$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer File: Bj-Bjayxcbg1QVq9J4mTki883F0.cer (raw, json) Hash identifier: 3zAFbvcjNlmgIBog7b+VvnR/6lhDkdDXNqLcFaPxwAQ= Subject key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:17 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.220.218.0/23 IP: 2401:a60::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11657 (0x2d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=063F818DACB171B835415ABD278993922F3CDC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:02:25:a6:df:ab:7b:41:72:e4:5f:31:26: 72:95:b4:24:59:d1:0a:36:44:41:57:8b:d2:6b:8a: ba:02:88:01:c0:b1:f9:c4:6c:a3:df:99:1d:f5:80: e4:4e:7d:47:0a:6a:c3:3c:91:85:89:16:35:9b:07: 09:09:42:49:ba:b1:b6:b7:cb:27:7f:fb:82:9e:a9: 58:50:37:d9:58:a3:7b:9b:ec:ab:40:b8:1c:80:09: 46:37:39:be:b6:ac:df:bd:8e:ff:94:bc:e1:ea:0c: 40:ab:9e:f3:25:04:af:fe:b8:27:c2:fa:fc:86:57: 25:99:fc:f1:03:33:79:bf:66:4c:e2:de:d7:01:6f: 69:67:de:dd:1b:69:d2:35:73:16:0e:eb:b6:71:c6: 64:85:b6:b2:89:77:b5:92:4b:6a:aa:e1:dc:a2:e9: 34:f2:43:1d:b4:c1:0e:77:06:d5:94:93:21:79:5f: fa:f6:a0:6e:31:dc:81:3d:6c:7b:49:ce:72:91:d8: 90:c3:05:c2:53:d6:b4:c3:a2:27:d7:03:8f:53:28: 76:d8:b2:2a:36:f9:b6:4f:a8:fe:6a:9e:74:be:b6: 7c:1e:82:aa:ba:b3:0f:58:7f:1b:b7:9d:82:1d:9d: 57:31:f5:a8:41:16:3a:56:5a:32:70:ef:b5:0d:4d: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.218.0/23 IPv6: 2401:a60::/32 Signature Algorithm: sha256WithRSAEncryption 10:ca:a2:66:16:4c:19:e5:02:22:89:52:d9:e8:9f:59:03:f0: 44:40:a5:54:d3:9f:ad:ea:3f:ce:6c:10:44:3d:dd:14:03:01: f7:5d:a7:18:91:b9:51:ae:7b:dd:98:7a:6f:a7:b6:50:d8:3b: 64:a8:e6:c1:48:74:5c:d7:25:1f:18:31:ce:49:a0:89:f2:1d: f0:fe:cc:db:db:13:30:7e:0d:76:16:b5:b5:c2:f0:9d:9e:04: 73:19:2e:08:bd:07:8f:5f:f8:a6:df:71:62:55:a3:92:11:dc: 1b:92:d9:d0:9b:af:ca:f5:84:e0:38:b0:af:8f:96:35:69:58: f2:79:89:a8:2d:31:6f:55:7c:41:6c:46:5a:84:71:e1:c8:df: 4c:3a:34:82:3c:50:a4:ae:f3:a8:fd:06:41:38:50:cd:d6:9d: 5b:cd:98:86:57:7d:22:47:05:6e:0b:0f:1e:e5:ed:3b:3c:33: e7:e9:42:33:02:ed:7b:b8:12:9a:1e:e1:b9:97:95:09:ff:9f: b3:33:9b:cc:2f:06:b9:ef:7b:98:b8:4b:08:8b:3f:a7:79:98: 77:fa:89:1c:5d:f8:00:e9:53:dc:bf:b1:61:fc:d7:25:b6:6a: d2:c4:be:e3:80:6c:0e:43:0d:dd:6d:ad:8e:92:a5:29:55:ed: ac:c0:b9:8c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICLYkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxN1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDYzRjgxOERBQ0IxNzFCODM1NDE1QUJEMjc4OTkzOTIyRjNDREM1 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJj/AiWm36t7QXLkXzEm cpW0JFnRCjZEQVeL0muKugKIAcCx+cRso9+ZHfWA5E59RwpqwzyRhYkWNZsHCQlC SbqxtrfLJ3/7gp6pWFA32Vije5vsq0C4HIAJRjc5vras372O/5S84eoMQKue8yUE r/64J8L6/IZXJZn88QMzeb9mTOLe1wFvaWfe3Rtp0jVzFg7rtnHGZIW2sol3tZJL aqrh3KLpNPJDHbTBDncG1ZSTIXlf+vagbjHcgT1se0nOcpHYkMMFwlPWtMOiJ9cD j1ModtiyKjb5tk+o/mqedL62fB6CqrqzD1h/G7edgh2dVzH1qEEWOlZaMnDvtQ1N XhcCAwEAAaOCAlkwggJVMB0GA1UdDgQWBBQGP4GNrLFxuDVBWr0niZOSLzzcXTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERDLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RE Qy9Cai1CamF5eGNiZzFRVnE5SjRtVGtpODgzRjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ9zaMA0EAgACMAcDBQAkAQpgMA0GCSqGSIb3DQEB CwUAA4IBAQAQyqJmFkwZ5QIiiVLZ6J9ZA/BEQKVU05+t6j/ObBBEPd0UAwH3XacY kblRrnvdmHpvp7ZQ2DtkqObBSHRc1yUfGDHOSaCJ8h3w/szb2xMwfg12FrW1wvCd ngRzGS4IvQePX/im33FiVaOSEdwbktnQm6/K9YTgOLCvj5Y1aVjyeYmoLTFvVXxB bEZahHHhyN9MOjSCPFCkrvOo/QZBOFDN1p1bzZiGV30iRwVuCw8e5e07PDPn6UIz Au17uBKaHuG5l5UJ/5+zM5vMLwa573uYuEsIiz+neZh3+okcXfgA6VPcv7Fh/Ncl tmrSxL7jgGwOQw3dba2OkqUpVe2swLmM -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:23 2024 by rpki-client on console-fra.rpki-client.org