$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer File: -9Osn8RMPdKre10gvBWMgtg9Jgo.cer (raw, json) Hash identifier: b/UNtzl5llCH8nvfIcbjOhE6ZXNmki+PyxSS9jzHvuk= Subject key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:31 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.130.248.0/22 IP: 2403:c1c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11961 (0x2eb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:4b:54:e4:99:10:10:3f:e8:3b:97:ca:3f: fe:bd:f2:04:54:3f:46:f8:f1:91:79:18:62:f8:06: f0:af:ea:df:fb:4f:1f:6f:56:a6:c3:1b:85:e9:6a: e6:ce:08:dc:56:32:2f:5a:cd:3c:d2:19:9e:dc:c6: 3a:1b:ad:e9:f8:e3:22:04:f2:9c:f3:24:52:08:b3: 22:6c:4d:6e:5d:36:bd:92:d6:10:51:6b:17:e9:1c: 16:92:99:4f:ca:c6:70:39:77:21:d9:8a:11:e3:b8: a8:18:b9:da:cf:90:ef:2c:21:ae:26:1e:a6:f5:06: 50:26:b1:1b:ab:24:ed:eb:dc:3c:4a:01:e7:a6:89: 6b:1b:63:2b:a1:32:8e:6f:6b:04:4b:fc:5c:a4:49: 99:48:01:51:f5:7c:89:2e:8b:60:50:fb:2c:78:31: 93:e0:4f:4f:ed:b2:f4:1c:40:1c:a4:e8:19:fa:65: 0c:82:61:dc:07:6b:cf:39:a3:ef:b0:ce:f5:ad:bf: 6d:2a:27:71:f7:f6:f4:98:9b:3e:75:0d:1c:f0:ec: 3d:31:ac:cd:18:d8:88:4d:8b:f5:08:55:59:83:d8: d1:51:14:a7:9a:62:df:54:af:4c:5e:96:e7:0e:d9: d3:47:d8:5e:9b:f5:1c:4c:c7:2e:98:d8:4e:9d:7f: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.248.0/22 IPv6: 2403:c1c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:c8:78:7c:98:18:00:61:7a:09:08:15:f7:1c:8a:41:74:51: 0e:c1:58:79:d8:b4:ce:04:29:35:11:b0:1c:c6:35:d6:91:47: 0f:bb:b4:14:f4:49:96:a1:24:98:9d:77:60:7e:2e:0e:8c:e5: 2a:29:aa:84:a9:16:66:01:5c:22:f7:0d:5d:c6:0d:7c:fb:6e: 51:d8:d4:40:e3:e4:d4:ae:ac:0b:4b:eb:13:98:a6:12:79:b9: 59:48:1b:cb:6c:14:21:f2:cf:b5:09:12:ec:ef:7c:79:3b:95: 16:66:e9:a8:1e:6a:14:63:16:f0:e5:69:61:59:78:ab:1f:0f: a7:a3:22:67:6b:9d:f0:91:80:25:b6:35:1a:42:cc:f2:13:f5: ce:45:47:f0:3e:dd:b1:b1:3a:23:cd:3f:1b:c8:1e:c8:03:72: 8b:e8:1c:a6:dc:0a:ed:c2:7f:60:15:9b:cf:a6:93:35:0e:4f: 55:ad:25:3a:f6:3c:7d:d4:27:8e:5f:9a:e0:1b:b6:6a:28:54: 7e:e8:17:f1:7b:f6:49:84:91:27:b6:d0:db:3a:62:13:c7:6c: 42:66:b3:a5:36:3a:89:11:8e:f8:df:d4:86:1e:4e:a6:46:1d: c2:93:9b:f2:39:d0:fa:7b:3c:01:8e:e8:71:45:f3:1c:41:54: a1:7b:62:5b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICLrkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczMVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRkJEM0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYw QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0LS1TkmRAQP+g7l8o/ /r3yBFQ/RvjxkXkYYvgG8K/q3/tPH29WpsMbhelq5s4I3FYyL1rNPNIZntzGOhut 6fjjIgTynPMkUgizImxNbl02vZLWEFFrF+kcFpKZT8rGcDl3IdmKEeO4qBi52s+Q 7ywhriYepvUGUCaxG6sk7evcPEoB56aJaxtjK6Eyjm9rBEv8XKRJmUgBUfV8iS6L YFD7LHgxk+BPT+2y9BxAHKToGfplDIJh3Adrzzmj77DO9a2/bSoncff29JibPnUN HPDsPTGszRjYiE2L9QhVWYPY0VEUp5pi31SvTF6W5w7Z00fYXpv1HEzHLpjYTp1/ CMkCAwEAAaOCAlswggJXMB0GA1UdDgQWBBT706yfxEw90qt7XSC8FYyC2D0mCjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9D VElJLy05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJngvgwDQQCAAIwBwMFACQDwcAwDQYJKoZIhvcN AQELBQADggEBAH3IeHyYGABhegkIFfccikF0UQ7BWHnYtM4EKTURsBzGNdaRRw+7 tBT0SZahJJidd2B+Lg6M5SopqoSpFmYBXCL3DV3GDXz7blHY1EDj5NSurAtL6xOY phJ5uVlIG8tsFCHyz7UJEuzvfHk7lRZm6ageahRjFvDlaWFZeKsfD6ejImdrnfCR gCW2NRpCzPIT9c5FR/A+3bGxOiPNPxvIHsgDcovoHKbcCu3Cf2AVm8+mkzUOT1Wt JTr2PH3UJ45fmuAbtmooVH7oF/F79kmEkSe20Ns6YhPHbEJms6U2OokRjvjf1IYe TqZGHcKTm/I50Pp7PAGO6HFF8xxBVKF7Yls= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org