$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Ay0zZk94CyxQHuYj57vx0iayYkg.cer File: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (raw, json) Hash identifier: 69YT660aHwW/dmp6bRXoPdEHUD+RCLczZzHBiEyQvIw= Subject key identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 17B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 07 Nov 2024 23:50:05 +0000 Certificate not after: Tue 04 Nov 2025 15:30:21 +0000 Subordinate resources: IP: 160.191.168.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6072 (0x17b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Nov 7 23:50:05 2024 GMT Not After : Nov 4 15:30:21 2025 GMT Subject: CN=032D33664F780B2C501EE623E7BBF1D226B26248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:07:7a:9a:c1:99:e0:ef:d5:6b:2b:5d:7d: 45:2f:5a:bb:95:3c:ad:3f:b8:b7:3e:b4:48:42:7e: 13:8a:dc:67:d8:13:c2:6f:c2:09:e6:ca:94:ba:14: ea:19:2c:e6:69:2b:8c:cd:67:88:37:c1:86:41:a2: 49:ec:9e:74:74:c7:4e:9d:7c:e4:88:00:26:51:c0: a3:09:1e:34:a5:ee:f6:44:0d:b6:17:8f:cb:d5:84: 69:cb:4b:ef:2d:06:d6:60:a6:54:0a:e7:55:11:69: 6c:b4:db:4d:6f:48:42:29:8d:b5:3e:5b:7b:f8:42: 83:84:2c:9e:3d:81:10:e8:f3:1f:50:f8:8f:00:d4: ef:3c:a9:39:3f:58:5a:bc:0d:f1:c4:98:a4:a1:92: ad:49:16:96:54:4b:96:7a:09:86:d7:03:d7:9a:d3: 78:22:40:6a:b6:10:d6:48:58:77:f2:7f:d5:2b:ea: da:81:17:35:23:c4:9a:fd:d7:97:46:e4:f6:83:4a: 4c:3b:26:a2:f4:17:72:0d:96:9e:06:6f:1d:2b:b9: 63:a6:57:78:09:3b:e5:9a:11:83:73:f5:51:08:5a: 19:79:a9:ff:17:11:37:55:96:35:9c:91:b3:89:a8: ec:87:67:24:72:46:2a:58:7e:af:bc:ae:a3:c0:72: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.168.0/23 Signature Algorithm: sha256WithRSAEncryption 63:ce:9d:ff:d8:8f:35:bd:e1:80:8d:4e:ea:a2:1c:37:35:05: 82:dd:db:94:8a:49:b3:42:2e:f7:15:48:01:ca:ee:85:59:a0: 25:53:3e:72:5c:41:b4:b8:6d:c5:e0:c0:cf:20:fb:94:be:88: ac:21:e1:a5:1b:1a:49:02:da:27:d1:40:4a:e7:80:a8:24:1d: 74:2b:bc:9f:5e:0f:65:66:84:52:14:5d:1d:12:4b:80:ad:4c: 00:8c:aa:9b:d3:7e:a5:33:49:72:9a:cb:87:3a:51:7a:dc:8d: 34:d0:cd:0f:73:bd:42:87:02:4d:7d:61:3e:d9:b4:2a:98:e8: 9e:dc:cf:18:11:a8:f2:af:9e:80:e1:2d:e5:4c:d6:16:d6:b2: 7d:6e:49:8e:98:82:d9:32:13:1d:ad:78:3f:db:8e:a7:fc:3b: 39:24:29:7b:ad:7c:0f:0f:92:14:9d:0e:0b:70:d5:bc:0f:d2: d5:66:40:e5:d7:ff:0d:60:90:b1:9a:a9:25:5e:fd:15:8f:aa: fd:b4:24:a8:e9:44:d6:ff:e5:4c:7d:b1:b4:c6:7d:ce:3b:fa: 1a:db:18:63:c1:de:9e:27:0c:f7:82:00:69:91:8a:af:f6:18: 95:2e:38:53:34:40:9a:72:ea:7e:34:5e:dc:8e:0b:1e:2e:8f: 7c:0d:97:ba -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICF7gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MTEwNzIzNTAwNVoXDTI1MTEwNDE1MzAyMVowMzEx MC8GA1UEAxMoMDMyRDMzNjY0Rjc4MEIyQzUwMUVFNjIzRTdCQkYxRDIyNkIyNjI0 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALWWB3qawZng79VrK119 RS9au5U8rT+4tz60SEJ+E4rcZ9gTwm/CCebKlLoU6hks5mkrjM1niDfBhkGiSeye dHTHTp185IgAJlHAowkeNKXu9kQNthePy9WEactL7y0G1mCmVArnVRFpbLTbTW9I QimNtT5be/hCg4Qsnj2BEOjzH1D4jwDU7zypOT9YWrwN8cSYpKGSrUkWllRLlnoJ htcD15rTeCJAarYQ1khYd/J/1Svq2oEXNSPEmv3Xl0bk9oNKTDsmovQXcg2WngZv HSu5Y6ZXeAk75ZoRg3P1UQhaGXmp/xcRN1WWNZyRs4mo7IdnJHJGKlh+r7yuo8By 2L8CAwEAAaOCAlAwggJMMB0GA1UdDgQWBBQDLTNmT3gLLFAe5iPnu/HSJrJiSDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOQU5HLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1hJTkFORy9BeTB6Wms5NEN5eFFIdVlqNTd2eDBpYXlZa2cubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoL+oMA0GCSqGSIb3DQEBCwUAA4IBAQBj zp3/2I81veGAjU7qohw3NQWC3duUikmzQi73FUgByu6FWaAlUz5yXEG0uG3F4MDP IPuUvoisIeGlGxpJAton0UBK54CoJB10K7yfXg9lZoRSFF0dEkuArUwAjKqb036l M0lymsuHOlF63I000M0Pc71ChwJNfWE+2bQqmOie3M8YEajyr56A4S3lTNYW1rJ9 bkmOmILZMhMdrXg/246n/Ds5JCl7rXwPD5IUnQ4LcNW8D9LVZkDl1/8NYJCxmqkl Xv0Vj6r9tCSo6UTW/+VMfbG0xn3OO/oa2xhjwd6eJwz3ggBpkYqv9hiVLjhTNECa cup+NF7cjgseLo98DZe6 -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org