$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer File: -9Osn8RMPdKre10gvBWMgtg9Jgo.cer (raw, json) Hash identifier: Xkwy/hACUTcNCrFuUUsZefBBdNCQwohRHULxbNFyoC8= Subject key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 29B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:29:55 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.130.248.0/22 IP: 2403:c1c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10672 (0x29b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:29:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:4b:54:e4:99:10:10:3f:e8:3b:97:ca:3f: fe:bd:f2:04:54:3f:46:f8:f1:91:79:18:62:f8:06: f0:af:ea:df:fb:4f:1f:6f:56:a6:c3:1b:85:e9:6a: e6:ce:08:dc:56:32:2f:5a:cd:3c:d2:19:9e:dc:c6: 3a:1b:ad:e9:f8:e3:22:04:f2:9c:f3:24:52:08:b3: 22:6c:4d:6e:5d:36:bd:92:d6:10:51:6b:17:e9:1c: 16:92:99:4f:ca:c6:70:39:77:21:d9:8a:11:e3:b8: a8:18:b9:da:cf:90:ef:2c:21:ae:26:1e:a6:f5:06: 50:26:b1:1b:ab:24:ed:eb:dc:3c:4a:01:e7:a6:89: 6b:1b:63:2b:a1:32:8e:6f:6b:04:4b:fc:5c:a4:49: 99:48:01:51:f5:7c:89:2e:8b:60:50:fb:2c:78:31: 93:e0:4f:4f:ed:b2:f4:1c:40:1c:a4:e8:19:fa:65: 0c:82:61:dc:07:6b:cf:39:a3:ef:b0:ce:f5:ad:bf: 6d:2a:27:71:f7:f6:f4:98:9b:3e:75:0d:1c:f0:ec: 3d:31:ac:cd:18:d8:88:4d:8b:f5:08:55:59:83:d8: d1:51:14:a7:9a:62:df:54:af:4c:5e:96:e7:0e:d9: d3:47:d8:5e:9b:f5:1c:4c:c7:2e:98:d8:4e:9d:7f: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.248.0/22 IPv6: 2403:c1c0::/32 Signature Algorithm: sha256WithRSAEncryption 47:17:14:b0:6b:9c:e9:75:11:8c:b0:cd:6a:7f:8b:de:ec:71: 7e:ab:65:1f:40:a1:2a:8c:60:f3:bb:92:e1:8c:4d:05:2a:dc: 93:1a:fe:ab:ad:8b:ae:c2:53:12:d4:92:63:92:44:70:f6:91: b9:a9:92:aa:d2:1e:c2:2d:99:36:a7:71:8e:b2:c2:07:56:66: 14:48:34:44:e9:29:98:83:71:26:b1:f5:7f:18:a5:ec:f0:f5: 87:aa:52:80:12:f6:ba:82:e1:06:bb:03:1e:fe:4e:f9:cc:9a: c8:4c:28:3d:d1:28:33:c1:51:78:9c:8b:12:b6:de:ee:f1:6e: de:7f:13:97:66:60:c5:f3:bd:4e:b5:cd:3f:84:1d:ad:56:ee: f8:0f:ef:7b:50:37:32:67:7e:bb:94:12:ab:bd:f6:b6:39:ba: bd:8c:25:df:08:69:d2:e9:6b:7d:b1:9a:f9:53:09:33:ac:94: bb:76:ef:74:0b:4d:4a:c0:7c:81:d2:84:8b:b8:8b:52:e0:60: bc:8f:8b:d3:8f:34:b9:2c:15:4f:8c:9d:63:f2:04:bd:51:8e: 4d:83:d3:0d:40:7c:8e:0b:8b:90:9d:1c:5c:d0:4d:b6:8a:52: 98:01:ce:56:46:78:ba:7a:d1:5d:58:b6:b3:e3:ad:d6:5a:2d: 9d:85:76:04 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICKbAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMjk1NVoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoRkJEM0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0LS1TkmRAQP+g7l8o/ /r3yBFQ/RvjxkXkYYvgG8K/q3/tPH29WpsMbhelq5s4I3FYyL1rNPNIZntzGOhut 6fjjIgTynPMkUgizImxNbl02vZLWEFFrF+kcFpKZT8rGcDl3IdmKEeO4qBi52s+Q 7ywhriYepvUGUCaxG6sk7evcPEoB56aJaxtjK6Eyjm9rBEv8XKRJmUgBUfV8iS6L YFD7LHgxk+BPT+2y9BxAHKToGfplDIJh3Adrzzmj77DO9a2/bSoncff29JibPnUN HPDsPTGszRjYiE2L9QhVWYPY0VEUp5pi31SvTF6W5w7Z00fYXpv1HEzHLpjYTp1/ CMkCAwEAAaOCAlswggJXMB0GA1UdDgQWBBT706yfxEw90qt7XSC8FYyC2D0mCjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9D VElJLy05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJngvgwDQQCAAIwBwMFACQDwcAwDQYJKoZIhvcN AQELBQADggEBAEcXFLBrnOl1EYywzWp/i97scX6rZR9AoSqMYPO7kuGMTQUq3JMa /quti67CUxLUkmOSRHD2kbmpkqrSHsItmTancY6ywgdWZhRINETpKZiDcSax9X8Y pezw9YeqUoAS9rqC4Qa7Ax7+TvnMmshMKD3RKDPBUXicixK23u7xbt5/E5dmYMXz vU61zT+EHa1W7vgP73tQNzJnfruUEqu99rY5ur2MJd8IadLpa32xmvlTCTOslLt2 73QLTUrAfIHShIu4i1LgYLyPi9OPNLksFU+MnWPyBL1Rjk2D0w1AfI4Li5CdHFzQ TbaKUpgBzlZGeLp60V1YtrPjrdZaLZ2FdgQ= -----END CERTIFICATE-----Generated at Fri May 17 09:34:25 2024 by rpki-client on console-fra.rpki-client.org