$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DjrlLg48orgFrsL_itmlf3IHWqo.cer File: DjrlLg48orgFrsL_itmlf3IHWqo.cer (raw, json) Hash identifier: iy0STrbZIrRhmW7w6H3U7vD8j8dM8qN7v7V1gttJum8= Subject key identifier: 0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3A9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Aug 2025 08:14:38 +0000 Certificate not after: Sat 22 Aug 2026 08:14:28 +0000 Subordinate resources: AS: 152611 IP: 2401:b9a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 14:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15002 (0x3a9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 22 08:14:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0E3AE52E0E3CA2B805AEC2FF8AD9A57F72075AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:71:9c:e8:cf:94:7b:f8:2c:51:fb:c5:bb: 7a:a7:6c:f6:00:17:f0:90:53:65:11:f7:2a:3b:68: e3:4d:97:32:5f:cb:73:74:4e:92:8d:3e:6d:91:3a: c5:17:a5:3f:c9:ad:07:3a:99:f6:b3:51:05:c8:be: 04:58:7a:bc:51:1c:77:5c:4f:df:79:46:21:2f:9c: 09:62:1d:50:84:e7:3e:6b:52:b1:ae:fe:61:29:c9: e5:d6:96:34:64:e0:42:bc:60:5e:19:7a:ca:6d:9b: 98:59:b9:5d:17:aa:b3:14:b3:07:b4:09:f6:fe:84: 36:73:8d:1e:89:e0:c2:17:1e:12:43:84:d3:c0:ed: ca:1a:e4:ea:55:22:d0:3b:6c:9a:35:56:3c:fb:3e: e5:4f:f3:d7:bd:6a:cc:c6:e2:ab:b5:aa:39:fa:ad: 50:f0:cc:64:ff:c2:1f:9a:1a:8f:0b:4b:3d:6c:4e: 0f:15:72:03:83:47:ad:91:7f:40:4c:94:b8:26:18: 09:a8:1b:f0:06:3a:c6:e5:19:14:f3:ab:fe:46:47: 81:f6:7c:44:52:af:67:20:d2:9b:ee:9c:27:2f:1a: 4f:41:42:56:7c:25:f7:1d:ef:1a:39:0f:01:95:1f: e8:62:bd:6f:40:5a:cd:cc:e4:13:6a:6e:33:a6:5b: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152611 sbgp-ipAddrBlock: critical IPv6: 2401:b9a0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:9a:68:30:12:4a:b3:17:70:a3:91:73:9f:23:8f:fa:9d:62: d5:83:23:23:52:a7:cb:ea:39:3c:5e:4d:c7:56:e5:42:db:9f: 52:6c:a4:c0:1a:ca:ad:fd:83:7f:a1:2d:90:41:ad:f9:0d:65: a1:92:56:a2:30:24:fb:b8:6e:22:ec:fa:2e:b3:af:4c:95:5e: 8a:4f:a0:e8:72:88:36:f2:f9:b9:13:fd:23:02:b5:04:a7:3c: 3a:5c:1c:0c:80:63:d2:94:94:60:0c:d5:6b:b4:5a:c4:10:89: 68:62:89:a9:5b:1b:4e:f8:1f:6a:03:f9:2e:2e:41:c8:f3:17: f5:51:82:e9:05:2c:76:0c:b4:19:0f:e9:53:ed:67:63:c1:f2: cb:24:e0:18:0e:63:93:43:4d:93:e9:27:fe:c4:b5:ad:8d:40: 14:14:55:f4:6c:79:c2:b5:c1:2d:6d:eb:fe:39:c0:1c:35:51: e0:cf:23:5c:1f:30:c7:1f:c2:60:a0:7f:ce:a8:16:1a:e6:b5: e0:fb:f6:a2:36:d1:bd:9f:70:2b:19:b7:3d:4d:a3:96:c6:a3: 56:02:8b:46:d4:4f:25:0a:7c:72:1b:c9:7a:00:fa:47:44:a7: 5c:0a:41:fe:35:b0:ce:cf:86:6e:ed:a9:5b:2a:74:a5:c9:d1: e0:39:e7:86 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICOpowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDgyMjA4MTQzOFoXDTI2MDgyMjA4MTQyOFowMzEx MC8GA1UEAxMoMEUzQUU1MkUwRTNDQTJCODA1QUVDMkZGOEFEOUE1N0Y3MjA3NUFB QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVQcZzoz5R7+CxR+8W7 eqds9gAX8JBTZRH3Kjto402XMl/Lc3ROko0+bZE6xRelP8mtBzqZ9rNRBci+BFh6 vFEcd1xP33lGIS+cCWIdUITnPmtSsa7+YSnJ5daWNGTgQrxgXhl6ym2bmFm5XReq sxSzB7QJ9v6ENnONHongwhceEkOE08Dtyhrk6lUi0DtsmjVWPPs+5U/z171qzMbi q7WqOfqtUPDMZP/CH5oajwtLPWxODxVyA4NHrZF/QEyUuCYYCagb8AY6xuUZFPOr /kZHgfZ8RFKvZyDSm+6cJy8aT0FCVnwl9x3vGjkPAZUf6GK9b0BazczkE2puM6Zb 0D0CAwEAAaOCAm0wggJpMB0GA1UdDgQWBBQOOuUuDjyiuAWuwv+K2aV/cgdaqjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0JFSURPVS9EanJsTGc0OG9yZ0Zyc0xfaXRtbGYzSUhXcW8ubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwJUIzAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBuaAwDQYJKoZIhvcNAQELBQADggEBAD+aaDASSrMXcKORc58jj/qdYtWD IyNSp8vqOTxeTcdW5ULbn1JspMAayq39g3+hLZBBrfkNZaGSVqIwJPu4biLs+i6z r0yVXopPoOhyiDby+bkT/SMCtQSnPDpcHAyAY9KUlGAM1Wu0WsQQiWhiialbG074 H2oD+S4uQcjzF/VRgukFLHYMtBkP6VPtZ2PB8ssk4BgOY5NDTZPpJ/7Eta2NQBQU VfRsecK1wS1t6/45wBw1UeDPI1wfMMcfwmCgf86oFhrmteD79qI20b2fcCsZtz1N o5bGo1YCi0bUTyUKfHIbyXoA+kdEp1wKQf41sM7Phm7tqVsqdKXJ0eA554Y= -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:36 2025 by rpki-client