$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer File: 8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer (raw, json) Hash identifier: cUpY3LhduHho6JvD5vGMQTw16MFbms3lN1EGcCa5Hcc= Subject key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:22 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.124.40.0/22 IP: 2403:d940::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10386 (0x2892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:98:ce:d4:62:12:08:1a:94:24:f8:f6:07: ae:19:ca:17:b3:6b:52:7d:9d:c4:3a:5e:0c:70:0f: 10:14:10:b5:7d:5b:42:32:a4:6c:f0:4a:46:61:8d: f8:0b:04:67:ea:37:04:f0:67:e1:c2:e1:5d:bf:4f: 7a:73:1a:c3:bd:bf:32:df:a5:9c:9b:cd:1d:53:72: 22:ac:3f:8a:71:b2:58:be:43:a9:db:4d:a8:8f:69: 9e:07:b8:34:9e:28:f2:82:84:b8:e1:b9:07:b1:9e: 87:e0:5f:17:42:af:5e:ea:41:01:df:15:e3:c5:9f: 09:9e:c6:ab:44:28:b7:a8:9e:ab:44:7c:ac:e4:21: 19:f8:b4:0c:92:49:2e:f1:57:be:93:bb:d4:e1:c0: 17:fc:91:34:de:bb:04:70:df:33:ad:59:71:46:0f: c8:22:d5:9d:78:a2:a8:f7:61:25:a3:cd:41:b9:9a: 2a:d7:4d:d2:3c:ce:c8:dc:66:0b:3c:1b:6b:75:36: f1:85:26:19:b3:10:d6:47:9b:3f:74:b4:ee:5a:8e: 3d:f0:5d:6c:3d:a5:fd:90:a6:e2:fc:dd:bc:55:bd: 39:88:6b:85:dc:13:fd:30:05:37:e5:ee:6a:65:84: f9:7a:45:c9:a7:9b:0f:08:e9:3d:db:7f:f6:ad:fa: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.40.0/22 IPv6: 2403:d940::/32 Signature Algorithm: sha256WithRSAEncryption 00:d0:9c:7b:62:8d:2c:78:c1:da:73:0c:09:b0:7e:cc:76:3a: 4f:b0:27:35:31:09:ee:1c:d4:b6:a7:3c:13:4f:b5:9a:bc:4f: 77:fc:8c:87:a5:39:4d:c7:5c:b2:59:35:f3:eb:08:15:be:06: 34:4d:dd:82:0f:af:be:9e:4d:6d:dd:70:2a:9e:49:7b:cf:14: 6d:0d:dd:67:ab:0c:de:4e:ef:f7:b0:9c:dc:ea:7b:2c:92:4d: 3b:d4:46:96:29:fb:bc:b8:29:5a:d3:63:27:69:80:15:5e:62: 38:69:40:86:bd:fd:bf:5e:c2:7d:6f:18:93:fc:fc:5b:62:2f: 44:2f:f8:7f:96:d3:06:51:61:5f:1c:b9:c7:3a:b8:55:46:1b: a6:77:e5:1a:11:6f:da:b2:58:d6:15:6d:be:bb:03:df:70:6b: f4:d5:25:b9:15:9a:85:e0:f0:35:5c:4e:98:8a:d2:ab:c1:b1: 32:c0:dc:b4:db:4b:b7:c7:40:a9:ad:64:29:93:a4:04:20:b4: 36:1c:ee:f5:cf:e5:30:49:2b:1d:e7:fa:7e:40:19:12:79:7b: 31:e4:43:f5:68:9e:0f:27:ac:5f:21:07:21:a9:ef:d3:0f:1b: cd:0a:47:1a:58:07:8c:6c:05:f0:85:dc:03:99:5a:41:a7:2a: cf:fc:5d:b9 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICKJIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyMloXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoRjMxNzQ4MTNERkIxRjlCNDU2MDQ3MkMyNjdGNzZDRDBDMTQxRTVE RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANAsmM7UYhIIGpQk+PYH rhnKF7NrUn2dxDpeDHAPEBQQtX1bQjKkbPBKRmGN+AsEZ+o3BPBn4cLhXb9PenMa w72/Mt+lnJvNHVNyIqw/inGyWL5DqdtNqI9pnge4NJ4o8oKEuOG5B7Geh+BfF0Kv XupBAd8V48WfCZ7Gq0Qot6ieq0R8rOQhGfi0DJJJLvFXvpO71OHAF/yRNN67BHDf M61ZcUYPyCLVnXiiqPdhJaPNQbmaKtdN0jzOyNxmCzwba3U28YUmGbMQ1kebP3S0 7lqOPfBdbD2l/ZCm4vzdvFW9OYhrhdwT/TAFN+XuamWE+XpFyaebDwjpPdt/9q36 AXcCAwEAAaOCAmcwggJjMB0GA1UdDgQWBBTzF0gT37H5tFYEcsJn92zQwUHl3jAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFNSUxZUExV Uy8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GQU1JTFlQTFVTLzh4ZElFOS14LWJSV0JITENaX2RzME1GQjVkNC5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnfCgwDQQCAAIwBwMFACQD 2UAwDQYJKoZIhvcNAQELBQADggEBAADQnHtijSx4wdpzDAmwfsx2Ok+wJzUxCe4c 1LanPBNPtZq8T3f8jIelOU3HXLJZNfPrCBW+BjRN3YIPr76eTW3dcCqeSXvPFG0N 3WerDN5O7/ewnNzqeyySTTvURpYp+7y4KVrTYydpgBVeYjhpQIa9/b9ewn1vGJP8 /FtiL0Qv+H+W0wZRYV8cucc6uFVGG6Z35RoRb9qyWNYVbb67A99wa/TVJbkVmoXg 8DVcTpiK0qvBsTLA3LTbS7fHQKmtZCmTpAQgtDYc7vXP5TBJKx3n+n5AGRJ5ezHk Q/Vong8nrF8hByGp79MPG80KRxpYB4xsBfCF3AOZWkGnKs/8Xbk= -----END CERTIFICATE-----Generated at Tue May 21 23:30:59 2024 by rpki-client on console-ams.rpki-client.org