$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer File: 7cBFehQLLUNs5_rmfYSRz_xufz4.cer (raw, json) Hash identifier: s89h8t7zc61WA1mxlO0jMnFY8lemSwMIB9NQMLlYm3g= Subject key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:32 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.123.0.0/22 IP: 2403:9a40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10578 (0x2952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0e:c1:3d:9e:79:c9:a8:c5:75:f0:22:b3:eb: f8:79:bd:01:66:36:d0:00:34:a3:39:81:33:9f:92: d8:c9:92:8c:f8:a6:c5:cb:70:7b:33:16:cf:6d:17: 8b:ea:d1:8e:7c:dd:43:fe:c2:f6:ff:71:01:fe:80: 11:ea:13:e8:81:f9:37:8a:e6:5e:af:12:17:3b:4f: a1:79:b3:e8:52:92:9a:d8:a0:d0:08:56:7a:05:91: 01:a8:7c:20:ea:60:0a:0e:b9:08:b1:2a:e4:3f:5e: 13:cc:4b:ef:d8:47:6f:e2:bf:13:fa:ee:e3:a3:69: 58:62:42:5c:1a:b3:60:d7:23:eb:62:f1:5f:01:73: 21:5e:3b:ce:c7:ca:cb:32:de:3d:f0:ba:d0:42:f1: 3f:36:37:e7:53:59:22:83:d0:1c:36:1a:9f:cf:21: 86:3d:3c:f4:6c:7e:5f:63:91:cc:6a:60:f7:bb:46: 5f:eb:f0:f1:41:86:18:f9:e1:09:25:66:f4:db:da: 75:60:56:cc:23:a3:3e:96:89:88:46:3c:73:a2:25: b3:a5:72:43:ee:d7:37:d5:45:6f:47:f2:30:ef:8c: 2f:49:7d:b7:c1:20:92:e3:ce:1b:b0:89:56:19:83: d5:3e:da:0a:7d:3c:b8:93:a6:d0:96:9e:af:0c:b6: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.0.0/22 IPv6: 2403:9a40::/32 Signature Algorithm: sha256WithRSAEncryption 4f:b0:58:60:58:d1:23:ea:9a:1a:f9:92:18:bf:e6:dd:73:0c: 24:6e:40:0d:17:a2:70:65:d0:b4:3c:7b:83:ce:25:2c:72:04: 37:b4:88:ee:01:0b:1f:77:ef:fd:66:84:11:35:2a:4f:ec:de: 5f:68:35:6f:be:40:1e:4c:81:43:a1:fa:5b:7d:c4:8b:59:19: 2c:15:ed:6b:db:7a:89:7a:ba:ee:07:ed:0d:62:1d:6f:44:eb: 09:9a:d1:0d:4e:6e:26:1f:e8:50:34:43:52:cf:c2:e5:5b:76: 3e:b8:30:69:b2:c6:9c:b3:09:4d:f1:30:31:f7:3e:5c:7f:06: 7e:bf:a5:87:7e:61:95:b0:46:63:7f:95:01:ca:a0:98:39:14: 55:12:4b:15:66:07:09:39:0e:e1:b4:d8:67:b4:be:96:6c:2b: a0:34:e5:4e:3b:76:3e:26:9d:e5:24:9e:ca:1f:0f:9c:8d:3c: 48:bf:16:c6:2f:70:43:96:cd:c2:14:1f:6e:55:e8:53:19:c2: 67:02:a6:eb:f2:58:47:40:14:51:25:20:ec:fe:aa:d7:c4:33: 82:e2:7e:0c:57:90:25:99:a4:db:86:29:0f:48:ea:b7:3c:f4: b4:72:7e:cf:94:37:60:6b:8d:7e:11:d8:42:64:ec:fc:85:d8: 36:ad:29:27 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICKVIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEzMloXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoRURDMDQ1N0ExNDBCMkQ0MzZDRTdGQUU2N0Q4NDkxQ0ZGQzZFN0Yz RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIOwT2eecmoxXXwIrPr +Hm9AWY20AA0ozmBM5+S2MmSjPimxctwezMWz20Xi+rRjnzdQ/7C9v9xAf6AEeoT 6IH5N4rmXq8SFztPoXmz6FKSmtig0AhWegWRAah8IOpgCg65CLEq5D9eE8xL79hH b+K/E/ru46NpWGJCXBqzYNcj62LxXwFzIV47zsfKyzLePfC60ELxPzY351NZIoPQ HDYan88hhj089Gx+X2ORzGpg97tGX+vw8UGGGPnhCSVm9NvadWBWzCOjPpaJiEY8 c6Ils6VyQ+7XN9VFb0fyMO+ML0l9t8EgkuPOG7CJVhmD1T7aCn08uJOm0Jaerwy2 2dMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBTtwEV6FAstQ2zn+uZ9hJHP/G5/PjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVUU1dJTi8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9MRVRTV0lOLzdjQkZlaFFMTFVOczVfcm1mWVNSel94dWZ6NC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnewAwDQQCAAIwBwMFACQDmkAwDQYJ KoZIhvcNAQELBQADggEBAE+wWGBY0SPqmhr5khi/5t1zDCRuQA0XonBl0LQ8e4PO JSxyBDe0iO4BCx937/1mhBE1Kk/s3l9oNW++QB5MgUOh+lt9xItZGSwV7Wvbeol6 uu4H7Q1iHW9E6wma0Q1ObiYf6FA0Q1LPwuVbdj64MGmyxpyzCU3xMDH3Plx/Bn6/ pYd+YZWwRmN/lQHKoJg5FFUSSxVmBwk5DuG02Ge0vpZsK6A05U47dj4mneUknsof D5yNPEi/FsYvcEOWzcIUH25V6FMZwmcCpuvyWEdAFFElIOz+qtfEM4LifgxXkCWZ pNuGKQ9I6rc89LRyfs+UN2BrjX4R2EJk7PyF2DatKSc= -----END CERTIFICATE-----Generated at Tue May 21 23:30:59 2024 by rpki-client on console-ams.rpki-client.org