$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer File: C9olxjD4_0bjB7GUzSqtHm0GMx0.cer (raw, json) Hash identifier: B8WpcqHdskzonSaJQkQxJXbVnNtIR/OBsQDffpg/fmM= Subject key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 28F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:27 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.126.88.0/22 IP: 2405:67c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10482 (0x28f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:27 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:14:f1:c6:f0:0e:91:35:77:e3:0d:e5:78: 22:bf:76:47:b6:aa:20:9e:b4:df:c9:b5:7a:5a:38: 83:3a:c2:69:4d:42:1e:c0:26:ca:85:57:18:e1:4e: 3f:bf:78:84:89:11:fe:80:b7:6a:56:c6:f0:45:df: b9:a4:09:b6:27:83:99:72:3c:f0:c9:a6:04:a0:56: b7:a9:85:ff:fd:97:fd:ff:5a:9b:12:26:e5:98:ef: b3:15:ea:7c:bd:a1:38:6e:1e:91:be:9d:f4:fa:8d: ac:62:83:92:30:21:38:ad:cb:df:7d:9a:a7:f6:71: 5a:57:4f:56:3f:12:9b:cf:54:93:38:67:12:36:46: 67:bc:c3:74:1e:f7:23:f3:40:44:96:ea:ac:58:aa: 5d:ce:50:a1:a3:0e:87:fa:e9:ed:3d:06:84:a1:1d: 32:64:77:77:2a:20:10:35:12:74:88:16:e0:4a:2d: dc:1a:60:16:d6:c7:b0:d3:41:11:7c:5b:59:89:9b: 92:e4:c5:7a:b1:57:10:6b:f3:cd:a9:2e:86:4f:f1: 7a:1e:27:34:b4:82:f3:fe:11:05:ed:a5:33:24:b7: 83:e5:75:b1:0b:44:28:27:01:7a:91:d2:f8:7c:fe: f9:72:9a:7e:ce:ec:30:b6:3e:50:85:53:15:37:be: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.126.88.0/22 IPv6: 2405:67c0::/32 Signature Algorithm: sha256WithRSAEncryption 81:7a:af:95:35:e7:9f:ac:4a:36:3a:1b:5f:5c:ef:92:49:43: 6b:0a:ab:1b:9c:b6:aa:d0:a3:3d:e5:d6:8d:5c:a7:ed:74:8a: 75:a6:27:a0:d7:42:9b:ab:4e:25:76:36:b6:14:c5:f2:f2:29: b0:e1:98:3b:df:cc:ac:8c:de:04:be:f2:c4:29:d7:85:4a:09: ce:57:aa:48:1b:bc:07:66:d2:04:7c:1e:50:9b:3f:82:d5:f0: 42:e8:a2:bf:02:d3:96:41:95:84:83:c9:44:d7:bc:56:b5:2f: 76:6b:5e:c2:cb:73:41:d0:61:99:d5:0c:11:2d:2c:43:08:6f: 86:33:01:9b:84:15:48:2d:d2:c6:45:8f:77:f1:05:54:85:16: b7:dc:25:2b:fc:ad:7d:b6:33:e5:be:ed:34:5a:b2:6c:a5:5e: 40:ff:c4:13:4f:f7:b2:0a:83:da:bd:e9:01:ba:09:50:45:7c: 9f:72:f9:36:d7:52:09:53:0c:18:33:34:7c:a9:f2:69:10:1b: 0d:f0:e6:e7:6e:c8:3f:95:a7:98:68:d9:6b:d3:0d:88:01:d6: 54:66:45:37:e6:25:07:8d:21:21:ae:aa:a1:39:b1:62:b7:de: ea:d5:d6:1d:49:c4:66:cd:9c:ed:53:85:da:bf:0a:88:4e:d3: 4a:ad:8b:9f -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICKPIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyN1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMEJEQTI1QzYzMEY4RkY0NkUzMDdCMTk0Q0QyQUFEMUU2RDA2MzMx RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqxFPHG8A6RNXfjDeV4 Ir92R7aqIJ6038m1elo4gzrCaU1CHsAmyoVXGOFOP794hIkR/oC3albG8EXfuaQJ tieDmXI88MmmBKBWt6mF//2X/f9amxIm5ZjvsxXqfL2hOG4ekb6d9PqNrGKDkjAh OK3L332ap/ZxWldPVj8Sm89UkzhnEjZGZ7zDdB73I/NARJbqrFiqXc5QoaMOh/rp 7T0GhKEdMmR3dyogEDUSdIgW4Eot3BpgFtbHsNNBEXxbWYmbkuTFerFXEGvzzaku hk/xeh4nNLSC8/4RBe2lMyS3g+V1sQtEKCcBepHS+Hz++XKafs7sMLY+UIVTFTe+ ZNMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQL2iXGMPj/RuMHsZTNKq0ebQYzHTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hBTkdGVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSEFOR0ZVL0M5b2x4akQ0XzBiakI3R1V6U3F0SG0wR014MC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnflgwDQQCAAIwBwMFACQFZ8AwDQYJ KoZIhvcNAQELBQADggEBAIF6r5U155+sSjY6G19c75JJQ2sKqxuctqrQoz3l1o1c p+10inWmJ6DXQpurTiV2NrYUxfLyKbDhmDvfzKyM3gS+8sQp14VKCc5XqkgbvAdm 0gR8HlCbP4LV8ELoor8C05ZBlYSDyUTXvFa1L3ZrXsLLc0HQYZnVDBEtLEMIb4Yz AZuEFUgt0sZFj3fxBVSFFrfcJSv8rX22M+W+7TRasmylXkD/xBNP97IKg9q96QG6 CVBFfJ9y+TbXUglTDBgzNHyp8mkQGw3w5uduyD+Vp5ho2WvTDYgB1lRmRTfmJQeN ISGuqqE5sWK33urV1h1JxGbNnO1Thdq/CohO00qti58= -----END CERTIFICATE-----Generated at Fri May 17 22:07:42 2024 by rpki-client on console-ams.rpki-client.org