$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer File: --Di_UF6N7G1a7N9oWg0Ipo5klY.cer (raw, json) Hash identifier: ctZS0jt/V9I30CcXxGsRtH6YjkP+rKHX5nHv0I+yTkQ= Subject key identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 29CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 07 Sep 2023 04:00:58 +0000 Certificate not after: Thu 05 Sep 2024 08:24:24 +0000 Subordinate resources: IP: 103.69.52.0/23 IP: 2401:3060::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10703 (0x29cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 7 04:00:58 2023 GMT Not After : Sep 5 08:24:24 2024 GMT Subject: CN=FBE0E2FD417A37B1B56BB37DA16834229A399256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:32:43:d2:00:a1:2c:bd:98:3d:7a:a0:84: 0b:d2:21:94:04:a4:4f:a1:da:e9:fc:5b:e8:63:ad: 37:e6:c9:b1:af:cb:57:4c:66:85:af:52:97:34:49: a9:4b:d1:db:b4:4a:4a:78:72:dd:72:3d:29:eb:bb: c0:3e:56:fe:1b:ca:34:2d:f4:c2:a7:6a:a6:9e:27: e8:ae:1a:7b:05:b5:09:2d:1e:0b:ee:bb:c1:87:83: da:d3:6e:08:08:e4:60:f9:a3:62:17:73:eb:92:1d: 39:b9:9e:2a:40:38:8e:a6:6e:07:01:8d:01:93:a3: 63:19:46:89:99:be:b6:08:b0:01:9e:4a:04:7a:f1: ed:58:b3:10:4b:87:37:c4:bd:a9:6f:39:eb:11:18: 33:47:be:23:8e:af:fc:ac:ec:a3:e6:8b:9e:ee:4d: 37:dd:cb:72:a1:f5:10:31:78:f5:39:16:0f:43:30: dc:4f:5e:64:63:28:75:bd:77:2b:73:94:20:61:ce: b4:67:be:a6:0f:b5:cd:39:04:1e:54:ab:1c:05:fc: 1b:64:c8:c9:6d:6f:09:7b:07:cf:26:e9:0b:a9:e5: aa:33:01:4a:eb:f2:9a:d1:4b:ca:75:c0:11:42:a7: 12:ba:d8:df:94:a3:d4:2c:9a:3e:8b:4d:99:f2:4b: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.69.52.0/23 IPv6: 2401:3060::/32 Signature Algorithm: sha256WithRSAEncryption 61:44:d2:8b:3c:bd:03:22:fb:b3:93:4c:a5:41:83:ad:66:41: 1b:95:2e:92:4a:0b:35:d6:dc:9e:b4:f6:5e:a1:84:d2:1f:dd: f4:46:34:e1:f4:78:f5:1f:04:48:5a:47:b5:35:8b:eb:06:96: 12:f4:c9:1a:81:73:4c:29:64:3b:9b:fe:4f:f9:85:9f:e2:67: f2:31:d5:75:f5:bf:a5:cf:9e:27:2a:12:2f:5e:cb:d6:93:34: 0a:30:37:2d:96:87:b4:b7:5e:63:8b:b4:12:eb:ab:1a:08:99: 54:28:44:d8:43:19:7c:38:83:35:d4:fa:16:de:30:ad:4e:09: 71:98:fd:f3:58:27:c8:a0:d5:5d:9a:3d:ed:75:0b:a1:70:70: 1a:ed:22:b4:e0:61:7f:82:f9:f0:f1:d7:47:d3:ab:45:03:5e: de:29:50:08:bb:69:09:bc:2d:74:8f:80:de:1d:ef:fa:67:db: 48:f5:f8:96:0e:d5:61:b2:ee:6e:54:2b:f9:b8:f9:d6:7c:1f: d9:6e:91:72:c4:64:4b:ab:a6:9e:e6:7f:6b:ad:ba:e9:0a:2d: e3:5b:b4:af:00:89:27:b7:81:56:ee:8a:6b:21:31:9e:af:bf: fe:4e:cc:a9:bf:b1:64:50:d6:a4:57:51:7e:4b:c4:39:c4:c4: d7:40:02:48 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICKc8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwNzA0MDA1OFoXDTI0MDkwNTA4MjQyNFowMzEx MC8GA1UEAxMoRkJFMEUyRkQ0MTdBMzdCMUI1NkJCMzdEQTE2ODM0MjI5QTM5OTI1 NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANetMkPSAKEsvZg9eqCE C9IhlASkT6Ha6fxb6GOtN+bJsa/LV0xmha9SlzRJqUvR27RKSnhy3XI9Keu7wD5W /hvKNC30wqdqpp4n6K4aewW1CS0eC+67wYeD2tNuCAjkYPmjYhdz65IdObmeKkA4 jqZuBwGNAZOjYxlGiZm+tgiwAZ5KBHrx7VizEEuHN8S9qW856xEYM0e+I46v/Kzs o+aLnu5NN93LcqH1EDF49TkWD0Mw3E9eZGModb13K3OUIGHOtGe+pg+1zTkEHlSr HAX8G2TIyW1vCXsHzybpC6nlqjMBSuvymtFLynXAEUKnErrY35Sj1CyaPotNmfJL WVMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBT74OL9QXo3sbVrs32haDQimjmSVjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElMSUFORy8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9MSUxJQU5HLy0tRGlfVUY2TjdHMWE3TjlvV2cwSXBvNWtsWS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnRTQwDQQCAAIwBwMFACQBMGAwDQYJ KoZIhvcNAQELBQADggEBAGFE0os8vQMi+7OTTKVBg61mQRuVLpJKCzXW3J609l6h hNIf3fRGNOH0ePUfBEhaR7U1i+sGlhL0yRqBc0wpZDub/k/5hZ/iZ/Ix1XX1v6XP nicqEi9ey9aTNAowNy2Wh7S3XmOLtBLrqxoImVQoRNhDGXw4gzXU+hbeMK1OCXGY /fNYJ8ig1V2aPe11C6FwcBrtIrTgYX+C+fDx10fTq0UDXt4pUAi7aQm8LXSPgN4d 7/pn20j1+JYO1WGy7m5UK/m4+dZ8H9lukXLEZEurpp7mf2utuukKLeNbtK8AiSe3 gVbuimshMZ6vv/5OzKm/sWRQ1qRXUX5LxDnExNdAAkg= -----END CERTIFICATE-----Generated at Tue May 21 08:01:31 2024 by rpki-client on console-fra.rpki-client.org