$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/5Gdn630R4mIpsWgPaMEPdsUltpU.cer File: 5Gdn630R4mIpsWgPaMEPdsUltpU.cer (raw, json) Hash identifier: hc+gxCFm72nMdNRH0L5G5CwqAXRM/2O28ktYqqdqD0w= Subject key identifier: E4:67:67:EB:7D:11:E2:62:29:B1:68:0F:68:C1:0F:76:C5:25:B6:95 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:33 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.18.128.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10596 (0x2964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E46767EB7D11E26229B1680F68C10F76C525B695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:80:a7:81:b5:9c:bf:d6:06:d9:a4:09:66: 2d:68:da:f5:ce:8e:5d:35:d6:50:44:bf:77:af:6c: ec:33:80:e7:a4:71:f3:f7:13:db:b4:f2:a7:82:55: e6:07:aa:92:70:90:b2:8a:74:b8:5e:c3:ef:63:d9: 77:9e:6d:b6:9e:a0:3b:02:9b:a0:54:55:3a:26:f1: 06:7d:2b:7c:ed:94:3f:f7:0a:86:6d:96:26:37:0c: 33:86:e2:6a:ae:b0:c4:b3:fa:37:aa:eb:d0:9d:eb: 07:42:06:bf:2b:7a:3b:32:9b:65:6a:ed:78:ca:4b: d4:bb:75:c7:15:41:0c:e3:b9:0a:94:ef:b9:c5:71: a9:aa:c6:ab:62:12:c4:ca:68:e5:21:10:ba:9b:09: 91:bd:9e:fd:01:ad:2d:66:c9:b9:f7:7c:73:38:a7: 26:9c:a2:9e:f8:00:f8:88:26:bd:4d:9c:c1:93:a8: 2c:58:f7:28:01:b8:19:f3:26:1d:90:fd:f4:92:ef: e9:96:e1:fa:6f:c5:97:96:34:84:e9:81:26:07:33: 37:36:87:ae:19:f7:75:8c:46:73:01:1e:c0:fb:a4: 19:8e:b1:c2:6b:e9:82:7e:6f:77:da:48:50:9d:be: 31:9a:9d:f0:c4:92:f5:e1:14:61:bd:9f:7e:a0:e9: 49:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:67:EB:7D:11:E2:62:29:B1:68:0F:68:C1:0F:76:C5:25:B6:95 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GODGAME/5Gdn630R4mIpsWgPaMEPdsUltpU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.18.128.0/22 Signature Algorithm: sha256WithRSAEncryption 92:6c:30:2e:aa:48:ae:9c:18:05:39:5d:dc:68:e2:ec:e3:03: c8:9b:9b:a7:80:14:ca:32:1b:d1:e6:4d:a5:28:34:1a:51:6c: 3d:cd:ed:29:d4:8e:7a:4d:18:3d:35:04:2e:95:51:93:50:33: 40:56:f9:03:61:58:48:7f:6d:a8:d1:10:99:3b:d2:79:99:7e: 16:f5:a5:c3:38:39:c9:94:69:f1:d6:57:32:18:35:58:13:49: bc:e2:2f:bc:f9:e1:0e:9e:c7:60:c7:72:02:f4:59:84:15:94: 4a:89:96:44:77:6c:e0:5a:8b:38:95:2d:80:ce:8c:f5:b3:f1: 3d:20:d5:83:f2:54:ac:93:56:90:b6:65:a0:62:dc:de:76:71: 50:c3:53:05:e6:a3:2f:51:ba:54:c9:2f:5e:f7:6e:d0:29:a1: d3:52:da:ea:26:fb:2c:a3:49:df:88:46:59:18:21:4b:50:5d: 31:a5:38:a3:0a:73:66:1b:71:d6:1d:cf:5a:c7:b1:a0:48:ee: 10:f6:c9:a2:0d:4c:eb:06:54:d9:8d:8f:58:1a:1e:3b:00:9e: 89:85:69:75:6e:02:3d:a4:b6:7a:da:23:f8:20:22:d3:0b:8e: 15:19:fe:23:c2:e3:b1:b1:1e:8a:61:af:33:bb:19:2c:0e:ea: 47:d0:2c:7b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICKWQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEzM1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoRTQ2NzY3RUI3RDExRTI2MjI5QjE2ODBGNjhDMTBGNzZDNTI1QjY5 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyogKeBtZy/1gbZpAlm LWja9c6OXTXWUES/d69s7DOA56Rx8/cT27Typ4JV5geqknCQsop0uF7D72PZd55t tp6gOwKboFRVOibxBn0rfO2UP/cKhm2WJjcMM4biaq6wxLP6N6rr0J3rB0IGvyt6 OzKbZWrteMpL1Lt1xxVBDOO5CpTvucVxqarGq2ISxMpo5SEQupsJkb2e/QGtLWbJ ufd8czinJpyinvgA+IgmvU2cwZOoLFj3KAG4GfMmHZD99JLv6Zbh+m/Fl5Y0hOmB JgczNzaHrhn3dYxGcwEewPukGY6xwmvpgn5vd9pIUJ2+MZqd8MSS9eEUYb2ffqDp SS8CAwEAAaOCAlIwggJOMB0GA1UdDgQWBBTkZ2frfRHiYimxaA9owQ92xSW2lTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09ER0FNRS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9HT0RHQU1FLzVHZG42MzBSNG1JcHNXZ1BhTUVQZHNVbHRwVS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnEoAwDQYJKoZIhvcNAQELBQADggEB AJJsMC6qSK6cGAU5Xdxo4uzjA8ibm6eAFMoyG9HmTaUoNBpRbD3N7SnUjnpNGD01 BC6VUZNQM0BW+QNhWEh/bajREJk70nmZfhb1pcM4OcmUafHWVzIYNVgTSbziL7z5 4Q6ex2DHcgL0WYQVlEqJlkR3bOBaiziVLYDOjPWz8T0g1YPyVKyTVpC2ZaBi3N52 cVDDUwXmoy9RulTJL173btApodNS2uom+yyjSd+IRlkYIUtQXTGlOKMKc2YbcdYd z1rHsaBI7hD2yaINTOsGVNmNj1gaHjsAnomFaXVuAj2ktnraI/ggItMLjhUZ/iPC 47GxHophrzO7GSwO6kfQLHs= -----END CERTIFICATE-----Generated at Mon May 20 08:58:15 2024 by rpki-client on console-ams.rpki-client.org