$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer File: 2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer (raw, json) Hash identifier: lMJb/siPDVRHdE8yFPKa/L4eG056Yy52CuzLjmNoZas= Subject key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 14C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 29 Apr 2024 01:20:35 +0000 Certificate not after: Sat 26 Apr 2025 10:00:55 +0000 Subordinate resources: IP: 157.66.166.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 05:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5319 (0x14c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Apr 29 01:20:35 2024 GMT Not After : Apr 26 10:00:55 2025 GMT Subject: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:db:76:f8:d6:c8:dd:65:c9:9f:56:e0:1c: 83:c1:b7:eb:74:8f:8a:8a:63:3b:53:f9:30:ff:4d: ca:2b:5c:54:6c:45:9f:06:00:af:58:fb:bc:60:ab: 21:c8:86:28:29:f0:c0:b4:77:bd:4a:e4:fc:a6:54: 86:c6:db:fc:5e:c4:46:53:a8:11:a9:8c:79:54:d1: 4c:fa:2e:c6:23:e1:a7:a8:fb:62:cf:50:a4:74:6d: 4f:8c:37:8b:b5:9e:8a:45:29:c5:6c:3c:5d:97:01: 3e:9b:f0:ab:8e:eb:a8:be:da:88:6e:52:6e:83:6d: db:88:74:25:16:45:bb:6d:54:3d:e2:19:a7:c8:09: 9f:42:6f:2f:86:88:aa:6a:1f:78:72:65:c2:7e:e4: f1:37:c2:38:73:5a:79:c1:72:b8:f7:96:55:5b:17: d5:ab:dc:da:35:e7:90:9d:d8:aa:bd:8f:b6:e2:6e: 47:b5:43:2a:3c:ad:c7:42:7e:46:b5:49:40:f6:59: a1:1c:2d:48:b4:71:e2:db:eb:24:6d:26:9e:18:ff: 81:09:01:bb:dc:5a:56:0c:47:0a:2d:77:33:f6:5e: 2a:64:5d:7f:43:3b:f2:be:72:8a:37:b3:67:23:d9: 85:f3:bb:af:24:c1:38:d8:c0:3a:cb:5d:ad:bf:1c: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.166.0/23 Signature Algorithm: sha256WithRSAEncryption 06:72:0a:78:f8:61:de:06:66:d2:36:98:7b:aa:4d:b0:95:ff: 46:cb:dc:4b:2b:7d:87:f0:1f:0c:d2:53:74:0d:40:e7:da:13: 30:0b:04:b2:d6:17:d5:ad:89:c5:eb:fe:ea:26:cf:1c:5e:6d: 04:43:9a:ef:e4:8f:9a:6a:39:a1:cb:6c:e2:0e:6d:cb:59:6e: 7f:f5:ab:8a:b6:9a:e8:2b:6b:bf:5c:b1:00:81:a5:63:c2:f7: f6:56:43:1f:54:5a:41:54:32:cf:c0:be:26:eb:63:01:7b:a9: ef:40:04:21:c1:d3:6a:34:50:1d:1f:78:35:38:2f:72:b4:e5: 4a:09:44:19:cd:ce:fa:9b:43:1e:c4:32:ab:74:d1:f8:c4:1a: 71:e6:55:ae:18:fe:1f:57:31:97:02:64:2b:94:6d:47:2d:b0: 1d:37:44:4d:b7:8b:24:74:e1:73:6b:3e:6e:12:d8:fa:5b:60: 72:bb:82:d0:84:d7:32:30:44:5c:e3:56:94:83:ec:97:40:b4: 76:09:f0:3f:2b:bd:50:62:7a:88:4d:27:f3:96:22:67:d0:b7: 82:76:18:26:81:c7:09:14:56:bc:ee:49:9e:30:7e:61:bd:96: 10:8b:12:c7:18:6c:33:38:fa:6f:fa:44:84:d5:ad:04:c7:04: b6:20:47:99 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICFMcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDQyOTAxMjAzNVoXDTI1MDQyNjEwMDA1NVowMzEx MC8GA1UEAxMoRDk2NkI1NTkwOTMyNDE4MEE4OEE0NUUxRjY4M0NGNEQyRUQ5QkNB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANDl23b41sjdZcmfVuAc g8G363SPiopjO1P5MP9NyitcVGxFnwYAr1j7vGCrIciGKCnwwLR3vUrk/KZUhsbb /F7ERlOoEamMeVTRTPouxiPhp6j7Ys9QpHRtT4w3i7WeikUpxWw8XZcBPpvwq47r qL7aiG5SboNt24h0JRZFu21UPeIZp8gJn0JvL4aIqmofeHJlwn7k8TfCOHNaecFy uPeWVVsX1avc2jXnkJ3Yqr2PtuJuR7VDKjytx0J+RrVJQPZZoRwtSLRx4tvrJG0m nhj/gQkBu9xaVgxHCi13M/ZeKmRdf0M78r5yijezZyPZhfO7ryTBONjAOstdrb8c 8B8CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBTZZrVZCTJBgKiKReH2g89NLtm8pTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElSVU4vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TElSVU4vMldhMVdRa3lRWUNvaWtYaDlvUFBUUzdadktVLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CpjANBgkqhkiG9w0BAQsFAAOCAQEABnIK ePhh3gZm0jaYe6pNsJX/RsvcSyt9h/AfDNJTdA1A59oTMAsEstYX1a2Jxev+6ibP HF5tBEOa7+SPmmo5octs4g5ty1luf/Wriraa6Ctrv1yxAIGlY8L39lZDH1RaQVQy z8C+JutjAXup70AEIcHTajRQHR94NTgvcrTlSglEGc3O+ptDHsQyq3TR+MQaceZV rhj+H1cxlwJkK5RtRy2wHTdETbeLJHThc2s+bhLY+ltgcruC0ITXMjBEXONWlIPs l0C0dgnwPyu9UGJ6iE0n85YiZ9C3gnYYJoHHCRRWvO5JnjB+Yb2WEIsSxxhsMzj6 b/pEhNWtBMcEtiBHmQ== -----END CERTIFICATE-----Generated at Tue May 21 08:01:31 2024 by rpki-client on console-fra.rpki-client.org