$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/5f38rnFoBdOTzrEk62PtHC37t3w.cer File: 5f38rnFoBdOTzrEk62PtHC37t3w.cer (raw, json) Hash identifier: z3GAIjyoTS12FMC+iumqt5ujjAA5rG/B/GPtwtU5zLA= Subject key identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2922 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:29 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 2001:4508::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10530 (0x2922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E5FDFCAE716805D393CEB124EB63ED1C2DFBB77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:5a:41:94:28:84:ac:db:8b:b2:9f:16:10: ea:bb:7d:47:94:6b:97:49:20:0e:00:ab:33:f7:21: 27:af:5a:49:f3:fe:dc:d4:9c:50:00:21:78:5e:52: 62:63:25:42:47:ce:8d:8c:5f:f1:8d:07:29:a5:7c: 52:a2:c1:36:c9:f0:38:05:46:2d:e3:a4:bc:c3:56: ae:55:a7:c9:4c:5a:25:92:2d:87:51:ae:5b:48:2e: e3:81:c9:d5:67:0e:6f:55:b3:1c:92:1e:c3:86:77: 3f:37:e4:9c:e1:63:00:6f:46:e5:a0:12:20:8c:2f: 1b:9d:0e:8c:62:13:c4:5b:7f:58:ec:47:ec:85:c9: 90:2f:c9:f9:76:4b:b5:62:e1:d3:6a:8c:12:21:61: 9a:8a:03:78:34:55:3f:82:46:9c:49:bd:92:38:91: a4:96:59:88:c1:b2:be:5a:45:ba:0c:7c:b0:f9:a8: 21:54:0b:5f:0e:c4:64:6c:a9:0e:ff:8a:c0:70:55: f9:63:db:99:7c:ea:ec:49:f0:ce:c7:4f:c1:b3:f5: 3e:6b:12:8b:6a:4a:5d:21:4d:92:b5:34:5b:ec:ce: d3:d5:60:dc:73:de:08:0d:49:15:19:d7:59:75:d3: fd:76:3b:9f:b9:49:8d:28:c8:a4:b7:46:b4:a1:38: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:FC:AE:71:68:05:D3:93:CE:B1:24:EB:63:ED:1C:2D:FB:B7:7C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIAU/5f38rnFoBdOTzrEk62PtHC37t3w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4508::/32 Signature Algorithm: sha256WithRSAEncryption 66:e8:53:47:b8:ce:0c:85:c7:7e:6f:2e:a1:e2:8f:9d:8f:32: 55:30:78:f8:ff:a0:9a:e4:cd:a9:c6:be:20:9d:0f:c4:c4:32: 5f:3f:ce:57:2f:14:94:b5:af:5c:f1:78:dd:ff:2d:fc:c0:67: 98:89:de:32:b3:e3:bb:54:79:73:20:5c:95:6d:c0:e5:9f:eb: 9a:af:e1:ab:66:d4:f2:e5:e7:59:2a:9f:bb:b7:18:6a:ba:3b: a0:23:e4:ae:84:cc:27:d4:01:d1:c2:51:d9:da:95:44:4b:e7: 77:d3:03:64:15:df:ad:92:62:51:67:8f:cd:80:f2:2e:a6:c1: 82:78:cf:a6:cb:a7:ae:d1:1d:e3:b7:43:80:97:1c:14:7a:ad: 5e:0b:a2:d2:06:c4:b0:d4:ea:16:d3:65:c7:39:26:da:59:b4: fe:a6:ec:8a:02:93:f0:de:1b:04:92:e0:a6:c6:6c:8c:cc:7c: 5f:33:aa:97:bb:57:fc:f8:2e:1d:7d:7a:94:1b:82:98:a2:96: be:77:40:8d:3a:eb:c9:58:2f:a2:24:b1:98:7c:3d:b1:6d:44: 8a:82:e1:09:b0:b9:9d:51:e2:3f:cb:18:b2:87:8b:85:85:c3: 0a:97:03:b3:5f:60:0d:15:ee:7b:23:ce:fa:da:37:21:26:24: 5a:40:71:d5 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICKSIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyOVoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoRTVGREZDQUU3MTY4MDVEMzkzQ0VCMTI0RUI2M0VEMUMyREZCQjc3 QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALYDWkGUKISs24uynxYQ 6rt9R5Rrl0kgDgCrM/chJ69aSfP+3NScUAAheF5SYmMlQkfOjYxf8Y0HKaV8UqLB NsnwOAVGLeOkvMNWrlWnyUxaJZIth1GuW0gu44HJ1WcOb1WzHJIew4Z3PzfknOFj AG9G5aASIIwvG50OjGITxFt/WOxH7IXJkC/J+XZLtWLh02qMEiFhmooDeDRVP4JG nEm9kjiRpJZZiMGyvlpFugx8sPmoIVQLXw7EZGypDv+KwHBV+WPbmXzq7EnwzsdP wbP1PmsSi2pKXSFNkrU0W+zO09Vg3HPeCA1JFRnXWXXT/XY7n7lJjSjIpLdGtKE4 LPECAwEAAaOCAk8wggJLMB0GA1UdDgQWBBTl/fyucWgF05POsSTrY+0cLfu3fDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQVUvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QVNJQVUvNWYzOHJuRm9CZE9UenJFazYyUHRIQzM3dDN3Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEF BQcBBwEB/wQRMA8wDQQCAAIwBwMFACABRQgwDQYJKoZIhvcNAQELBQADggEBAGbo U0e4zgyFx35vLqHij52PMlUwePj/oJrkzanGviCdD8TEMl8/zlcvFJS1r1zxeN3/ LfzAZ5iJ3jKz47tUeXMgXJVtwOWf65qv4atm1PLl51kqn7u3GGq6O6Aj5K6EzCfU AdHCUdnalURL53fTA2QV362SYlFnj82A8i6mwYJ4z6bLp67RHeO3Q4CXHBR6rV4L otIGxLDU6hbTZcc5JtpZtP6m7IoCk/DeGwSS4KbGbIzMfF8zqpe7V/z4Lh19epQb gpiilr53QI0668lYL6IksZh8PbFtRIqC4QmwuZ1R4j/LGLKHi4WFwwqXA7NfYA0V 7nsjzvraNyEmJFpAcdU= -----END CERTIFICATE-----Generated at Tue May 21 06:28:37 2024 by rpki-client on console-ams.rpki-client.org