$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer File: 7NL9w4Uip0pCLee9HAJtVeCNnpo.cer (raw, json) Hash identifier: f58xdAs2zkBps1sJPcLy9wFOk2ZYi4kyTYOsXeuD6zU= Subject key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 05 Oct 2023 07:38:10 +0000 Certificate not after: Fri 04 Oct 2024 07:31:42 +0000 Subordinate resources: AS: 7534 IP: 202.160.64.0/19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10776 (0x2a18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Oct 5 07:38:10 2023 GMT Not After : Oct 4 07:31:42 2024 GMT Subject: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:a6:78:eb:ac:0e:9f:a2:21:90:a0:0f:a6: 72:90:b5:82:1e:0f:45:57:16:d8:a6:9e:ab:91:78: ef:8d:39:f1:f7:67:b5:15:20:69:98:37:77:e1:d1: 78:f0:cb:8e:cf:c5:e8:ca:b5:14:f8:1b:9a:fb:64: 4e:7c:bf:48:1c:ee:d9:87:b1:e5:8c:2d:31:56:64: 3f:55:4f:d9:98:47:b4:c3:ed:92:0f:5e:b9:92:51: 31:7f:6a:7f:b4:c0:52:91:c5:1e:a7:be:95:72:1c: 0f:d2:56:67:6a:95:ab:b1:8f:0c:67:cd:d1:da:2d: b5:49:10:39:3b:aa:87:d8:ba:0a:a2:2b:e5:92:c5: 09:24:19:99:e1:0b:c3:4c:b1:93:00:cd:aa:15:1b: 8a:f4:c7:00:cd:f4:29:75:29:17:6a:a8:40:40:60: 50:d9:a6:aa:47:ef:22:55:88:17:0a:3f:43:2c:ba: 13:c1:ad:5f:73:15:2d:50:94:32:2e:f6:e1:42:d7: d1:c3:f9:3d:41:d0:dd:af:8b:f5:1d:8c:88:b4:d9: 21:20:24:7b:0a:b3:ca:2b:3f:b2:71:3a:6f:32:46: 25:93:ae:07:4f:aa:7d:c5:bd:28:a5:20:c5:88:53: 10:11:af:4f:45:e0:5b:6b:b3:ac:1e:51:23:9c:9d: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7534 sbgp-ipAddrBlock: critical IPv4: 202.160.64.0/19 Signature Algorithm: sha256WithRSAEncryption 47:8c:2a:24:2d:60:bb:bb:bf:79:f8:1a:49:f9:85:00:30:56: a3:29:ad:0c:88:e8:3b:b9:aa:7f:07:e3:14:07:b4:e7:8d:2c: af:79:6e:91:9f:2e:8a:5a:b9:03:0a:c9:e7:46:3d:80:3a:58: 58:10:d5:e2:47:f7:dc:69:ed:5b:d3:6a:45:9a:f1:bc:34:7f: cd:d8:d5:6b:5c:b8:9f:e7:c7:43:e2:25:43:49:fe:2d:76:f0: 5d:36:1e:0d:2e:92:5f:9b:41:33:ed:10:ad:04:46:ab:41:39: f9:95:5d:bd:a0:23:4d:b4:44:fe:f1:8f:f8:4f:5a:d4:7d:48: 6e:6a:d0:b6:0d:29:be:5d:37:f5:1e:7d:53:f0:fc:c5:9f:b1: 08:b3:07:63:ab:37:bb:b9:36:a6:ea:af:6e:c2:21:56:f1:7d: 4e:91:36:28:9b:f3:8b:fd:63:d5:a4:f2:d1:d6:f8:a8:04:6d: 31:5b:cf:8f:1e:07:fa:2e:3d:25:16:f3:4f:8d:a8:3a:9f:24: 11:93:9e:84:7f:95:b9:b6:21:bd:a4:80:df:da:c6:93:a3:11: 8e:f8:90:ed:c7:0b:7d:b5:0c:27:0d:a2:54:08:78:2e:d1:96: f9:11:4b:ae:f4:dd:ce:b3:4d:23:62:f8:93:ec:ec:c9:dd:69: 3e:52:cf:ae -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICKhgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMTAwNTA3MzgxMFoXDTI0MTAwNDA3MzE0MlowMzEx MC8GA1UEAxMoRUNEMkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5 QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYmpnjrrA6foiGQoA+m cpC1gh4PRVcW2Kaeq5F474058fdntRUgaZg3d+HRePDLjs/F6Mq1FPgbmvtkTny/ SBzu2Yex5YwtMVZkP1VP2ZhHtMPtkg9euZJRMX9qf7TAUpHFHqe+lXIcD9JWZ2qV q7GPDGfN0dottUkQOTuqh9i6CqIr5ZLFCSQZmeELw0yxkwDNqhUbivTHAM30KXUp F2qoQEBgUNmmqkfvIlWIFwo/Qyy6E8GtX3MVLVCUMi724ULX0cP5PUHQ3a+L9R2M iLTZISAkewqzyis/snE6bzJGJZOuB0+qfcW9KKUgxYhTEBGvT0XgW2uzrB5RI5yd 9PcCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTs0v3DhSKnSkIt570cAm1V4I2emjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJB LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1RQU0lMS0VSQS83Tkw5dzRVaXAwcENMZWU5SEFKdFZlQ05ucG8ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAh1uMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyqBAMA0GCSqGSIb3DQEBCwUAA4IBAQBHjCokLWC7u795+BpJ+YUA MFajKa0MiOg7uap/B+MUB7TnjSyveW6Rny6KWrkDCsnnRj2AOlhYENXiR/fcae1b 02pFmvG8NH/N2NVrXLif58dD4iVDSf4tdvBdNh4NLpJfm0Ez7RCtBEarQTn5lV29 oCNNtET+8Y/4T1rUfUhuatC2DSm+XTf1Hn1T8PzFn7EIswdjqze7uTam6q9uwiFW 8X1OkTYom/OL/WPVpPLR1vioBG0xW8+PHgf6Lj0lFvNPjag6nyQRk56Ef5W5tiG9 pIDf2saToxGO+JDtxwt9tQwnDaJUCHgu0Zb5EUuu9N3Os00jYviT7OzJ3Wk+Us+u -----END CERTIFICATE-----Generated at Fri May 17 22:19:27 2024 by rpki-client on console-fra.rpki-client.org