$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer File: GrLnpA7IH96KYX6fq15hgkeczCs.cer (raw, json) Hash identifier: EqZe1I0Lj+lSjr3dDzgpwYj9GuIKJksAjPHcPvmp41Y= Subject key identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 35FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:29:19 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 18421 IP: 202.6.104.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 17:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13821 (0x35fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:29:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:2b:46:2f:8a:6b:1d:c6:f9:6a:d6:0a:9f: 07:f2:8b:ed:12:3e:09:ff:94:ff:ad:4d:6a:f8:3f: c0:9d:d2:8c:b0:98:56:62:72:43:09:7d:91:48:df: fd:08:50:ce:11:b4:56:55:c7:2d:ee:72:1d:9f:5c: ab:74:fc:87:a3:c1:ca:ae:a5:0a:db:dc:64:27:4f: ff:8a:3e:c7:77:d6:9d:97:a6:ef:ac:7c:12:9c:cc: 93:96:2d:96:9b:e5:e5:2d:7d:4c:60:bc:e2:f9:3e: 45:6b:bd:01:bd:06:eb:90:b8:71:12:b7:7c:8c:c1: 16:12:cb:12:96:33:51:20:6b:c4:3d:1d:de:b9:03: 7c:c0:42:ab:ac:cd:06:2a:5b:33:93:f2:53:cd:45: 5e:93:92:5b:e3:07:d9:07:8e:b9:bb:7c:6e:59:9f: 3b:a9:44:6e:03:ff:77:24:7f:e3:11:2a:40:28:ea: f9:d2:84:a8:ff:83:6e:46:13:43:d1:2c:09:1b:80: 6c:61:b5:34:5a:48:12:2b:f8:10:ea:7f:ed:58:8d: 52:0a:8d:79:c1:53:1c:e7:36:82:ee:7d:4c:59:20: 6f:6a:a9:2c:45:2e:ce:f3:e6:15:02:0b:04:d3:4c: d2:21:7c:ce:5b:30:40:7b:2b:01:95:e4:e6:3f:73: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18421 sbgp-ipAddrBlock: critical IPv4: 202.6.104.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:85:82:d6:d1:4a:d2:16:08:33:88:d4:ac:a1:73:6f:b7:ed: 8e:45:42:53:6e:1e:6d:47:c7:08:23:3b:75:a7:f6:53:9a:37: 09:da:a0:c7:cc:b8:75:a4:b6:95:5b:22:8b:21:87:5c:a2:28: 9b:7b:6b:9d:34:95:14:89:1d:51:ca:be:19:6e:f8:4a:ff:51: 87:31:6b:e3:f7:c4:41:12:45:28:9b:37:b5:59:ba:33:58:35: c9:68:16:8e:ca:79:37:bd:a0:bb:9b:c5:13:c6:86:55:b7:95: f1:ba:b0:1c:99:f5:28:ce:1a:9e:18:b7:bd:1c:31:28:14:f8: e4:c6:6d:8a:2a:31:29:9c:30:b4:77:de:b5:45:79:e3:dc:db: 99:0b:22:23:f2:0e:38:6a:69:45:81:4c:e8:e3:b0:23:c7:4b: 87:5f:04:54:a1:e9:64:9f:5d:91:0d:cb:27:6e:0d:16:fc:b7: 23:3d:cd:ef:0d:65:2f:a6:64:04:51:15:b3:c0:9f:b7:06:c3: c5:9b:dd:be:38:b4:92:bf:40:49:18:0d:f0:ce:53:b7:b9:c6: 13:c9:db:f1:dd:d5:5b:68:57:fe:0a:ac:20:19:24:9f:05:9d: 8d:08:f7:e7:10:87:ef:7c:93:5f:4d:9c:1d:24:f0:19:9c:a4: 69:3a:32:8f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICNf0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxOVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMUFCMkU3QTQwRUM4MUZERThBNjE3RTlGQUI1RTYxODI0NzlDQ0My QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYOK0Yvimsdxvlq1gqf B/KL7RI+Cf+U/61Navg/wJ3SjLCYVmJyQwl9kUjf/QhQzhG0VlXHLe5yHZ9cq3T8 h6PByq6lCtvcZCdP/4o+x3fWnZem76x8EpzMk5Ytlpvl5S19TGC84vk+RWu9Ab0G 65C4cRK3fIzBFhLLEpYzUSBrxD0d3rkDfMBCq6zNBipbM5PyU81FXpOSW+MH2QeO ubt8blmfO6lEbgP/dyR/4xEqQCjq+dKEqP+DbkYTQ9EsCRuAbGG1NFpIEiv4EOp/ 7ViNUgqNecFTHOc2gu59TFkgb2qpLEUuzvPmFQILBNNM0iF8zlswQHsrAZXk5j9z WpkCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBQasuekDsgf3ophfp+rXmGCR5zMKzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgeAGCCsGAQUFBwELBIHTMIHQMD0GCCsGAQUFBzAF hjFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJU0hJTkJB TksvMFwGCCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvVEFJU0hJTkJBTksvR3JMbnBBN0lIOTZLWVg2ZnExNWhna2VjekNzLm1m dDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5 LnhtbDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJH9TAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcoGaDANBgkqhkiG9w0BAQsFAAOCAQEAbIWC1tFK0hYIM4jU rKFzb7ftjkVCU24ebUfHCCM7daf2U5o3Cdqgx8y4daS2lVsiiyGHXKIom3trnTSV FIkdUcq+GW74Sv9RhzFr4/fEQRJFKJs3tVm6M1g1yWgWjsp5N72gu5vFE8aGVbeV 8bqwHJn1KM4anhi3vRwxKBT45MZtiioxKZwwtHfetUV549zbmQsiI/IOOGppRYFM 6OOwI8dLh18EVKHpZJ9dkQ3LJ24NFvy3Iz3N7w1lL6ZkBFEVs8CftwbDxZvdvji0 kr9ASRgN8M5Tt7nGE8nb8d3VW2hX/gqsIBkknwWdjQj35xCH73yTX02cHSTwGZyk aToyjw== -----END CERTIFICATE-----Generated at Sat Apr 12 14:27:02 2025 by rpki-client