$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer File: BA2WgwOzZPdyp1NXgiDTU34WFm4.cer (raw, json) Hash identifier: x4J3U1mwDvGK3YmNB3DzaX2TOXSvElIVhIVaA6PIiRE= Subject key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 284E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:18 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.175.254.0/23 IP: 2400:1e20::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10318 (0x284e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:18 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=040D968303B364F772A753578220D3537E16166E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:0c:d8:4a:49:9f:ff:f1:9f:9f:99:54:1d: 99:26:33:4f:2c:bd:1d:df:07:9b:d5:b2:1b:b7:8e: 4f:fb:30:66:41:f5:44:ca:55:9b:93:76:e9:09:8d: 31:46:33:73:ad:84:b2:c8:bc:0d:8d:25:c0:12:46: f7:f7:91:50:b8:e7:e7:e5:0c:31:b0:6b:14:7b:07: 9c:12:f8:2d:22:99:81:2a:5c:7a:55:e6:f1:bf:cd: cc:4a:75:d9:bb:ae:f4:90:41:21:0b:d2:b4:0c:99: 10:cd:6e:fa:f2:38:65:35:80:5f:79:45:22:00:7b: 0f:22:e5:03:af:86:ed:7b:97:27:3d:97:b0:da:c7: 30:82:0b:90:23:a5:82:3b:25:b9:b4:1b:f9:eb:60: 26:22:e7:10:c5:5f:fb:69:dd:e1:0b:e5:73:09:bf: 67:c4:db:50:97:d6:ed:28:19:73:bb:a0:1a:b1:70: cf:81:a3:c0:f5:6e:80:cc:fb:18:bf:67:de:64:c4: fa:7a:8a:f7:4d:6f:ab:ad:91:a0:dd:b3:b0:ad:0b: f0:95:1c:8d:ec:22:1d:d7:df:4c:6b:ce:d6:b1:d5: 62:4d:75:b7:6f:4e:1c:15:4e:22:f9:77:de:78:88: 49:34:a5:4a:89:c0:f3:a1:7a:c7:ec:90:2b:62:74: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.175.254.0/23 IPv6: 2400:1e20::/32 Signature Algorithm: sha256WithRSAEncryption 3b:1a:78:db:7f:0c:02:e5:4f:30:ad:5f:88:d8:52:a4:d6:f6: 3f:86:2d:49:da:9a:f0:65:35:fd:17:6d:26:07:b8:9c:df:cc: f2:a0:dc:42:82:b3:94:a3:64:1f:9a:2a:51:9d:01:ff:c8:ac: 53:e5:57:69:7a:30:c1:85:06:fb:81:dc:ca:6d:a2:44:f1:05: 8c:46:e7:e3:ad:89:f8:76:d5:58:bd:ae:07:85:61:99:8b:0c: 4a:77:86:e4:be:16:87:d9:58:d9:04:53:d0:45:12:e8:2d:74: ba:d0:b7:a2:79:06:f9:0b:37:d8:1d:35:56:73:74:a2:e7:12: 14:6a:65:d7:3f:e5:a3:81:98:48:51:08:ba:36:69:36:e5:f6: e5:39:2b:d9:7c:9f:ac:c0:45:bf:3e:11:06:d0:9c:de:36:df: d3:d3:85:51:d3:f9:08:1b:c9:0a:8e:01:17:39:68:19:da:8e: c8:fe:3b:cd:99:b2:c0:9e:32:ac:17:c1:b1:b6:dd:24:83:ad: 9a:82:f2:da:62:5c:52:44:0d:64:bc:6e:4e:34:10:7b:51:98: d3:52:6b:83:5f:0c:76:a4:49:fc:4b:af:0f:f8:97:6c:d9:30: 45:1e:4f:4a:1a:57:01:b0:2c:e2:99:99:de:87:75:93:71:95: 34:73:a5:59 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICKE4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExOFoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMDQwRDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2 RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAONMDNhKSZ//8Z+fmVQd mSYzTyy9Hd8Hm9WyG7eOT/swZkH1RMpVm5N26QmNMUYzc62Essi8DY0lwBJG9/eR ULjn5+UMMbBrFHsHnBL4LSKZgSpcelXm8b/NzEp12buu9JBBIQvStAyZEM1u+vI4 ZTWAX3lFIgB7DyLlA6+G7XuXJz2XsNrHMIILkCOlgjslubQb+etgJiLnEMVf+2nd 4Qvlcwm/Z8TbUJfW7SgZc7ugGrFwz4GjwPVugMz7GL9n3mTE+nqK901vq62RoN2z sK0L8JUcjewiHdffTGvO1rHVYk11t29OHBVOIvl33niISTSlSonA86F6x+yQK2J0 dSUCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQEDZaDA7Nk93KnU1eCINNTfhYWbjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSUFOR1lVL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnr/4wDQQCAAIwBwMFACQAHiAwDQYJ KoZIhvcNAQELBQADggEBADsaeNt/DALlTzCtX4jYUqTW9j+GLUnamvBlNf0XbSYH uJzfzPKg3EKCs5SjZB+aKlGdAf/IrFPlV2l6MMGFBvuB3MptokTxBYxG5+Otifh2 1Vi9rgeFYZmLDEp3huS+FofZWNkEU9BFEugtdLrQt6J5BvkLN9gdNVZzdKLnEhRq Zdc/5aOBmEhRCLo2aTbl9uU5K9l8n6zARb8+EQbQnN4239PThVHT+QgbyQqOARc5 aBnajsj+O82ZssCeMqwXwbG23SSDrZqC8tpiXFJEDWS8bk40EHtRmNNSa4NfDHak SfxLrw/4l2zZMEUeT0oaVwGwLOKZmd6HdZNxlTRzpVk= -----END CERTIFICATE-----Generated at Tue May 21 21:12:17 2024 by rpki-client on console-fra.rpki-client.org