$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/4hRiP9Epy5cnQNOR2vORlvKt8r0.cer File: 4hRiP9Epy5cnQNOR2vORlvKt8r0.cer (raw, json) Hash identifier: MllxS55j6/4HMNHWBuN8eygDIdCDCtWOIZv2s2kIu4k= Subject key identifier: E2:14:62:3F:D1:29:CB:97:27:40:D3:91:DA:F3:91:96:F2:AD:F2:BD Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1636 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 29 Aug 2024 02:15:31 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 157.20.198.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5686 (0x1636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 29 02:15:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E214623FD129CB972740D391DAF39196F2ADF2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:27:2c:27:cf:ec:8a:94:08:3e:6b:83:71: 83:c6:7c:a9:a5:03:31:c7:f1:b5:0a:02:28:68:42: 95:29:dc:0f:83:73:22:f6:7c:5d:e0:17:a7:29:26: ad:7b:e5:cc:70:ca:9f:72:ed:d0:13:d6:5a:0a:5c: 7c:c0:65:c9:09:72:3f:35:7a:c5:a2:9c:3f:c5:03: d5:51:d3:a7:c3:6f:f7:6b:1d:2c:a4:ed:6e:2f:bc: 8d:0b:48:6e:c4:ae:f9:31:28:6c:12:3a:cc:58:58: b4:63:ab:c1:65:13:61:77:00:34:23:5a:1b:64:3d: 9b:b6:f7:24:11:08:b6:21:04:c7:57:ed:56:f1:af: 0f:6e:96:3d:3a:fc:db:c8:29:e7:98:bb:21:15:2b: f7:ce:91:db:98:a3:01:07:5c:ce:59:9d:87:2e:a0: 17:91:76:f5:75:f1:6e:ce:f9:42:2e:5c:84:34:92: 56:c2:1e:25:a3:05:02:a3:fd:f9:5c:14:37:76:72: 4d:28:48:a1:15:25:e0:55:68:cc:19:66:f7:88:c1: a4:20:24:bc:e3:89:86:01:2c:be:c0:6f:ed:58:f7: 87:9e:bb:0d:0c:f5:43:23:70:74:ae:8a:e6:bc:f5: 14:28:a2:22:ff:55:56:1e:6e:98:2e:51:d2:62:46: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:14:62:3F:D1:29:CB:97:27:40:D3:91:DA:F3:91:96:F2:AD:F2:BD X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.198.0/23 Signature Algorithm: sha256WithRSAEncryption 97:e0:6b:be:d5:c7:4a:f5:5f:40:35:e7:89:9b:9f:f3:f3:2d: e5:2c:40:dd:98:51:a6:0f:55:5d:ff:38:3a:11:74:dd:c0:4f: d3:26:f7:51:ea:de:13:69:39:d6:75:a4:63:7a:23:eb:cb:d0: 2b:c2:7e:69:0a:34:3a:28:67:9a:35:56:75:ae:90:9e:82:5b: 49:92:97:75:14:9a:6d:b2:7a:12:69:6a:fa:57:b8:00:75:34: f5:97:af:45:65:79:b5:78:b0:06:98:06:db:8a:2d:c6:79:dd: bc:bb:d2:1d:ab:b2:64:33:27:0d:3d:0f:e2:7c:26:cb:71:a1: 46:73:1c:84:b6:ca:cd:af:d2:06:f6:17:69:bd:fb:da:53:86: c2:e0:77:f2:e2:72:bd:63:67:a6:e7:9a:00:ed:cb:95:2d:17: c8:01:d4:35:0b:7a:9e:e8:cf:fa:09:d4:be:e7:e0:c3:be:8f: b6:8e:a2:1f:40:da:fa:2b:26:fc:a7:ea:22:6c:7b:39:9a:74: d2:ca:07:02:fb:f0:34:a5:67:ac:b8:26:84:ed:59:41:25:a4: 3d:d6:84:0f:16:f6:7c:c2:2e:19:df:94:1c:3c:eb:19:dd:d6: 02:a4:e9:20:8c:df:7e:ef:5d:4b:ae:a3:4f:ce:e2:5d:cb:98: 94:38:a6:c4 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICFjYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyOTAyMTUzMVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRTIxNDYyM0ZEMTI5Q0I5NzI3NDBEMzkxREFGMzkxOTZGMkFERjJC RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANRqJywnz+yKlAg+a4Nx g8Z8qaUDMcfxtQoCKGhClSncD4NzIvZ8XeAXpykmrXvlzHDKn3Lt0BPWWgpcfMBl yQlyPzV6xaKcP8UD1VHTp8Nv92sdLKTtbi+8jQtIbsSu+TEobBI6zFhYtGOrwWUT YXcANCNaG2Q9m7b3JBEItiEEx1ftVvGvD26WPTr828gp55i7IRUr986R25ijAQdc zlmdhy6gF5F29XXxbs75Qi5chDSSVsIeJaMFAqP9+VwUN3ZyTShIoRUl4FVozBlm 94jBpCAkvOOJhgEsvsBv7Vj3h567DQz1QyNwdK6K5rz1FCiiIv9VVh5umC5R0mJG XAcCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTiFGI/0SnLlydA05Ha85GW8q3yvTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0pNRS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9D Sk1FLzRoUmlQOUVweTVjblFOT1Iydk9SbHZLdDhyMC5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFMYwDQYJKoZIhvcNAQELBQADggEBAJfga77V x0r1X0A154mbn/PzLeUsQN2YUaYPVV3/ODoRdN3AT9Mm91Hq3hNpOdZ1pGN6I+vL 0CvCfmkKNDooZ5o1VnWukJ6CW0mSl3UUmm2yehJpavpXuAB1NPWXr0VlebV4sAaY BtuKLcZ53by70h2rsmQzJw09D+J8JstxoUZzHIS2ys2v0gb2F2m9+9pThsLgd/Li cr1jZ6bnmgDty5UtF8gB1DULep7oz/oJ1L7n4MO+j7aOoh9A2vorJvyn6iJsezma dNLKBwL78DSlZ6y4JoTtWUElpD3WhA8W9nzCLhnflBw86xnd1gKk6SCM337vXUuu o0/O4l3LmJQ4psQ= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org