$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer File: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (raw, json) Hash identifier: 1bhnFoLRYe/4jrK0dOmfCRRCJSyHtPjdEmV4HbGfDfw= Subject key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1611 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:23:52 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 157.20.248.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5649 (0x1611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 26 02:23:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F33A72AAF798105BB277F094458E464B4659F803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:c2:dd:57:d3:dd:7f:21:f7:ae:20:1f:c0: f8:39:68:62:a8:78:7a:a6:aa:f4:50:01:23:6c:aa: e2:90:d2:28:6f:7d:dd:9a:89:35:83:b2:fc:f5:2a: d5:a1:92:c9:fe:e2:ee:a8:34:e2:da:5d:7e:93:5e: b2:26:60:c9:2f:2a:67:e2:30:ed:38:d1:bd:99:33: fc:e4:d3:e1:cf:cb:4b:b4:a3:a9:8f:97:b1:56:a7: 7c:32:44:02:80:6a:43:a1:29:1b:11:99:ee:38:4b: 6f:12:43:0d:72:15:07:d8:d2:f4:54:c6:ea:ee:f7: 8c:47:52:3e:34:02:ba:06:69:f0:9a:90:5f:84:00: 01:02:8d:e4:95:67:22:cd:02:d2:7f:6f:85:f5:af: 06:64:2a:6d:f8:d8:ec:08:95:5a:b2:74:6e:be:c6: 39:67:4a:c7:be:74:fb:e8:06:b9:b1:c4:3b:f3:05: 59:e0:e7:b5:e3:67:b0:d9:3c:1b:ca:64:78:ea:09: db:a4:ed:c0:41:e8:84:8c:aa:06:c3:a4:ea:2b:cf: 8f:cf:2d:8e:7b:be:ae:f8:b5:51:67:fe:1f:7c:7b: 86:bd:1f:04:e4:f6:4a:82:e3:fd:2a:93:fe:8b:0d: 15:a1:98:2a:e9:61:8c:d6:cc:0b:08:3c:54:08:0e: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.0/23 Signature Algorithm: sha256WithRSAEncryption 92:f6:81:13:62:38:35:b2:8b:0d:f9:0d:8b:c9:6c:b7:ad:77: 2b:28:b6:75:04:67:0c:e5:f3:cf:62:f3:cf:a5:d0:bf:b6:0c: e4:20:ad:09:e4:6a:e1:07:7a:99:31:a1:8b:b0:c5:1b:67:15: 40:7e:75:f0:61:da:58:7a:d5:71:a6:c2:72:8e:07:bc:fe:b1: f4:df:f2:b5:fe:96:5f:92:33:79:4e:85:25:21:7d:03:04:e3: a1:93:2d:78:be:3f:a7:55:de:1b:28:7e:6e:bf:14:a6:8a:d8: 0e:34:81:2b:69:c4:33:32:e2:2d:53:52:89:34:19:d0:30:b8: 31:10:48:ef:c7:68:e5:29:2d:51:69:dc:e3:01:fe:e0:d6:65: 82:09:94:3e:c9:ce:c9:6e:09:fd:a5:5c:d0:5f:b6:5d:88:c6: 93:44:83:65:02:19:62:8e:ea:8e:ed:46:2b:95:18:87:02:ee: 33:3d:38:68:6e:a5:16:a9:a0:88:b1:9a:f0:eb:94:2f:5d:e0: 12:d6:ab:e5:8e:e0:da:a3:d7:13:0b:1e:8a:5a:2e:34:65:c0: f8:7a:2c:58:79:8a:ec:46:f2:2a:9a:14:d5:8f:42:c8:7a:28: 08:4b:bc:ad:4a:63:59:82:1e:65:56:78:fe:d8:b6:15:ce:67: e9:75:26:69 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICFhEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyNjAyMjM1MloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRjMzQTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5Rjgw MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqiwt1X091/IfeuIB/A +DloYqh4eqaq9FABI2yq4pDSKG993ZqJNYOy/PUq1aGSyf7i7qg04tpdfpNesiZg yS8qZ+Iw7TjRvZkz/OTT4c/LS7SjqY+XsVanfDJEAoBqQ6EpGxGZ7jhLbxJDDXIV B9jS9FTG6u73jEdSPjQCugZp8JqQX4QAAQKN5JVnIs0C0n9vhfWvBmQqbfjY7AiV WrJ0br7GOWdKx750++gGubHEO/MFWeDnteNnsNk8G8pkeOoJ26TtwEHohIyqBsOk 6ivPj88tjnu+rvi1UWf+H3x7hr0fBOT2SoLj/SqT/osNFaGYKulhjNbMCwg8VAgO 7pMCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTzOnKq95gQW7J38JRFjkZLRln4AzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9J QU1ULzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFPgwDQYJKoZIhvcNAQELBQADggEBAJL2gRNi ODWyiw35DYvJbLetdysotnUEZwzl889i88+l0L+2DOQgrQnkauEHepkxoYuwxRtn FUB+dfBh2lh61XGmwnKOB7z+sfTf8rX+ll+SM3lOhSUhfQME46GTLXi+P6dV3hso fm6/FKaK2A40gStpxDMy4i1TUok0GdAwuDEQSO/HaOUpLVFp3OMB/uDWZYIJlD7J zsluCf2lXNBftl2IxpNEg2UCGWKO6o7tRiuVGIcC7jM9OGhupRapoIixmvDrlC9d 4BLWq+WO4Nqj1xMLHopaLjRlwPh6LFh5iuxG8iqaFNWPQsh6KAhLvK1KY1mCHmVW eP7YthXOZ+l1Jmk= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org