxWwTN6LJ+NfEpscJwlVH1abyZ JFkzh/ppquFt6WrwP3VOBlebp71jQ4w1YFYo0bPuNmq8nB5EvOMAJK4IV2QmlFQY I2g9TAaJqgIb5k+zOsp1vsktbi1tIOAmiGjWjRf0ZjwjxjoqFYcZ5ep8rkZD3uiD zt8CAwEAAaOCAlAwggJMMB0GA1UdDgQWBBRE+Nz2ayW3GQVtHtZcFuqSV+VVPTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0JFSURPVS9SUGpjOW1zbHR4a0ZiUjdXWEJicWtsZmxWVDAubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoB5OMA0GCSqGSIb3DQEBCwUAA4IBAQA+ BH8m96EtEwO4FYS85Z3qN2dx3MhSjD0343fFJFE8KUGZzZP6Bp5xyqWKybwawQt8 G+6Vi4kefRdFLWR0R3Ef5XShU2hR7PZp9T/BPZF1+cZtR2kiBXD3jQSwyo+akSH6 SRfK43Xybz33eYl2lpy7wEZ87rNowJQ3qmL1sIk8tSrm/8ukKZlhCaFQg6SnbFN0 aUO2d4Z6PsiqUBcz3xp4Uyr+4QyIN8M74CWMlWwSsgmMU+93qu/hD7DGBZ79Tbfy j7NDYALIiFIAzMSEFWsJeBwkhURpI7WHPugzX3GmVoJKiuRXrG7gHi9a0zqF3+zV LucwTBB58aR5V09KqIGu -----END CERTIFICATE-----Generated at Thu May 8 20:46:08 2025 by rpki-client