$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer File: Bj-Bjayxcbg1QVq9J4mTki883F0.cer (raw, json) Hash identifier: 7Y3bpc+VtYhm6u9QHUp+XH1DpAwSRxv52oLM2HSs0ps= Subject key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2992 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:18:59 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.220.218.0/23 IP: 2401:a60::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10642 (0x2992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:18:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=063F818DACB171B835415ABD278993922F3CDC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:02:25:a6:df:ab:7b:41:72:e4:5f:31:26: 72:95:b4:24:59:d1:0a:36:44:41:57:8b:d2:6b:8a: ba:02:88:01:c0:b1:f9:c4:6c:a3:df:99:1d:f5:80: e4:4e:7d:47:0a:6a:c3:3c:91:85:89:16:35:9b:07: 09:09:42:49:ba:b1:b6:b7:cb:27:7f:fb:82:9e:a9: 58:50:37:d9:58:a3:7b:9b:ec:ab:40:b8:1c:80:09: 46:37:39:be:b6:ac:df:bd:8e:ff:94:bc:e1:ea:0c: 40:ab:9e:f3:25:04:af:fe:b8:27:c2:fa:fc:86:57: 25:99:fc:f1:03:33:79:bf:66:4c:e2:de:d7:01:6f: 69:67:de:dd:1b:69:d2:35:73:16:0e:eb:b6:71:c6: 64:85:b6:b2:89:77:b5:92:4b:6a:aa:e1:dc:a2:e9: 34:f2:43:1d:b4:c1:0e:77:06:d5:94:93:21:79:5f: fa:f6:a0:6e:31:dc:81:3d:6c:7b:49:ce:72:91:d8: 90:c3:05:c2:53:d6:b4:c3:a2:27:d7:03:8f:53:28: 76:d8:b2:2a:36:f9:b6:4f:a8:fe:6a:9e:74:be:b6: 7c:1e:82:aa:ba:b3:0f:58:7f:1b:b7:9d:82:1d:9d: 57:31:f5:a8:41:16:3a:56:5a:32:70:ef:b5:0d:4d: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.218.0/23 IPv6: 2401:a60::/32 Signature Algorithm: sha256WithRSAEncryption 28:b2:30:27:08:67:c5:fb:3e:70:9e:b7:96:6f:92:26:b4:eb: 26:3f:66:9c:8c:a9:fd:0b:65:5a:18:c6:71:d8:9a:aa:1b:e4: d1:0b:52:67:65:ef:7d:b6:97:da:db:c2:c2:95:2e:95:35:c0: a7:f1:be:82:a0:33:7f:96:0f:e0:c1:6d:b1:c5:f0:62:65:78: 13:fc:1d:4d:53:16:02:d3:d3:de:ed:69:cc:6c:98:00:7a:70: 2f:4e:ac:84:1a:af:1a:2e:53:76:91:cc:46:44:79:19:db:9e: 3f:37:08:bb:8c:8d:28:00:f3:9a:b0:9d:40:5a:c5:4c:c2:0b: ea:a3:9b:6b:06:ea:78:d7:ae:28:86:a3:a3:f5:9c:57:36:45: 29:1b:9b:6a:ef:a9:3b:c3:f5:39:33:5a:39:6f:c8:59:40:c7: ac:17:a8:c5:9b:18:6f:ac:39:81:8d:03:b0:23:7d:8d:b7:32: 20:4d:bc:a2:29:d4:11:3d:9c:0c:dc:33:2a:ca:61:2e:1d:0f: 25:6d:58:e4:74:3f:34:8a:dd:bb:af:a7:75:0c:26:db:51:e4: df:bb:77:b4:52:13:ff:68:39:57:ca:a1:df:a2:7f:1a:4f:21: 08:2b:46:7f:36:98:34:01:d8:a9:41:d7:dc:5a:6c:15:90:f3: bb:6e:a8:29 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICKZIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTg1OVoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMDYzRjgxOERBQ0IxNzFCODM1NDE1QUJEMjc4OTkzOTIyRjNDREM1 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJj/AiWm36t7QXLkXzEm cpW0JFnRCjZEQVeL0muKugKIAcCx+cRso9+ZHfWA5E59RwpqwzyRhYkWNZsHCQlC SbqxtrfLJ3/7gp6pWFA32Vije5vsq0C4HIAJRjc5vras372O/5S84eoMQKue8yUE r/64J8L6/IZXJZn88QMzeb9mTOLe1wFvaWfe3Rtp0jVzFg7rtnHGZIW2sol3tZJL aqrh3KLpNPJDHbTBDncG1ZSTIXlf+vagbjHcgT1se0nOcpHYkMMFwlPWtMOiJ9cD j1ModtiyKjb5tk+o/mqedL62fB6CqrqzD1h/G7edgh2dVzH1qEEWOlZaMnDvtQ1N XhcCAwEAAaOCAlkwggJVMB0GA1UdDgQWBBQGP4GNrLFxuDVBWr0niZOSLzzcXTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERDLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RE Qy9Cai1CamF5eGNiZzFRVnE5SjRtVGtpODgzRjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ9zaMA0EAgACMAcDBQAkAQpgMA0GCSqGSIb3DQEB CwUAA4IBAQAosjAnCGfF+z5wnreWb5ImtOsmP2acjKn9C2VaGMZx2JqqG+TRC1Jn Ze99tpfa28LClS6VNcCn8b6CoDN/lg/gwW2xxfBiZXgT/B1NUxYC09Pe7WnMbJgA enAvTqyEGq8aLlN2kcxGRHkZ254/Nwi7jI0oAPOasJ1AWsVMwgvqo5trBup4164o hqOj9ZxXNkUpG5tq76k7w/U5M1o5b8hZQMesF6jFmxhvrDmBjQOwI32NtzIgTbyi KdQRPZwM3DMqymEuHQ8lbVjkdD80it27r6d1DCbbUeTfu3e0UhP/aDlXyqHfon8a TyEIK0Z/Npg0AdipQdfcWmwVkPO7bqgp -----END CERTIFICATE-----Generated at Tue May 21 23:30:59 2024 by rpki-client on console-ams.rpki-client.org