$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer File: U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer (raw, json) Hash identifier: K3xZE04CbU2z4lbwRA8UIW9vLvjMsBjTCfV1Y4UsqhQ= Subject key identifier: 53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 395B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Tue 01 Jul 2025 00:31:17 +0000 Certificate not after: Tue 30 Jun 2026 15:30:18 +0000 Subordinate resources: IP: 2402:13a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 11:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14683 (0x395b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Jul 1 00:31:17 2025 GMT Not After : Jun 30 15:30:18 2026 GMT Subject: CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:83:3e:14:35:c3:cb:67:93:8d:8d:46:b0: e9:e9:be:2e:88:8e:ec:ba:d8:2e:16:d1:6f:1c:48: 27:fb:ad:0b:ab:4c:5c:e2:95:b4:35:2b:56:83:d2: 2b:85:f7:79:41:53:db:4a:96:76:35:5e:18:58:25: 4d:7d:a7:c7:e6:1c:76:ba:65:de:df:74:fe:e6:d3: 3d:f6:b6:ea:b3:bc:77:ec:d9:16:f6:21:8b:87:c8: fc:54:f2:dc:8f:f0:e0:f7:87:ff:f8:98:ba:4c:4f: 84:91:87:40:8b:af:cb:ee:9a:54:d5:e9:93:d9:00: 6d:93:29:ff:02:52:9c:90:60:cd:02:8d:31:e0:4d: 88:27:86:56:fa:5b:b7:b1:27:d5:ae:10:e4:5e:f2: d6:c6:38:09:02:2f:3b:f1:9d:7d:f2:63:92:c5:f1: 91:06:4b:e2:35:2f:b0:8d:f3:67:28:49:51:2c:4a: 4a:74:4a:f0:88:6d:33:c6:ea:c8:d8:d5:80:40:13: 06:0c:de:a0:1a:50:a9:31:2b:82:04:97:b0:6d:0e: bf:0d:2d:db:cf:0c:ed:b0:d8:c0:a4:dd:ce:dc:a5: bd:54:51:42:1d:b6:d6:59:c0:af:d0:4c:32:9d:03: a2:47:b2:d2:74:80:41:00:12:c3:f4:4d:bb:c5:42: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:13a0::/32 Signature Algorithm: sha256WithRSAEncryption 83:68:b3:9f:02:82:e5:a6:3a:68:89:c6:88:68:05:30:f4:b0: 46:01:cc:fc:4d:2c:f1:04:c0:93:c0:11:73:0e:ed:67:6f:49: c4:75:8f:02:95:9f:f2:da:a7:65:f8:6c:9b:89:34:2f:c4:aa: 92:70:15:17:6e:9e:ab:04:a8:f6:3a:9a:9b:dd:63:32:76:c3: ac:ff:7b:44:ad:8b:83:28:73:2c:55:58:97:46:f2:96:d9:b5: 6f:1c:a9:e8:8c:54:57:70:f0:2e:cb:48:99:dd:87:a3:fc:19: d6:13:dd:0a:b7:e2:bb:6c:0d:7a:81:e0:20:22:71:bc:6f:bc: ac:92:6c:bc:fc:f9:ee:29:aa:8e:5c:ff:69:05:15:be:90:68: ba:7a:29:89:06:72:e1:08:f3:7c:d9:83:7b:88:84:a2:fe:ca: 2d:a7:8d:24:6e:76:4f:70:4f:a6:00:ac:d1:42:36:f8:65:7c: 1a:04:d9:c4:18:06:d4:19:7e:3c:4e:bb:1b:3e:a3:29:c0:e4: 57:a7:fb:e4:85:7e:f4:09:44:45:0a:9d:64:d6:85:b9:d4:3d: 18:53:a9:b4:73:ea:05:6e:ce:a8:6e:bb:6b:6f:6b:0a:5e:ba: 9a:6b:f6:9d:81:51:c0:1b:73:c8:5f:f4:50:91:ff:53:a9:a9: c5:82:3f:26 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICOVswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDcwMTAwMzExN1oXDTI2MDYzMDE1MzAxOFowMzEx MC8GA1UEAxMoNTM5MDZFMkUyRUZFNzQ5MURCMTlCMUMyMDlFQTE3OEMzOUEwREFF NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOKVgz4UNcPLZ5ONjUaw 6em+LoiO7LrYLhbRbxxIJ/utC6tMXOKVtDUrVoPSK4X3eUFT20qWdjVeGFglTX2n x+Ycdrpl3t90/ubTPfa26rO8d+zZFvYhi4fI/FTy3I/w4PeH//iYukxPhJGHQIuv y+6aVNXpk9kAbZMp/wJSnJBgzQKNMeBNiCeGVvpbt7En1a4Q5F7y1sY4CQIvO/Gd ffJjksXxkQZL4jUvsI3zZyhJUSxKSnRK8IhtM8bqyNjVgEATBgzeoBpQqTErggSX sG0Ovw0t288M7bDYwKTdztylvVRRQh221lnAr9BMMp0Dokey0nSAQQASw/RNu8VC JEUCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBRTkG4uLv50kdsZscIJ6heMOaDa5TAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUlVJS0UvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UlVJS0UvVTVCdUxpNy1kSkhiR2JIQ0Nlb1hqRG1nMnVVLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCE6AwDQYJKoZIhvcNAQELBQADggEBAINo s58CguWmOmiJxohoBTD0sEYBzPxNLPEEwJPAEXMO7WdvScR1jwKVn/Lap2X4bJuJ NC/EqpJwFRdunqsEqPY6mpvdYzJ2w6z/e0Sti4MocyxVWJdG8pbZtW8cqeiMVFdw 8C7LSJndh6P8GdYT3Qq34rtsDXqB4CAicbxvvKySbLz8+e4pqo5c/2kFFb6QaLp6 KYkGcuEI83zZg3uIhKL+yi2njSRudk9wT6YArNFCNvhlfBoE2cQYBtQZfjxOuxs+ oynA5Fen++SFfvQJREUKnWTWhbnUPRhTqbRz6gVuzqhuu2tvawpeuppr9p2BUcAb c8hf9FCR/1OpqcWCPyY= -----END CERTIFICATE-----Generated at Fri Jul 4 09:24:00 2025 by rpki-client