$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer File: 5f38rnFoBdOTzrEk62PtHC37t3w.cer (raw, json) Hash identifier: SkeyrMe6pnlo0+ihqB1c5S1kK7Yp6ZTiyzaPoNAR7z8= Subject key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2D41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:14 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 2001:4508::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11585 (0x2d41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:5a:41:94:28:84:ac:db:8b:b2:9f:16:10: ea:bb:7d:47:94:6b:97:49:20:0e:00:ab:33:f7:21: 27:af:5a:49:f3:fe:dc:d4:9c:50:00:21:78:5e:52: 62:63:25:42:47:ce:8d:8c:5f:f1:8d:07:29:a5:7c: 52:a2:c1:36:c9:f0:38:05:46:2d:e3:a4:bc:c3:56: ae:55:a7:c9:4c:5a:25:92:2d:87:51:ae:5b:48:2e: e3:81:c9:d5:67:0e:6f:55:b3:1c:92:1e:c3:86:77: 3f:37:e4:9c:e1:63:00:6f:46:e5:a0:12:20:8c:2f: 1b:9d:0e:8c:62:13:c4:5b:7f:58:ec:47:ec:85:c9: 90:2f:c9:f9:76:4b:b5:62:e1:d3:6a:8c:12:21:61: 9a:8a:03:78:34:55:3f:82:46:9c:49:bd:92:38:91: a4:96:59:88:c1:b2:be:5a:45:ba:0c:7c:b0:f9:a8: 21:54:0b:5f:0e:c4:64:6c:a9:0e:ff:8a:c0:70:55: f9:63:db:99:7c:ea:ec:49:f0:ce:c7:4f:c1:b3:f5: 3e:6b:12:8b:6a:4a:5d:21:4d:92:b5:34:5b:ec:ce: d3:d5:60:dc:73:de:08:0d:49:15:19:d7:59:75:d3: fd:76:3b:9f:b9:49:8d:28:c8:a4:b7:46:b4:a1:38: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4508::/32 Signature Algorithm: sha256WithRSAEncryption 45:13:b5:1d:fa:4d:7d:5d:e8:5b:40:ff:f0:0f:74:d1:df:c8: fc:a1:7f:0f:08:43:49:07:14:cb:51:e3:40:76:36:bc:c4:22: f6:3e:00:e7:25:8e:c2:f1:98:d7:05:4a:c8:1e:eb:cf:0b:76: c5:a8:94:28:5d:30:be:c7:3e:2e:0c:3d:ed:e1:f1:e2:89:97: 4f:0d:e6:a5:4c:3f:e7:e5:f3:9b:6c:dc:15:44:b1:df:ce:2a: 1c:5d:40:b9:b8:a7:8f:61:d0:40:08:f3:32:d8:59:c4:12:aa: 32:87:6f:c2:e3:b6:f0:f0:b3:34:ea:de:ce:a1:6d:53:75:e2: 93:53:c4:53:82:bd:7e:0c:38:75:16:8c:74:8c:b7:2a:0c:57: 63:fe:d1:94:ad:5e:96:5a:a4:e0:2e:75:cd:f3:29:bc:dd:16: cd:45:f1:1f:ec:15:69:33:bf:13:a4:09:1c:56:21:c2:b9:64: 84:ca:13:e8:5f:03:3e:0a:ea:a4:df:ea:06:ac:3b:d9:bc:5d: 1b:94:34:f9:41:14:b2:6c:a7:ac:a5:ff:f0:45:b0:b0:d2:f6: 7e:5e:c2:56:df:47:55:26:65:c8:67:0d:06:a1:25:d8:d7:a7: ab:6b:c3:b5:75:c1:a5:dc:d9:c1:2b:08:65:4c:c4:be:77:05: 2e:8c:2a:f7 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICLUEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxNFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRTVGREZDQUU3MTY4MDVEMzkzQ0VCMTI0RUI2M0VEMUMyREZCQjc3 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYDWkGUKISs24uynxYQ 6rt9R5Rrl0kgDgCrM/chJ69aSfP+3NScUAAheF5SYmMlQkfOjYxf8Y0HKaV8UqLB NsnwOAVGLeOkvMNWrlWnyUxaJZIth1GuW0gu44HJ1WcOb1WzHJIew4Z3PzfknOFj AG9G5aASIIwvG50OjGITxFt/WOxH7IXJkC/J+XZLtWLh02qMEiFhmooDeDRVP4JG nEm9kjiRpJZZiMGyvlpFugx8sPmoIVQLXw7EZGypDv+KwHBV+WPbmXzq7EnwzsdP wbP1PmsSi2pKXSFNkrU0W+zO09Vg3HPeCA1JFRnXWXXT/XY7n7lJjSjIpLdGtKE4 LPECAwEAAaOCAk8wggJLMB0GA1UdDgQWBBTl/fyucWgF05POsSTrY+0cLfu3fDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQVUvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QVNJQVUvNWYzOHJuRm9CZE9UenJFazYyUHRIQzM3dDN3Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACABRQgwDQYJKoZIhvcNAQELBQADggEBAEUT tR36TX1d6FtA//APdNHfyPyhfw8IQ0kHFMtR40B2NrzEIvY+AOcljsLxmNcFSsge 688LdsWolChdML7HPi4MPe3h8eKJl08N5qVMP+fl85ts3BVEsd/OKhxdQLm4p49h 0EAI8zLYWcQSqjKHb8LjtvDwszTq3s6hbVN14pNTxFOCvX4MOHUWjHSMtyoMV2P+ 0ZStXpZapOAudc3zKbzdFs1F8R/sFWkzvxOkCRxWIcK5ZITKE+hfAz4K6qTf6gas O9m8XRuUNPlBFLJsp6yl//BFsLDS9n5ewlbfR1UmZchnDQahJdjXp6trw7V1waXc 2cErCGVMxL53BS6MKvc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org