$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer File: 2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer (raw, json) Hash identifier: Ai+anP3jOWl3tnag2H8N6Dh64jRqJC7m4ScHDblUc6k= Subject key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 160F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:19:12 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 157.66.166.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5647 (0x160f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 26 02:19:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:db:76:f8:d6:c8:dd:65:c9:9f:56:e0:1c: 83:c1:b7:eb:74:8f:8a:8a:63:3b:53:f9:30:ff:4d: ca:2b:5c:54:6c:45:9f:06:00:af:58:fb:bc:60:ab: 21:c8:86:28:29:f0:c0:b4:77:bd:4a:e4:fc:a6:54: 86:c6:db:fc:5e:c4:46:53:a8:11:a9:8c:79:54:d1: 4c:fa:2e:c6:23:e1:a7:a8:fb:62:cf:50:a4:74:6d: 4f:8c:37:8b:b5:9e:8a:45:29:c5:6c:3c:5d:97:01: 3e:9b:f0:ab:8e:eb:a8:be:da:88:6e:52:6e:83:6d: db:88:74:25:16:45:bb:6d:54:3d:e2:19:a7:c8:09: 9f:42:6f:2f:86:88:aa:6a:1f:78:72:65:c2:7e:e4: f1:37:c2:38:73:5a:79:c1:72:b8:f7:96:55:5b:17: d5:ab:dc:da:35:e7:90:9d:d8:aa:bd:8f:b6:e2:6e: 47:b5:43:2a:3c:ad:c7:42:7e:46:b5:49:40:f6:59: a1:1c:2d:48:b4:71:e2:db:eb:24:6d:26:9e:18:ff: 81:09:01:bb:dc:5a:56:0c:47:0a:2d:77:33:f6:5e: 2a:64:5d:7f:43:3b:f2:be:72:8a:37:b3:67:23:d9: 85:f3:bb:af:24:c1:38:d8:c0:3a:cb:5d:ad:bf:1c: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.166.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:34:18:3b:8d:be:e6:bf:7b:11:ee:10:e5:86:8e:24:fa:5a: 4a:bd:16:2d:19:e8:d0:33:26:d0:36:f1:5b:49:9d:ae:0f:8a: 41:7a:dc:fb:e1:6f:4d:e4:4f:fd:70:fa:92:d9:cf:e3:99:47: a4:5b:43:92:d8:26:fd:e7:d4:65:1a:3e:d2:96:48:09:d6:d7: 41:79:fc:1a:b9:15:9f:bc:c8:dc:e4:57:d9:0b:60:72:18:ff: 2a:ef:2d:65:ac:07:87:7c:7d:2d:e8:dc:b0:40:d4:53:1f:f3: 9a:fb:a3:96:5e:a2:be:4d:28:93:66:f7:ea:dd:43:57:a7:76: 87:bb:15:74:33:47:e5:88:09:04:20:3d:55:ac:01:28:5b:f4: bf:59:41:b4:c5:f5:12:97:3a:8f:3f:9d:01:c9:c6:42:27:63: 04:35:af:d2:34:02:07:dc:76:84:7e:c6:ae:b6:ff:bf:9e:64: a1:79:66:c6:90:d4:a7:fd:f0:ab:d5:a9:ad:67:73:40:8d:a4: 7a:c8:d7:58:61:1d:3d:08:48:ec:cd:45:6f:61:21:89:3c:e8: 87:8f:50:24:13:56:05:9e:a5:fc:3d:d0:34:94:6e:0e:71:d5: f9:3f:c6:9a:1a:03:33:28:4f:2a:04:45:14:e3:45:6d:c2:4c: f0:5e:6e:ae -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICFg8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyNjAyMTkxMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRDk2NkI1NTkwOTMyNDE4MEE4OEE0NUUxRjY4M0NGNEQyRUQ5QkNB NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANDl23b41sjdZcmfVuAc g8G363SPiopjO1P5MP9NyitcVGxFnwYAr1j7vGCrIciGKCnwwLR3vUrk/KZUhsbb /F7ERlOoEamMeVTRTPouxiPhp6j7Ys9QpHRtT4w3i7WeikUpxWw8XZcBPpvwq47r qL7aiG5SboNt24h0JRZFu21UPeIZp8gJn0JvL4aIqmofeHJlwn7k8TfCOHNaecFy uPeWVVsX1avc2jXnkJ3Yqr2PtuJuR7VDKjytx0J+RrVJQPZZoRwtSLRx4tvrJG0m nhj/gQkBu9xaVgxHCi13M/ZeKmRdf0M78r5yijezZyPZhfO7ryTBONjAOstdrb8c 8B8CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBTZZrVZCTJBgKiKReH2g89NLtm8pTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElSVU4vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TElSVU4vMldhMVdRa3lRWUNvaWtYaDlvUFBUUzdadktVLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CpjANBgkqhkiG9w0BAQsFAAOCAQEACjQY O42+5r97Ee4Q5YaOJPpaSr0WLRno0DMm0DbxW0mdrg+KQXrc++FvTeRP/XD6ktnP 45lHpFtDktgm/efUZRo+0pZICdbXQXn8GrkVn7zI3ORX2Qtgchj/Ku8tZawHh3x9 LejcsEDUUx/zmvujll6ivk0ok2b36t1DV6d2h7sVdDNH5YgJBCA9VawBKFv0v1lB tMX1Epc6jz+dAcnGQidjBDWv0jQCB9x2hH7Grrb/v55koXlmxpDUp/3wq9WprWdz QI2kesjXWGEdPQhI7M1Fb2EhiTzoh49QJBNWBZ6l/D3QNJRuDnHV+T/GmhoDMyhP KgRFFONFbcJM8F5urg== -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org