$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/b3TD3W1kKUsRIHLPHPZnFCh1pF8.cer File: b3TD3W1kKUsRIHLPHPZnFCh1pF8.cer (raw, json) Hash identifier: wZyATMeX8sGUif+KkyCrI7q1q6Wk+cJWPedg4m52ntg= Subject key identifier: 6F:74:C3:DD:6D:64:29:4B:11:20:72:CF:1C:F6:67:14:28:75:A4:5F Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1C7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/b3TD3W1kKUsRIHLPHPZnFCh1pF8.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Tue 01 Jul 2025 02:01:21 +0000 Certificate not after: Wed 01 Jul 2026 00:43:49 +0000 Subordinate resources: IP: 165.101.86.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7293 (0x1c7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Jul 1 02:01:21 2025 GMT Not After : Jul 1 00:43:49 2026 GMT Subject: CN=6F74C3DD6D64294B112072CF1CF667142875A45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:cc:e5:66:13:78:e7:ad:75:8b:aa:55:2a: 30:63:e9:f3:60:be:2d:71:52:fc:93:8b:79:7c:65: c4:14:af:a7:c3:80:b4:e6:66:c8:e0:4c:01:34:5e: 86:1c:db:5b:e0:5f:b9:3b:e6:68:54:4b:64:c6:5e: a4:7b:ba:ea:e8:13:e5:cd:3f:1b:e8:e5:1b:4c:ad: 4f:e8:94:68:fd:7a:28:69:ee:de:82:66:ba:84:23: d0:a7:83:f1:e5:65:74:69:c5:6f:8c:e1:87:8a:53: d5:67:1a:6c:09:01:d4:a0:c4:de:3f:25:aa:b6:da: d1:3b:99:79:3d:26:82:5f:0a:82:96:36:65:d6:e6: ae:b5:06:9d:5a:6c:be:0c:7f:e1:fb:1c:22:e9:95: 0a:82:d0:41:f0:be:91:c7:5b:5c:30:9b:25:80:9f: 3f:39:14:e9:0f:33:5c:9c:e1:a8:f2:9b:9d:97:b9: 7c:27:6a:57:47:f5:45:0b:a4:3d:83:09:39:3d:d3: b1:90:d3:38:76:ba:54:1e:01:f4:e4:29:de:bd:fa: 19:ec:a9:7d:fa:86:d5:d7:c0:e2:42:a6:bd:bb:43: 86:41:39:71:27:9f:fb:76:b8:6b:d4:b8:9d:8f:35: 5b:2d:a1:57:91:ac:4d:6f:c6:38:18:37:4c:db:f3: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:74:C3:DD:6D:64:29:4B:11:20:72:CF:1C:F6:67:14:28:75:A4:5F X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/b3TD3W1kKUsRIHLPHPZnFCh1pF8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.86.0/23 Signature Algorithm: sha256WithRSAEncryption 44:45:e6:16:e2:ec:18:bf:17:af:b6:9c:db:69:bd:93:fc:79: ff:17:12:5b:77:c5:ab:08:7d:60:ef:49:29:c1:13:81:95:13: 97:44:ab:b1:ac:24:a0:9d:b9:b6:ce:dd:13:a2:b4:f5:36:4f: 64:7c:b6:f4:ef:9f:13:fe:1f:70:29:60:2f:99:45:d5:91:90: 04:c3:98:4d:90:21:30:ed:af:68:d1:af:2d:83:14:f9:d9:18: bd:5f:35:39:26:e5:93:43:12:eb:fc:23:a0:c3:49:a4:f5:ef: 40:99:ff:bb:4c:3c:29:8f:5c:e5:5e:c0:fe:a9:00:6d:fb:ff: a9:d2:94:f0:b9:5f:11:b0:b6:98:9f:9f:d6:1f:a8:94:e7:45: ec:62:6d:02:5d:75:c7:14:d0:b3:1c:49:99:bd:33:fe:65:ae: 71:75:f8:f8:8d:0b:54:c4:11:97:b9:92:5e:04:f4:6e:63:81: 4c:59:d1:6b:5b:76:9f:38:17:f8:8e:9f:e4:da:d5:e3:18:2b: 97:2b:26:e7:cb:84:d0:8a:ad:47:ec:80:64:dc:ee:02:60:a9: 5f:3e:4b:ed:5e:7d:b1:58:78:d4:89:47:93:8a:0c:67:d5:23: ba:a6:56:6b:4e:13:f1:16:22:33:27:54:26:41:76:32:aa:fb: 76:74:90:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHH0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDcwMTAyMDEyMVoXDTI2MDcwMTAwNDM0OVowMzEx MC8GA1UEAxMoNkY3NEMzREQ2RDY0Mjk0QjExMjA3MkNGMUNGNjY3MTQyODc1QTQ1 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALHwzOVmE3jnrXWLqlUq MGPp82C+LXFS/JOLeXxlxBSvp8OAtOZmyOBMATRehhzbW+BfuTvmaFRLZMZepHu6 6ugT5c0/G+jlG0ytT+iUaP16KGnu3oJmuoQj0KeD8eVldGnFb4zhh4pT1WcabAkB 1KDE3j8lqrba0TuZeT0mgl8KgpY2ZdbmrrUGnVpsvgx/4fscIumVCoLQQfC+kcdb XDCbJYCfPzkU6Q8zXJzhqPKbnZe5fCdqV0f1RQukPYMJOT3TsZDTOHa6VB4B9OQp 3r36GeypffqG1dfA4kKmvbtDhkE5cSef+3a4a9S4nY81Wy2hV5GsTW/GOBg3TNvz 0YsCAwEAAaOCAlQwggJQMB0GA1UdDgQWBBRvdMPdbWQpSxEgcs8c9mcUKHWkXzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0RJTkcv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvTUlOR0RJTkcvYjNURDNXMWtLVXNSSUhMUEhQWm5GQ2gxcEY4Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaVlVjANBgkqhkiG9w0BAQsFAAOC AQEAREXmFuLsGL8Xr7ac22m9k/x5/xcSW3fFqwh9YO9JKcETgZUTl0SrsawkoJ25 ts7dE6K09TZPZHy29O+fE/4fcClgL5lF1ZGQBMOYTZAhMO2vaNGvLYMU+dkYvV81 OSblk0MS6/wjoMNJpPXvQJn/u0w8KY9c5V7A/qkAbfv/qdKU8LlfEbC2mJ+f1h+o lOdF7GJtAl11xxTQsxxJmb0z/mWucXX4+I0LVMQRl7mSXgT0bmOBTFnRa1t2nzgX +I6f5NrV4xgrlysm58uE0IqtR+yAZNzuAmCpXz5L7V59sVh41IlHk4oMZ9UjuqZW a04T8RYiMydUJkF2Mqr7dnSQiw== -----END CERTIFICATE-----Generated at Fri Jul 4 03:36:13 2025 by rpki-client