$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0SSAw3OkqF1efXJZMUQ137NEBEA.cer File: 0SSAw3OkqF1efXJZMUQ137NEBEA.cer (raw, json) Hash identifier: 4UmaLuUkgWP9EmmzLIGLcj15sWgjWVgR4LPEGVucF+M= Subject key identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 273C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:03 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: AS: 18043 IP: 202.5.4.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10044 (0x273c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D12480C373A4A85D5E7D7259314435DFB3440440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:97:33:72:99:25:93:68:76:6c:82:8b:5e: 33:b4:e5:e0:df:39:56:c1:24:d7:26:3d:02:51:c1: e7:af:b2:e3:3a:5d:80:71:26:85:e1:8f:0e:a6:9f: 40:b5:d2:c0:da:b2:fe:c5:8f:b3:80:3b:51:71:d1: 4b:1d:a1:c6:6d:31:77:65:55:d2:81:cc:2b:59:a6: 7b:34:7f:af:56:5e:fb:15:f3:2f:38:ba:b1:24:d7: 9e:e4:d3:cf:f7:60:2b:31:9e:2c:be:0c:c1:43:71: e2:73:73:6d:da:85:f9:59:3b:42:a0:92:c1:76:ed: 33:a6:0c:23:78:a4:d0:5a:a6:de:38:26:83:3a:f3: 00:3b:10:cd:d9:2a:6e:f5:66:ea:a8:61:60:1e:44: 14:46:c6:2f:c9:2b:29:79:66:27:38:83:87:45:67: f8:89:2b:dc:53:b6:f9:45:fe:02:7b:1b:c0:f3:1e: 89:dd:76:18:fa:79:37:7a:4d:27:02:df:3f:2b:72: 37:27:7e:ad:cb:94:7f:b6:fa:65:89:cc:1c:2d:d8: 66:99:54:6c:8f:ad:4d:85:80:ef:34:0a:62:20:ca: 9a:c7:a9:41:e5:9a:ae:db:e4:26:0e:46:00:27:a7: 34:18:27:17:4a:56:a6:f6:fe:3e:84:0e:93:1e:b9: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18043 sbgp-ipAddrBlock: critical IPv4: 202.5.4.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:ee:bb:6b:4c:c7:f5:06:d8:9b:53:25:11:a9:ce:cd:a5:1d: 69:40:e3:9d:32:8a:96:23:09:8b:d9:5a:be:3d:97:69:dd:94: 0b:74:95:8a:3b:f0:d6:8e:c2:42:2b:e7:4f:93:f7:74:1e:b3: 37:34:e7:db:63:45:83:c8:c9:6d:5c:fc:69:47:8a:ab:49:72: a0:1c:dd:17:d9:f0:4c:aa:b8:a6:37:25:6b:bc:3b:f7:10:9f: 61:6c:b2:65:ed:17:3d:23:a5:b4:dd:f4:08:9b:34:3a:b9:5f: 34:0a:6b:69:37:0b:84:d6:72:35:19:d0:8e:61:fa:59:b4:9a: eb:e0:0c:06:52:b6:67:d0:f1:fa:9c:02:9c:75:91:7b:98:fd: 91:cd:fa:ed:6a:ea:c4:08:a9:1a:21:b1:f5:ea:f6:c2:f6:67: 50:10:36:2e:cc:a3:e7:47:01:51:37:80:e7:61:3d:98:37:63: d2:43:68:16:2f:ee:4b:da:84:d5:88:38:13:7b:9f:65:46:85: c4:a9:63:69:30:f4:53:43:4b:13:6d:76:71:9d:e2:cd:e9:30: 45:d1:58:72:dc:a2:71:30:a4:a6:54:2a:0e:de:75:fd:4f:d4: 52:57:55:60:6f:51:80:a7:eb:55:76:8d:1e:ab:24:05:c4:b7: c6:7a:5b:70 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICJzwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEwM1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoRDEyNDgwQzM3M0E0QTg1RDVFN0Q3MjU5MzE0NDM1REZCMzQ0MDQ0 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMH3lzNymSWTaHZsgote M7Tl4N85VsEk1yY9AlHB56+y4zpdgHEmheGPDqafQLXSwNqy/sWPs4A7UXHRSx2h xm0xd2VV0oHMK1mmezR/r1Ze+xXzLzi6sSTXnuTTz/dgKzGeLL4MwUNx4nNzbdqF +Vk7QqCSwXbtM6YMI3ik0Fqm3jgmgzrzADsQzdkqbvVm6qhhYB5EFEbGL8krKXlm JziDh0Vn+Ikr3FO2+UX+AnsbwPMeid12GPp5N3pNJwLfPytyNyd+rcuUf7b6ZYnM HC3YZplUbI+tTYWA7zQKYiDKmsepQeWartvkJg5GACenNBgnF0pWpvb+PoQOkx65 fjMCAwEAAaOCAmkwggJlMB0GA1UdDgQWBBTRJIDDc6SoXV59clkxRDXfs0QEQDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0VUT1AvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev R0VUT1AvMFNTQXczT2txRjFlZlhKWk1VUTEzN05FQkVBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJGezAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AcoFBDANBgkqhkiG9w0BAQsFAAOCAQEAau67a0zH9QbYm1MlEanOzaUdaUDjnTKK liMJi9lavj2Xad2UC3SVijvw1o7CQivnT5P3dB6zNzTn22NFg8jJbVz8aUeKq0ly oBzdF9nwTKq4pjcla7w79xCfYWyyZe0XPSOltN30CJs0OrlfNApraTcLhNZyNRnQ jmH6WbSa6+AMBlK2Z9Dx+pwCnHWRe5j9kc367WrqxAipGiGx9er2wvZnUBA2Lsyj 50cBUTeA52E9mDdj0kNoFi/uS9qE1Yg4E3ufZUaFxKljaTD0U0NLE212cZ3izekw RdFYctyicTCkplQqDt51/U/UUldVYG9RgKfrVXaNHqskBcS3xnpbcA== -----END CERTIFICATE-----Generated at Tue May 21 08:01:31 2024 by rpki-client on console-fra.rpki-client.org