$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer File: 8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer (raw, json) Hash identifier: peE3rmm5V/HefJ0Ds2Hi4ZhCDvo5+pJ8CbaPspqIk4s= Subject key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:13 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.124.40.0/22 IP: 2403:d940::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11581 (0x2d3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:98:ce:d4:62:12:08:1a:94:24:f8:f6:07: ae:19:ca:17:b3:6b:52:7d:9d:c4:3a:5e:0c:70:0f: 10:14:10:b5:7d:5b:42:32:a4:6c:f0:4a:46:61:8d: f8:0b:04:67:ea:37:04:f0:67:e1:c2:e1:5d:bf:4f: 7a:73:1a:c3:bd:bf:32:df:a5:9c:9b:cd:1d:53:72: 22:ac:3f:8a:71:b2:58:be:43:a9:db:4d:a8:8f:69: 9e:07:b8:34:9e:28:f2:82:84:b8:e1:b9:07:b1:9e: 87:e0:5f:17:42:af:5e:ea:41:01:df:15:e3:c5:9f: 09:9e:c6:ab:44:28:b7:a8:9e:ab:44:7c:ac:e4:21: 19:f8:b4:0c:92:49:2e:f1:57:be:93:bb:d4:e1:c0: 17:fc:91:34:de:bb:04:70:df:33:ad:59:71:46:0f: c8:22:d5:9d:78:a2:a8:f7:61:25:a3:cd:41:b9:9a: 2a:d7:4d:d2:3c:ce:c8:dc:66:0b:3c:1b:6b:75:36: f1:85:26:19:b3:10:d6:47:9b:3f:74:b4:ee:5a:8e: 3d:f0:5d:6c:3d:a5:fd:90:a6:e2:fc:dd:bc:55:bd: 39:88:6b:85:dc:13:fd:30:05:37:e5:ee:6a:65:84: f9:7a:45:c9:a7:9b:0f:08:e9:3d:db:7f:f6:ad:fa: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.40.0/22 IPv6: 2403:d940::/32 Signature Algorithm: sha256WithRSAEncryption 01:b2:fb:08:9c:94:7b:18:50:96:4f:b7:a6:d5:c4:93:83:47: 5a:e2:0b:0e:b4:a1:cb:8b:15:2f:1d:83:f8:9a:dd:d7:b1:ac: 8f:98:0f:dd:6b:c7:5c:1e:f8:e8:b9:c0:10:7e:1e:f7:ba:75: b2:21:7d:82:96:2d:54:56:43:35:69:ed:20:63:2e:eb:16:25: 35:b0:82:8b:83:fd:92:20:f9:6a:2b:6c:9f:14:88:63:08:c5: 82:52:5b:cb:99:a6:5a:c0:13:d0:f4:de:b1:c2:2b:d2:a9:ef: c5:7a:ee:86:39:e1:d3:9f:d9:ae:78:a1:28:f6:c2:4a:01:e6: bf:bd:5e:6f:2b:66:a2:37:41:02:6d:33:40:b4:05:d8:6c:81: 0f:3f:25:93:94:fe:13:dd:cf:59:9d:24:35:bf:3e:5a:fd:6b: 9f:40:64:ec:b8:a0:ed:37:3e:da:dc:42:d6:9d:88:72:cc:74: 41:7a:4a:4b:dd:19:1c:3a:b3:ae:84:2d:8c:36:00:19:ec:17: cc:42:75:c7:d0:df:01:1f:82:69:2a:08:cb:4a:58:90:f7:a2: 42:a0:06:67:47:b9:9e:aa:df:2f:c6:8f:25:ec:cd:ea:90:95: 29:07:2b:da:63:2f:d8:9e:57:83:db:12:e0:6a:81:2b:0f:f4: 74:ab:4c:32 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICLT0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxM1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRjMxNzQ4MTNERkIxRjlCNDU2MDQ3MkMyNjdGNzZDRDBDMTQxRTVE RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANAsmM7UYhIIGpQk+PYH rhnKF7NrUn2dxDpeDHAPEBQQtX1bQjKkbPBKRmGN+AsEZ+o3BPBn4cLhXb9PenMa w72/Mt+lnJvNHVNyIqw/inGyWL5DqdtNqI9pnge4NJ4o8oKEuOG5B7Geh+BfF0Kv XupBAd8V48WfCZ7Gq0Qot6ieq0R8rOQhGfi0DJJJLvFXvpO71OHAF/yRNN67BHDf M61ZcUYPyCLVnXiiqPdhJaPNQbmaKtdN0jzOyNxmCzwba3U28YUmGbMQ1kebP3S0 7lqOPfBdbD2l/ZCm4vzdvFW9OYhrhdwT/TAFN+XuamWE+XpFyaebDwjpPdt/9q36 AXcCAwEAAaOCAmcwggJjMB0GA1UdDgQWBBTzF0gT37H5tFYEcsJn92zQwUHl3jAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFNSUxZUExV Uy8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GQU1JTFlQTFVTLzh4ZElFOS14LWJSV0JITENaX2RzME1GQjVkNC5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnfCgwDQQCAAIwBwMFACQD 2UAwDQYJKoZIhvcNAQELBQADggEBAAGy+wiclHsYUJZPt6bVxJODR1riCw60ocuL FS8dg/ia3dexrI+YD91rx1we+Oi5wBB+Hve6dbIhfYKWLVRWQzVp7SBjLusWJTWw gouD/ZIg+WorbJ8UiGMIxYJSW8uZplrAE9D03rHCK9Kp78V67oY54dOf2a54oSj2 wkoB5r+9Xm8rZqI3QQJtM0C0BdhsgQ8/JZOU/hPdz1mdJDW/Plr9a59AZOy4oO03 PtrcQtadiHLMdEF6SkvdGRw6s66ELYw2ABnsF8xCdcfQ3wEfgmkqCMtKWJD3okKg BmdHuZ6q3y/GjyXszeqQlSkHK9pjL9ieV4PbEuBqgSsP9HSrTDI= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org