$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer File: BA2WgwOzZPdyp1NXgiDTU34WFm4.cer (raw, json) Hash identifier: eHtWGIcsOPFdW8yK2NYOUsMYpyopKPDIyzShNBm9AB8= Subject key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2F59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:38 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.175.254.0/23 IP: 2400:1e20::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12121 (0x2f59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=040D968303B364F772A753578220D3537E16166E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:0c:d8:4a:49:9f:ff:f1:9f:9f:99:54:1d: 99:26:33:4f:2c:bd:1d:df:07:9b:d5:b2:1b:b7:8e: 4f:fb:30:66:41:f5:44:ca:55:9b:93:76:e9:09:8d: 31:46:33:73:ad:84:b2:c8:bc:0d:8d:25:c0:12:46: f7:f7:91:50:b8:e7:e7:e5:0c:31:b0:6b:14:7b:07: 9c:12:f8:2d:22:99:81:2a:5c:7a:55:e6:f1:bf:cd: cc:4a:75:d9:bb:ae:f4:90:41:21:0b:d2:b4:0c:99: 10:cd:6e:fa:f2:38:65:35:80:5f:79:45:22:00:7b: 0f:22:e5:03:af:86:ed:7b:97:27:3d:97:b0:da:c7: 30:82:0b:90:23:a5:82:3b:25:b9:b4:1b:f9:eb:60: 26:22:e7:10:c5:5f:fb:69:dd:e1:0b:e5:73:09:bf: 67:c4:db:50:97:d6:ed:28:19:73:bb:a0:1a:b1:70: cf:81:a3:c0:f5:6e:80:cc:fb:18:bf:67:de:64:c4: fa:7a:8a:f7:4d:6f:ab:ad:91:a0:dd:b3:b0:ad:0b: f0:95:1c:8d:ec:22:1d:d7:df:4c:6b:ce:d6:b1:d5: 62:4d:75:b7:6f:4e:1c:15:4e:22:f9:77:de:78:88: 49:34:a5:4a:89:c0:f3:a1:7a:c7:ec:90:2b:62:74: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.175.254.0/23 IPv6: 2400:1e20::/32 Signature Algorithm: sha256WithRSAEncryption 55:42:95:41:0c:89:23:27:35:b4:0a:f8:be:55:e6:d4:93:c6: 56:d7:bb:ee:eb:c9:2b:f7:41:af:1a:21:99:c9:d3:fd:21:46: 2e:e5:c9:f8:03:4e:a7:db:97:b2:1c:0a:50:07:26:17:cf:9a: 40:ac:de:58:a3:e6:bc:32:35:a6:a7:d8:24:78:79:c5:a8:3c: 0c:d7:2e:a0:74:49:77:ea:08:94:0b:67:13:6b:dc:32:37:3f: a4:8d:c9:31:03:a1:26:9c:ad:3b:08:a7:7d:90:b1:1d:b1:df: b2:a4:bb:d5:5c:47:d5:e2:85:51:c6:92:5a:0b:8b:fe:4f:dc: 5f:fd:fb:b6:ea:71:7c:8f:9b:1f:b6:7f:29:dc:98:31:27:87: 61:25:f8:94:4c:8e:18:3e:3c:ff:6e:06:fb:4e:65:a4:89:a2: 59:72:c0:c7:56:8c:3f:65:ae:5c:5c:2e:d7:38:0f:72:2e:90: 82:b0:d7:e7:d8:85:d4:44:82:c6:fe:c5:86:bd:97:e4:4f:d1: 21:fc:d1:fb:eb:a9:c7:4a:f4:8a:7f:23:c9:d9:50:98:ad:cf: 77:e4:9b:7d:a9:0a:78:58:95:6b:3c:53:f4:84:e3:f5:67:92: 27:75:23:ef:33:b1:67:79:dc:23:77:3c:88:37:4e:b9:1b:71: 2a:4f:c9:50 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICL1kwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDQwRDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAONMDNhKSZ//8Z+fmVQd mSYzTyy9Hd8Hm9WyG7eOT/swZkH1RMpVm5N26QmNMUYzc62Essi8DY0lwBJG9/eR ULjn5+UMMbBrFHsHnBL4LSKZgSpcelXm8b/NzEp12buu9JBBIQvStAyZEM1u+vI4 ZTWAX3lFIgB7DyLlA6+G7XuXJz2XsNrHMIILkCOlgjslubQb+etgJiLnEMVf+2nd 4Qvlcwm/Z8TbUJfW7SgZc7ugGrFwz4GjwPVugMz7GL9n3mTE+nqK901vq62RoN2z sK0L8JUcjewiHdffTGvO1rHVYk11t29OHBVOIvl33niISTSlSonA86F6x+yQK2J0 dSUCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQEDZaDA7Nk93KnU1eCINNTfhYWbjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSUFOR1lVL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnr/4wDQQCAAIwBwMFACQAHiAwDQYJ KoZIhvcNAQELBQADggEBAFVClUEMiSMnNbQK+L5V5tSTxlbXu+7rySv3Qa8aIZnJ 0/0hRi7lyfgDTqfbl7IcClAHJhfPmkCs3lij5rwyNaan2CR4ecWoPAzXLqB0SXfq CJQLZxNr3DI3P6SNyTEDoSacrTsIp32QsR2x37Kku9VcR9XihVHGkloLi/5P3F/9 +7bqcXyPmx+2fyncmDEnh2El+JRMjhg+PP9uBvtOZaSJollywMdWjD9lrlxcLtc4 D3IukIKw1+fYhdREgsb+xYa9l+RP0SH80fvrqcdK9Ip/I8nZUJitz3fkm32pCnhY lWs8U/SE4/Vnkid1I+8zsWd53CN3PIg3TrkbcSpPyVA= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org