$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0SSAw3OkqF1efXJZMUQ137NEBEA.cer File: 0SSAw3OkqF1efXJZMUQ137NEBEA.cer (raw, json) Hash identifier: loQTK7OPblnSi39ck04i6Xsf0Pnwc0g/9DcCB7H6PUA= Subject key identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2EC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:31 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 18043 IP: 202.5.4.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11969 (0x2ec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D12480C373A4A85D5E7D7259314435DFB3440440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:97:33:72:99:25:93:68:76:6c:82:8b:5e: 33:b4:e5:e0:df:39:56:c1:24:d7:26:3d:02:51:c1: e7:af:b2:e3:3a:5d:80:71:26:85:e1:8f:0e:a6:9f: 40:b5:d2:c0:da:b2:fe:c5:8f:b3:80:3b:51:71:d1: 4b:1d:a1:c6:6d:31:77:65:55:d2:81:cc:2b:59:a6: 7b:34:7f:af:56:5e:fb:15:f3:2f:38:ba:b1:24:d7: 9e:e4:d3:cf:f7:60:2b:31:9e:2c:be:0c:c1:43:71: e2:73:73:6d:da:85:f9:59:3b:42:a0:92:c1:76:ed: 33:a6:0c:23:78:a4:d0:5a:a6:de:38:26:83:3a:f3: 00:3b:10:cd:d9:2a:6e:f5:66:ea:a8:61:60:1e:44: 14:46:c6:2f:c9:2b:29:79:66:27:38:83:87:45:67: f8:89:2b:dc:53:b6:f9:45:fe:02:7b:1b:c0:f3:1e: 89:dd:76:18:fa:79:37:7a:4d:27:02:df:3f:2b:72: 37:27:7e:ad:cb:94:7f:b6:fa:65:89:cc:1c:2d:d8: 66:99:54:6c:8f:ad:4d:85:80:ef:34:0a:62:20:ca: 9a:c7:a9:41:e5:9a:ae:db:e4:26:0e:46:00:27:a7: 34:18:27:17:4a:56:a6:f6:fe:3e:84:0e:93:1e:b9: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18043 sbgp-ipAddrBlock: critical IPv4: 202.5.4.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:d9:98:35:46:b3:b7:27:12:d4:25:10:9b:d3:d0:be:b3:9b: 0a:33:0c:6b:94:73:1c:b0:57:92:19:e3:9e:06:44:4a:ca:90: 05:e2:44:03:ba:b5:5f:39:4e:2c:99:52:3f:64:f5:35:82:17: 4a:21:a6:77:71:f0:dc:8d:24:39:52:63:54:a6:d3:71:17:d2: a2:0f:9c:fc:f7:23:c4:bb:44:ed:c9:05:47:48:9e:50:35:a5: 97:1c:01:41:45:71:ed:32:76:5c:02:ad:7f:98:b2:c9:7c:e8: 86:9f:bb:4d:f7:58:11:33:f3:dd:5b:2d:1a:fd:7f:04:48:fa: 31:33:0a:ca:5f:a8:b3:bb:4a:02:9b:99:94:ab:8d:19:98:0a: c3:18:b9:c4:b9:c3:6d:2e:78:ff:a6:8a:42:9b:62:11:7f:d5: c1:0b:8f:29:54:f6:33:d2:2b:45:30:77:a4:f3:c0:2c:66:08: 5c:72:15:bf:e4:5d:5b:62:b3:7c:40:dc:97:01:f0:15:00:97: 92:fc:0f:06:dc:35:79:72:e6:c6:1a:d8:17:cd:98:34:e8:32: 53:ac:da:07:2e:cd:dc:e5:da:f7:f4:0d:23:47:e5:c1:85:44: c3:17:de:fa:7d:87:7e:ac:96:8c:f3:9a:51:67:a9:e4:f2:b8: 82:77:b8:bf -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICLsEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczMVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRDEyNDgwQzM3M0E0QTg1RDVFN0Q3MjU5MzE0NDM1REZCMzQ0MDQ0 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMH3lzNymSWTaHZsgote M7Tl4N85VsEk1yY9AlHB56+y4zpdgHEmheGPDqafQLXSwNqy/sWPs4A7UXHRSx2h xm0xd2VV0oHMK1mmezR/r1Ze+xXzLzi6sSTXnuTTz/dgKzGeLL4MwUNx4nNzbdqF +Vk7QqCSwXbtM6YMI3ik0Fqm3jgmgzrzADsQzdkqbvVm6qhhYB5EFEbGL8krKXlm JziDh0Vn+Ikr3FO2+UX+AnsbwPMeid12GPp5N3pNJwLfPytyNyd+rcuUf7b6ZYnM HC3YZplUbI+tTYWA7zQKYiDKmsepQeWartvkJg5GACenNBgnF0pWpvb+PoQOkx65 fjMCAwEAAaOCAmkwggJlMB0GA1UdDgQWBBTRJIDDc6SoXV59clkxRDXfs0QEQDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0VUT1AvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev R0VUT1AvMFNTQXczT2txRjFlZlhKWk1VUTEzN05FQkVBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJGezAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AcoFBDANBgkqhkiG9w0BAQsFAAOCAQEAO9mYNUaztycS1CUQm9PQvrObCjMMa5Rz HLBXkhnjngZESsqQBeJEA7q1XzlOLJlSP2T1NYIXSiGmd3Hw3I0kOVJjVKbTcRfS og+c/PcjxLtE7ckFR0ieUDWllxwBQUVx7TJ2XAKtf5iyyXzohp+7TfdYETPz3Vst Gv1/BEj6MTMKyl+os7tKApuZlKuNGZgKwxi5xLnDbS54/6aKQptiEX/VwQuPKVT2 M9IrRTB3pPPALGYIXHIVv+RdW2KzfEDclwHwFQCXkvwPBtw1eXLmxhrYF82YNOgy U6zaBy7N3OXa9/QNI0flwYVEwxfe+n2HfqyWjPOaUWep5PK4gne4vw== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org