$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer File: 9aRLXgeIZbrvk1E2nZYda6JVbUc.cer (raw, json) Hash identifier: 76z/vXqa8cAH//VY947j5tvPbjN4+df5EfN55a6EiSQ= Subject key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2D7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:16 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.131.148.0/23 IP: 2400:f520::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11645 (0x2d7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:97:7b:82:e0:9b:9b:71:3a:3d:46:9f:77: 2c:91:ba:d5:35:7d:77:94:0b:78:30:b7:bd:c2:e6: ea:a5:6e:48:78:b2:57:2c:d8:04:a0:b1:88:77:56: e6:13:07:52:ea:47:56:ef:07:8c:18:16:c8:ea:7f: e9:14:ae:1f:b5:b1:8b:4c:21:e2:61:dd:74:a5:16: b7:54:2f:74:93:32:2b:33:ee:d8:63:a4:11:7e:a7: af:02:26:12:cc:f0:79:20:f8:96:a9:53:2d:63:be: ac:5b:58:19:fa:66:e2:5b:b5:90:44:1c:be:dc:47: 60:88:d2:0c:4f:ea:8c:62:5a:eb:00:fb:67:b4:a9: 5e:23:cf:c9:88:70:ad:58:6d:26:d2:17:76:9b:e1: 31:9e:f7:c9:49:af:e4:b6:71:c3:ab:ca:92:72:f2: 13:15:32:f0:95:88:ab:ae:e2:a7:c6:5c:d9:99:f9: fe:5d:90:ba:cd:41:d1:19:43:08:ef:5f:46:70:fe: 09:82:6d:cd:8f:a1:b7:1f:98:49:fd:d3:64:90:3c: f4:43:5f:23:79:05:13:f7:f2:d6:70:0f:97:58:ab: c0:0c:1d:e8:fb:f6:65:68:b2:04:4e:e6:c9:ad:b3: c8:70:51:a9:9c:56:00:d8:02:6d:10:73:c4:c3:ce: 2b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.131.148.0/23 IPv6: 2400:f520::/32 Signature Algorithm: sha256WithRSAEncryption 68:50:aa:a4:48:01:a7:0c:a2:53:5a:2d:c6:65:5f:16:81:f4: 5f:02:24:58:ae:20:37:5f:4d:2f:a3:f0:20:0a:40:c2:05:9d: 33:1b:97:c4:50:aa:71:58:10:09:3d:52:43:a7:39:f9:43:6d: d1:e9:fd:38:7a:6b:a6:a9:56:8f:9a:76:0d:8a:85:8d:cc:e4: 20:8a:58:66:d9:cb:46:71:ed:a1:55:11:76:07:04:77:8d:ee: a2:45:9e:45:d2:aa:45:7a:43:9d:6c:37:3c:5f:15:e3:d5:51: 8f:54:00:f3:0c:b6:60:59:53:25:28:c6:95:cd:a9:94:b3:54: c7:41:27:47:07:9a:08:ec:72:1d:88:da:5d:86:03:3b:9a:5f: c6:a7:64:05:1f:e1:6d:0d:f3:e7:19:b9:04:72:3e:56:d8:4c: 41:00:91:c8:7e:3c:10:4b:e5:b2:fe:c1:b0:78:3b:3d:26:be: 88:e7:ed:c7:1c:f1:02:52:f0:08:7a:12:da:80:30:16:3a:d5: 55:9f:b6:0e:49:58:13:fe:98:4b:c3:5e:a1:87:65:39:92:69: c0:2d:cb:e0:e6:89:73:97:47:98:8d:63:60:36:d3:f4:32:57: cf:68:54:4d:4a:c7:98:c5:ca:72:ca:9f:9a:d9:bf:9b:46:7f: cd:28:f8:07 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICLX0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxNloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoRjVBNDRCNUUwNzg4NjVCQUVGOTM1MTM2OUQ5NjFENkJBMjU1NkQ0 NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPDsl3uC4JubcTo9Rp93 LJG61TV9d5QLeDC3vcLm6qVuSHiyVyzYBKCxiHdW5hMHUupHVu8HjBgWyOp/6RSu H7Wxi0wh4mHddKUWt1QvdJMyKzPu2GOkEX6nrwImEszweSD4lqlTLWO+rFtYGfpm 4lu1kEQcvtxHYIjSDE/qjGJa6wD7Z7SpXiPPyYhwrVhtJtIXdpvhMZ73yUmv5LZx w6vKknLyExUy8JWIq67ip8Zc2Zn5/l2Qus1B0RlDCO9fRnD+CYJtzY+htx+YSf3T ZJA89ENfI3kFE/fy1nAPl1irwAwd6Pv2ZWiyBE7mya2zyHBRqZxWANgCbRBzxMPO K78CAwEAAaOCAmUwggJhMB0GA1UdDgQWBBT1pEteB4hluu+TUTadlh1rolVtRzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVHUkVF LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09ORURFR1JFRS85YVJMWGdlSVpicnZrMUUyblpZZGE2SlZiVWMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ4OUMA0EAgACMAcDBQAkAPUg MA0GCSqGSIb3DQEBCwUAA4IBAQBoUKqkSAGnDKJTWi3GZV8WgfRfAiRYriA3X00v o/AgCkDCBZ0zG5fEUKpxWBAJPVJDpzn5Q23R6f04emumqVaPmnYNioWNzOQgilhm 2ctGce2hVRF2BwR3je6iRZ5F0qpFekOdbDc8XxXj1VGPVADzDLZgWVMlKMaVzamU s1THQSdHB5oI7HIdiNpdhgM7ml/Gp2QFH+FtDfPnGbkEcj5W2ExBAJHIfjwQS+Wy /sGweDs9Jr6I5+3HHPECUvAIehLagDAWOtVVn7YOSVgT/phLw16hh2U5kmnALcvg 5olzl0eYjWNgNtP0MlfPaFRNSseYxcpyyp+a2b+bRn/NKPgH -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org