$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer File: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (raw, json) Hash identifier: /x04aaS70E+NVgoleYWnGBHKzGytNuuxWUC9lgNXNrY= Subject key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 14AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Mar 2024 08:56:23 +0000 Certificate not after: Fri 21 Mar 2025 15:30:27 +0000 Subordinate resources: IP: 157.20.248.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 05:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5292 (0x14ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Mar 22 08:56:23 2024 GMT Not After : Mar 21 15:30:27 2025 GMT Subject: CN=F33A72AAF798105BB277F094458E464B4659F803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:c2:dd:57:d3:dd:7f:21:f7:ae:20:1f:c0: f8:39:68:62:a8:78:7a:a6:aa:f4:50:01:23:6c:aa: e2:90:d2:28:6f:7d:dd:9a:89:35:83:b2:fc:f5:2a: d5:a1:92:c9:fe:e2:ee:a8:34:e2:da:5d:7e:93:5e: b2:26:60:c9:2f:2a:67:e2:30:ed:38:d1:bd:99:33: fc:e4:d3:e1:cf:cb:4b:b4:a3:a9:8f:97:b1:56:a7: 7c:32:44:02:80:6a:43:a1:29:1b:11:99:ee:38:4b: 6f:12:43:0d:72:15:07:d8:d2:f4:54:c6:ea:ee:f7: 8c:47:52:3e:34:02:ba:06:69:f0:9a:90:5f:84:00: 01:02:8d:e4:95:67:22:cd:02:d2:7f:6f:85:f5:af: 06:64:2a:6d:f8:d8:ec:08:95:5a:b2:74:6e:be:c6: 39:67:4a:c7:be:74:fb:e8:06:b9:b1:c4:3b:f3:05: 59:e0:e7:b5:e3:67:b0:d9:3c:1b:ca:64:78:ea:09: db:a4:ed:c0:41:e8:84:8c:aa:06:c3:a4:ea:2b:cf: 8f:cf:2d:8e:7b:be:ae:f8:b5:51:67:fe:1f:7c:7b: 86:bd:1f:04:e4:f6:4a:82:e3:fd:2a:93:fe:8b:0d: 15:a1:98:2a:e9:61:8c:d6:cc:0b:08:3c:54:08:0e: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.0/23 Signature Algorithm: sha256WithRSAEncryption b3:36:ee:19:f4:01:e6:9a:85:cf:4e:f8:15:d2:01:b5:a4:7e: 0c:be:55:e4:30:24:81:96:d5:a6:cd:7c:f8:8f:70:fd:e2:7a: ba:9b:5a:c3:44:a9:a7:6c:fe:a6:89:76:bd:88:be:02:91:20: 3a:14:ca:a4:17:1f:6e:0b:40:da:45:fd:77:30:ff:12:58:7c: a3:be:19:81:2b:3f:ac:5e:e9:2c:f9:b7:fe:b0:74:dc:2d:17: b2:28:76:25:10:7c:8a:91:36:42:bc:07:97:98:ee:e5:d0:fe: 33:5f:fe:51:ea:53:3f:31:18:ab:d6:4d:59:14:54:14:35:2c: da:bf:f0:d0:a3:94:44:b7:d6:d5:88:94:b0:6e:e2:64:ea:0a: b1:ca:ba:af:b1:c5:03:02:f9:62:ca:22:37:e2:16:33:11:c8: 81:f4:88:95:a0:af:40:c8:70:1a:63:f8:de:85:23:9b:a9:f8: 65:d0:31:24:9c:34:57:e6:1c:e4:08:d5:89:e2:97:0f:c2:2a: f2:bb:6f:b7:6b:3f:57:bb:67:56:be:fa:23:1e:df:fe:6f:b9: 01:de:12:78:b5:9d:05:da:50:8a:58:49:6c:5c:df:19:8a:1a: a9:45:83:8a:6b:92:e1:18:e8:29:8c:4e:0b:92:74:13:aa:91: b9:a1:f1:53 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICFKwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDMyMjA4NTYyM1oXDTI1MDMyMTE1MzAyN1owMzEx MC8GA1UEAxMoRjMzQTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5Rjgw MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqiwt1X091/IfeuIB/A +DloYqh4eqaq9FABI2yq4pDSKG993ZqJNYOy/PUq1aGSyf7i7qg04tpdfpNesiZg yS8qZ+Iw7TjRvZkz/OTT4c/LS7SjqY+XsVanfDJEAoBqQ6EpGxGZ7jhLbxJDDXIV B9jS9FTG6u73jEdSPjQCugZp8JqQX4QAAQKN5JVnIs0C0n9vhfWvBmQqbfjY7AiV WrJ0br7GOWdKx750++gGubHEO/MFWeDnteNnsNk8G8pkeOoJ26TtwEHohIyqBsOk 6ivPj88tjnu+rvi1UWf+H3x7hr0fBOT2SoLj/SqT/osNFaGYKulhjNbMCwg8VAgO 7pMCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTzOnKq95gQW7J38JRFjkZLRln4AzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9J QU1ULzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFPgwDQYJKoZIhvcNAQELBQADggEBALM27hn0 Aeaahc9O+BXSAbWkfgy+VeQwJIGW1abNfPiPcP3ierqbWsNEqads/qaJdr2IvgKR IDoUyqQXH24LQNpF/Xcw/xJYfKO+GYErP6xe6Sz5t/6wdNwtF7IodiUQfIqRNkK8 B5eY7uXQ/jNf/lHqUz8xGKvWTVkUVBQ1LNq/8NCjlES31tWIlLBu4mTqCrHKuq+x xQMC+WLKIjfiFjMRyIH0iJWgr0DIcBpj+N6FI5up+GXQMSScNFfmHOQI1Ynilw/C KvK7b7drP1e7Z1a++iMe3/5vuQHeEni1nQXaUIpYSWxc3xmKGqlFg4prkuEY6CmM TguSdBOqkbmh8VM= -----END CERTIFICATE-----Generated at Tue May 21 08:01:31 2024 by rpki-client on console-fra.rpki-client.org