$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer File: GrLnpA7IH96KYX6fq15hgkeczCs.cer (raw, json) Hash identifier: WyR+ekup52gLgm+/uXnCLokqlUieEW7MrN8ydZ14O/w= Subject key identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 28DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:26 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: AS: 18421 IP: 202.6.104.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10460 (0x28dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:26 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:2b:46:2f:8a:6b:1d:c6:f9:6a:d6:0a:9f: 07:f2:8b:ed:12:3e:09:ff:94:ff:ad:4d:6a:f8:3f: c0:9d:d2:8c:b0:98:56:62:72:43:09:7d:91:48:df: fd:08:50:ce:11:b4:56:55:c7:2d:ee:72:1d:9f:5c: ab:74:fc:87:a3:c1:ca:ae:a5:0a:db:dc:64:27:4f: ff:8a:3e:c7:77:d6:9d:97:a6:ef:ac:7c:12:9c:cc: 93:96:2d:96:9b:e5:e5:2d:7d:4c:60:bc:e2:f9:3e: 45:6b:bd:01:bd:06:eb:90:b8:71:12:b7:7c:8c:c1: 16:12:cb:12:96:33:51:20:6b:c4:3d:1d:de:b9:03: 7c:c0:42:ab:ac:cd:06:2a:5b:33:93:f2:53:cd:45: 5e:93:92:5b:e3:07:d9:07:8e:b9:bb:7c:6e:59:9f: 3b:a9:44:6e:03:ff:77:24:7f:e3:11:2a:40:28:ea: f9:d2:84:a8:ff:83:6e:46:13:43:d1:2c:09:1b:80: 6c:61:b5:34:5a:48:12:2b:f8:10:ea:7f:ed:58:8d: 52:0a:8d:79:c1:53:1c:e7:36:82:ee:7d:4c:59:20: 6f:6a:a9:2c:45:2e:ce:f3:e6:15:02:0b:04:d3:4c: d2:21:7c:ce:5b:30:40:7b:2b:01:95:e4:e6:3f:73: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18421 sbgp-ipAddrBlock: critical IPv4: 202.6.104.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:8b:3c:51:dd:18:ef:39:12:6c:f2:56:a8:4c:b0:dd:64:71: 92:7f:44:e1:ad:6a:cf:ad:b9:93:d5:22:7f:07:d8:80:ed:30: a4:98:aa:52:61:e0:dd:89:82:f4:2e:af:f8:38:a7:5a:c3:1b: b2:38:09:57:c5:59:d5:3a:bd:4f:b1:a3:94:04:96:ed:c5:97: 9a:cb:35:df:29:46:79:1a:30:3c:7b:cc:ca:a9:08:b1:89:3b: ec:18:8e:8e:60:77:d1:c6:e6:00:af:46:ae:7f:b3:ff:20:ea: 1d:4d:d9:cf:b8:fc:b8:ac:27:b9:c9:e2:f6:5b:4a:c7:65:51: 56:9a:78:66:64:77:6f:7d:da:2c:ab:65:c0:c6:e0:17:72:8c: 1a:f3:9d:98:88:7c:54:64:e1:2e:de:a4:2c:13:9b:f2:5b:62: 8a:3f:49:82:6b:9a:4d:91:a3:2a:de:3e:b4:16:75:2b:cc:d0: d6:09:43:87:34:3f:29:5c:de:5e:70:8a:11:16:64:4d:58:12: 34:81:b2:f2:f6:f0:31:ef:ed:ae:7f:82:77:2e:f5:a3:5d:2a: 25:e3:0e:b6:56:67:c3:e6:10:30:c5:0f:25:67:57:78:1f:ae: c8:7b:e7:da:60:40:d3:15:87:cb:69:b6:d9:6e:a6:1d:41:3e: d2:a5:23:47 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICKNwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyNloXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMUFCMkU3QTQwRUM4MUZERThBNjE3RTlGQUI1RTYxODI0NzlDQ0My QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKYOK0Yvimsdxvlq1gqf B/KL7RI+Cf+U/61Navg/wJ3SjLCYVmJyQwl9kUjf/QhQzhG0VlXHLe5yHZ9cq3T8 h6PByq6lCtvcZCdP/4o+x3fWnZem76x8EpzMk5Ytlpvl5S19TGC84vk+RWu9Ab0G 65C4cRK3fIzBFhLLEpYzUSBrxD0d3rkDfMBCq6zNBipbM5PyU81FXpOSW+MH2QeO ubt8blmfO6lEbgP/dyR/4xEqQCjq+dKEqP+DbkYTQ9EsCRuAbGG1NFpIEiv4EOp/ 7ViNUgqNecFTHOc2gu59TFkgb2qpLEUuzvPmFQILBNNM0iF8zlswQHsrAZXk5j9z WpkCAwEAAaOCAnUwggJxMB0GA1UdDgQWBBQasuekDsgf3ophfp+rXmGCR5zMKzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgeAGCCsGAQUFBwELBIHTMIHQMD0GCCsGAQUFBzAF hjFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJU0hJTkJB TksvMFwGCCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvVEFJU0hJTkJBTksvR3JMbnBBN0lIOTZLWVg2ZnExNWhna2VjekNzLm1m dDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5 LnhtbDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJH9TAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcoGaDANBgkqhkiG9w0BAQsFAAOCAQEAm4s8Ud0Y7zkSbPJW qEyw3WRxkn9E4a1qz625k9UifwfYgO0wpJiqUmHg3YmC9C6v+DinWsMbsjgJV8VZ 1Tq9T7GjlASW7cWXmss13ylGeRowPHvMyqkIsYk77BiOjmB30cbmAK9Grn+z/yDq HU3Zz7j8uKwnucni9ltKx2VRVpp4ZmR3b33aLKtlwMbgF3KMGvOdmIh8VGThLt6k LBOb8ltiij9JgmuaTZGjKt4+tBZ1K8zQ1glDhzQ/KVzeXnCKERZkTVgSNIGy8vbw Me/trn+Cdy71o10qJeMOtlZnw+YQMMUPJWdXeB+uyHvn2mBA0xWHy2m22W6mHUE+ 0qUjRw== -----END CERTIFICATE-----Generated at Fri May 17 09:34:27 2024 by rpki-client on console-fra.rpki-client.org