$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer File: -0c5peYaY59Wb94P20Egi6P2m_E.cer (raw, json) Hash identifier: /N+WVKAVjulCuGl4A8uHzEqCHFQp4WOR0jpbYFyqq+U= Subject key identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:17 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: AS: 18045 IP: 211.76.144.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10306 (0x2842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cd:15:a5:d2:c2:f6:44:6d:a1:d9:96:c3:64: 38:3a:d0:24:5d:cc:d0:6f:a2:84:63:3a:47:5a:af: d3:df:76:2f:fc:a4:c5:be:28:13:70:49:e0:af:87: 1c:49:31:3b:fd:c8:33:f8:92:49:c3:b4:65:f3:c3: be:27:e7:4f:ed:5e:64:be:3f:af:60:e2:d9:11:25: d4:96:61:99:14:35:f5:a9:96:fa:c3:eb:7d:d0:bb: 0f:fd:22:74:36:e5:6c:af:cd:2a:fb:0f:06:ef:72: f2:1f:9b:de:8c:46:c5:91:84:73:dd:72:ae:0e:c7: 7f:ad:5a:45:8f:37:bc:0c:55:19:5f:8f:a9:a0:e8: 17:63:30:8b:9c:b9:df:3c:3a:78:9a:22:d6:fd:7c: f7:2a:55:5d:fd:06:94:8e:b2:bb:55:ae:34:8c:24: f6:95:86:bf:21:e0:27:9b:94:a9:6c:1d:37:44:fd: c5:e9:bc:d9:62:86:0a:c0:30:a2:45:81:f7:39:3d: dd:ed:c1:6b:bf:ee:1b:6f:fd:79:91:1f:07:57:2a: bf:62:41:d3:5d:6e:39:8a:4b:a2:e2:3d:03:18:6e: a8:1c:a3:82:60:d8:69:d6:ea:38:85:b8:e6:a3:b8: 91:3a:20:9e:40:85:21:97:9e:dd:dc:a9:84:8b:21: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18045 sbgp-ipAddrBlock: critical IPv4: 211.76.144.0/20 Signature Algorithm: sha256WithRSAEncryption 76:cc:25:63:c4:89:87:6a:c0:a6:2d:da:9f:6c:1c:f0:e4:2c: 8d:54:4b:d1:dc:34:32:23:13:1f:31:32:8f:52:6e:49:8a:1b: 2f:94:dd:1e:d5:79:56:71:65:9d:e0:dd:2c:de:9d:a4:23:7f: e3:87:3a:51:14:2b:e4:43:67:4c:a3:e4:40:57:7b:18:2a:63: d9:d6:c8:74:6d:1d:16:15:e9:2a:20:2f:59:b3:3a:b0:96:fe: 92:ec:41:90:da:1c:a5:47:5f:86:ed:1c:ad:f3:7f:9b:73:c2: 65:a3:7e:88:f6:64:9a:0c:f1:2f:2f:c2:83:fb:78:b5:0c:8f: c1:26:86:94:7e:ab:c8:f8:99:69:77:0f:d6:59:0f:6e:3c:cb: 64:fa:55:a4:5a:00:f8:1b:9c:0f:39:55:9e:f3:c3:47:d8:b6: 44:72:e8:0a:b0:85:e6:e4:d6:73:6c:55:bd:26:99:fd:7e:76: b7:3c:ac:7a:6a:f9:c6:7a:d2:e1:73:dd:ca:30:f1:be:a9:e6: ba:d2:af:9b:c0:df:61:32:4b:6e:14:95:04:4d:a0:9f:99:93: 3e:a5:f1:b0:54:55:8d:fb:14:f0:51:00:fb:31:f1:bd:84:d8: 2c:1a:2b:e1:a3:20:53:37:60:14:ee:ea:14:a7:9b:15:3b:79: b9:d2:b8:eb -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICKEIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExN1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoRkI0NzM5QTVFNjFBNjM5RjU2NkZERTBGREI0MTIwOEJBM0Y2OUJG MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPXNFaXSwvZEbaHZlsNk ODrQJF3M0G+ihGM6R1qv0992L/ykxb4oE3BJ4K+HHEkxO/3IM/iSScO0ZfPDvifn T+1eZL4/r2Di2REl1JZhmRQ19amW+sPrfdC7D/0idDblbK/NKvsPBu9y8h+b3oxG xZGEc91yrg7Hf61aRY83vAxVGV+PqaDoF2Mwi5y53zw6eJoi1v189ypVXf0GlI6y u1WuNIwk9pWGvyHgJ5uUqWwdN0T9xem82WKGCsAwokWB9zk93e3Ba7/uG2/9eZEf B1cqv2JB011uOYpLouI9AxhuqByjgmDYadbqOIW45qO4kTognkCFIZee3dyphIsh xKUCAwEAAaOCAm0wggJpMB0GA1UdDgQWBBT7Rzml5hpjn1Zv3g/bQSCLo/ab8TAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lOT1BBQy8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSU5PUEFDLy0wYzVwZVlhWTU5V2I5NFAyMEVnaTZQMm1fRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICRn0wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATTTJAwDQYJKoZIhvcNAQELBQADggEBAHbMJWPEiYdqwKYt2p9sHPDkLI1U S9HcNDIjEx8xMo9SbkmKGy+U3R7VeVZxZZ3g3SzenaQjf+OHOlEUK+RDZ0yj5EBX exgqY9nWyHRtHRYV6SogL1mzOrCW/pLsQZDaHKVHX4btHK3zf5tzwmWjfoj2ZJoM 8S8vwoP7eLUMj8EmhpR+q8j4mWl3D9ZZD248y2T6VaRaAPgbnA85VZ7zw0fYtkRy 6Aqwhebk1nNsVb0mmf1+drc8rHpq+cZ60uFz3cow8b6p5rrSr5vA32EyS24UlQRN oJ+Zkz6l8bBUVY37FPBRAPsx8b2E2CwaK+GjIFM3YBTu6hSnmxU7ebnSuOs= -----END CERTIFICATE-----Generated at Tue May 21 08:01:31 2024 by rpki-client on console-fra.rpki-client.org