$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer File: 7NL9w4Uip0pCLee9HAJtVeCNnpo.cer (raw, json) Hash identifier: SV5W4X0tK69twhpN+1I8Gjm4Hcj53QOGq3TnfB1nesY= Subject key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2F89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:23:31 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 7534 IP: 202.160.64.0/19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12169 (0x2f89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 02:23:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:a6:78:eb:ac:0e:9f:a2:21:90:a0:0f:a6: 72:90:b5:82:1e:0f:45:57:16:d8:a6:9e:ab:91:78: ef:8d:39:f1:f7:67:b5:15:20:69:98:37:77:e1:d1: 78:f0:cb:8e:cf:c5:e8:ca:b5:14:f8:1b:9a:fb:64: 4e:7c:bf:48:1c:ee:d9:87:b1:e5:8c:2d:31:56:64: 3f:55:4f:d9:98:47:b4:c3:ed:92:0f:5e:b9:92:51: 31:7f:6a:7f:b4:c0:52:91:c5:1e:a7:be:95:72:1c: 0f:d2:56:67:6a:95:ab:b1:8f:0c:67:cd:d1:da:2d: b5:49:10:39:3b:aa:87:d8:ba:0a:a2:2b:e5:92:c5: 09:24:19:99:e1:0b:c3:4c:b1:93:00:cd:aa:15:1b: 8a:f4:c7:00:cd:f4:29:75:29:17:6a:a8:40:40:60: 50:d9:a6:aa:47:ef:22:55:88:17:0a:3f:43:2c:ba: 13:c1:ad:5f:73:15:2d:50:94:32:2e:f6:e1:42:d7: d1:c3:f9:3d:41:d0:dd:af:8b:f5:1d:8c:88:b4:d9: 21:20:24:7b:0a:b3:ca:2b:3f:b2:71:3a:6f:32:46: 25:93:ae:07:4f:aa:7d:c5:bd:28:a5:20:c5:88:53: 10:11:af:4f:45:e0:5b:6b:b3:ac:1e:51:23:9c:9d: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7534 sbgp-ipAddrBlock: critical IPv4: 202.160.64.0/19 Signature Algorithm: sha256WithRSAEncryption 77:d7:7e:b9:39:9f:43:36:20:57:9d:45:67:d7:7b:d8:ee:bb: 05:b9:6e:7c:d9:e3:c1:6c:c0:f0:73:03:51:79:50:73:7a:35: 06:f6:77:f3:3a:1d:78:6b:59:7c:de:57:7f:05:51:2f:b4:68: 21:47:64:38:c1:26:35:3f:36:8a:97:82:26:b6:04:a4:5a:22: bb:7d:e5:78:c5:f8:59:a6:19:ee:1f:67:51:df:9a:b9:5e:b4: 46:dd:e0:d3:7b:a0:91:bd:01:9a:98:dd:c2:57:0e:c6:29:ae: eb:c7:16:da:7f:1e:6e:de:a0:01:19:b0:2c:3f:3e:e8:8d:2c: 66:1c:28:d6:f0:bc:0c:61:59:48:f2:cb:f2:b2:c9:6b:b8:22: 12:d3:b8:90:c2:3f:ef:58:38:dd:2c:87:34:58:5d:6c:da:16: 98:fa:55:d7:ef:b0:46:3b:0c:3e:05:be:6b:65:a7:ac:b9:89: 04:12:38:be:a8:f0:65:f6:15:ee:4a:02:f2:7d:2a:64:41:63: 82:16:b4:e4:c1:0a:aa:ee:48:bd:f1:76:92:ce:0b:e1:0a:f3: 0a:e2:25:67:ee:09:f4:18:6b:a7:13:bd:00:aa:1a:f4:6b:7d: 74:ec:73:6e:75:6a:db:cf:d7:52:3d:6e:57:7f:20:2e:ba:9e: 93:be:ed:88 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICL4kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAyMjMzMVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRUNEMkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYmpnjrrA6foiGQoA+m cpC1gh4PRVcW2Kaeq5F474058fdntRUgaZg3d+HRePDLjs/F6Mq1FPgbmvtkTny/ SBzu2Yex5YwtMVZkP1VP2ZhHtMPtkg9euZJRMX9qf7TAUpHFHqe+lXIcD9JWZ2qV q7GPDGfN0dottUkQOTuqh9i6CqIr5ZLFCSQZmeELw0yxkwDNqhUbivTHAM30KXUp F2qoQEBgUNmmqkfvIlWIFwo/Qyy6E8GtX3MVLVCUMi724ULX0cP5PUHQ3a+L9R2M iLTZISAkewqzyis/snE6bzJGJZOuB0+qfcW9KKUgxYhTEBGvT0XgW2uzrB5RI5yd 9PcCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTs0v3DhSKnSkIt570cAm1V4I2emjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJB LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1RQU0lMS0VSQS83Tkw5dzRVaXAwcENMZWU5SEFKdFZlQ05ucG8ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAh1uMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyqBAMA0GCSqGSIb3DQEBCwUAA4IBAQB31365OZ9DNiBXnUVn13vY 7rsFuW582ePBbMDwcwNReVBzejUG9nfzOh14a1l83ld/BVEvtGghR2Q4wSY1PzaK l4ImtgSkWiK7feV4xfhZphnuH2dR35q5XrRG3eDTe6CRvQGamN3CVw7GKa7rxxba fx5u3qABGbAsPz7ojSxmHCjW8LwMYVlI8svysslruCIS07iQwj/vWDjdLIc0WF1s 2haY+lXX77BGOww+Bb5rZaesuYkEEji+qPBl9hXuSgLyfSpkQWOCFrTkwQqq7ki9 8XaSzgvhCvMK4iVn7gn0GGunE70Aqhr0a3107HNudWrbz9dSPW5XfyAuup6Tvu2I -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org