$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer File: EUZfw0oIeBMpxIgj9JEEdltcMzs.cer (raw, json) Hash identifier: gmnQcNGsdy8Es2I3jmKcM4glmcGwZNhTcd+qNsWYEeI= Subject key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:08 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: AS: 17718 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10130 (0x2792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=11465FC34A08781329C48823F49104765B5C333B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:af:f4:7a:f3:28:bd:f4:90:1c:c9:fc:4f: 69:5b:64:b6:35:0f:72:bd:71:13:51:b7:96:12:bc: c5:a3:ff:8c:5d:0a:38:b2:da:37:8f:c2:db:b0:b9: 45:b1:c4:f2:2f:3b:0d:1d:6a:8d:d6:25:73:de:9b: 48:08:58:69:5d:5d:37:11:db:f3:50:97:9f:2c:7a: 76:5e:be:11:f1:18:e6:c0:eb:14:4a:71:1d:6d:aa: 4b:84:04:43:9e:00:48:ea:cd:00:21:9d:22:4d:d1: 6d:83:af:89:14:7a:01:f0:69:95:c3:86:ee:9b:75: c5:e3:fd:9a:73:d4:49:39:97:40:94:0f:2b:1d:fc: 0e:85:95:ac:5e:99:7c:a1:3e:db:9c:11:10:2e:05: 4f:47:4d:af:52:5a:49:e8:dd:d0:10:e9:86:ff:1e: fd:e5:c9:e5:e4:68:1f:cd:6e:81:fe:c5:24:74:5c: 29:2e:35:93:70:5f:c9:74:c0:98:67:af:c7:e4:d2: 8d:90:00:87:9f:72:82:b9:85:63:6f:36:3f:2a:30: 05:19:7c:3b:10:26:8f:8e:fa:e2:92:98:68:60:90: b6:f1:14:ae:ad:47:07:66:f4:e6:c7:35:d4:e1:d8: f2:be:55:a3:19:c3:d5:a3:61:1b:c2:25:2f:fe:0a: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17718 Signature Algorithm: sha256WithRSAEncryption 82:8a:53:d3:c2:6f:7e:84:dc:b6:0b:50:ea:6b:6a:e3:f2:db: 60:90:c2:67:ee:2d:ad:fd:f5:eb:46:ab:9d:db:3d:f4:a0:f1: a8:eb:df:7e:13:ba:0b:79:18:83:42:74:94:ff:0b:a2:ee:e4: cb:b8:90:49:e7:fa:2f:40:5b:a7:05:de:e1:cd:85:3f:5c:e9: 03:8f:f5:4b:82:22:bf:3e:58:b4:be:7f:a9:67:0e:dc:b0:15: 38:f7:66:5c:a9:6c:04:cb:9d:42:04:85:0a:ec:1d:e8:0f:43: cc:a8:74:06:bc:2f:4b:c8:b5:7a:ec:8b:55:02:2f:8f:af:26: 84:91:d1:7a:75:44:8c:8c:65:d8:d9:f1:3d:11:79:42:ca:72: 0e:f4:44:3c:66:58:9b:43:60:c6:fe:3a:28:a0:73:ec:32:84: a1:9e:b8:3b:1d:3b:88:c7:45:45:d1:29:bf:9a:6a:73:e3:83: f2:1e:ab:47:41:6f:6c:7a:61:b6:a5:89:27:3a:97:59:33:38: 2e:c7:74:2c:d4:e9:11:e2:b0:0a:cb:ba:2a:2b:30:79:d7:dc: 3a:6f:1e:7e:e6:08:20:3f:6d:b0:ae:e6:74:17:87:58:0e:7c: 16:3e:e2:a7:2b:5c:43:7d:b0:17:b2:40:aa:ea:9d:32:a9:62: 1b:1b:4d:d8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICJ5IwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEwOFoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMTE0NjVGQzM0QTA4NzgxMzI5QzQ4ODIzRjQ5MTA0NzY1QjVDMzMz QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALb+r/R68yi99JAcyfxP aVtktjUPcr1xE1G3lhK8xaP/jF0KOLLaN4/C27C5RbHE8i87DR1qjdYlc96bSAhY aV1dNxHb81CXnyx6dl6+EfEY5sDrFEpxHW2qS4QEQ54ASOrNACGdIk3RbYOviRR6 AfBplcOG7pt1xeP9mnPUSTmXQJQPKx38DoWVrF6ZfKE+25wREC4FT0dNr1JaSejd 0BDphv8e/eXJ5eRoH81ugf7FJHRcKS41k3BfyXTAmGevx+TSjZAAh59ygrmFY282 PyowBRl8OxAmj4764pKYaGCQtvEUrq1HB2b05sc11OHY8r5VoxnD1aNhG8IlL/4K dgsCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBQRRl/DSgh4EynEiCP0kQR2W1wzOzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBSUpJTi8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9DSEFJSklOL0VVWmZ3MG9JZUJNcHhJZ2o5SkVFZGx0Y016cy5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICRTYwDQYJKoZIhvcNAQELBQADggEBAIKKU9PC b36E3LYLUOprauPy22CQwmfuLa399etGq53bPfSg8ajr334Tugt5GINCdJT/C6Lu 5Mu4kEnn+i9AW6cF3uHNhT9c6QOP9UuCIr8+WLS+f6lnDtywFTj3ZlypbATLnUIE hQrsHegPQ8yodAa8L0vItXrsi1UCL4+vJoSR0Xp1RIyMZdjZ8T0ReULKcg70RDxm WJtDYMb+Oiigc+wyhKGeuDsdO4jHRUXRKb+aanPjg/Ieq0dBb2x6YbaliSc6l1kz OC7HdCzU6RHisArLuiorMHnX3DpvHn7mCCA/bbCu5nQXh1gOfBY+4qcrXEN9sBey QKrqnTKpYhsbTdg= -----END CERTIFICATE-----Generated at Fri May 17 22:19:30 2024 by rpki-client on console-fra.rpki-client.org