$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer File: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (raw, json) Hash identifier: 2PWfsNk3u/lyO49p4kPzv9DHVCvji4sZt909yiOZ+uc= Subject key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1603 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:18 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 139.223.0.0/16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5635 (0x1603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 26 01:57:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:ec:7c:fc:c1:a8:cf:cc:b1:e4:0d:b1:20: 9b:fa:75:ac:85:35:eb:5c:6d:bb:64:57:1b:0a:98: b7:99:2d:e0:80:6a:b2:f6:69:98:ac:c3:f9:7e:57: f4:7b:e3:84:d0:b9:7b:a9:5f:83:df:c4:33:53:9f: 40:35:d0:f3:7c:c9:9f:ce:81:ef:e2:02:b2:cc:15: 5b:d3:be:59:1f:97:27:b0:6b:28:9d:b6:76:3b:22: 16:2f:1a:24:fc:c7:b4:04:da:6d:55:a9:f3:6c:f1: 21:92:b3:e2:88:a6:e0:42:58:3a:04:ff:be:b3:ee: d4:41:c4:4a:16:00:83:cc:04:e8:f8:c4:13:85:8f: 93:67:2d:de:91:21:74:35:25:1b:fd:fb:d8:0f:78: 0f:99:a7:4e:b4:86:fc:6e:56:ac:09:ae:6b:c6:ac: 43:a0:21:64:21:e5:86:23:87:50:92:a4:6b:bb:12: d7:c1:4b:db:4a:58:38:11:51:56:ab:e7:d8:71:78: 37:69:38:62:a0:c7:df:da:b3:12:9f:50:ec:6f:6b: 45:90:6e:a4:7c:f9:07:80:41:92:ca:0b:97:9a:82: 4a:20:cc:e5:29:35:29:82:f8:54:08:7e:a2:50:dd: 2d:7a:5a:a6:97:c9:43:74:93:95:5f:61:8a:fa:b2: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption c1:a0:57:b2:08:83:04:ec:7f:31:99:47:b2:04:7b:f9:0c:c0: 34:20:12:0e:bf:68:1a:95:74:a9:72:d4:7f:b1:1e:92:86:fc: 46:da:0b:8d:bb:88:d0:8b:7b:99:c5:5e:96:c9:af:3c:be:6c: 10:02:b0:a4:82:c8:8a:91:c4:44:8d:f2:fa:48:d7:9d:05:cc: b4:c6:96:21:c5:1d:5f:25:89:2c:31:ad:c5:79:49:c0:66:52: 7b:5b:ee:30:3f:35:ec:f7:6e:f5:43:29:e6:c5:47:c4:32:b8: d8:16:9f:73:83:98:5e:3f:15:7e:00:09:11:7d:c8:62:7a:f0: 53:4e:2b:80:4f:55:c1:b8:8c:1d:c0:2a:f1:5f:98:48:61:17: f9:32:59:50:ab:ad:2c:2c:16:f2:0d:5c:5c:4b:68:43:e3:d7: a6:4a:ab:8c:df:c6:5d:b1:5f:99:20:98:1c:b7:c9:7a:f0:d9: 35:cf:2b:97:d7:01:ff:65:18:9c:0b:e2:fb:e9:0e:56:14:3c: bc:b9:b3:d3:3d:ba:2c:9c:dd:6e:49:b9:e5:9a:fd:7a:a1:35: 93:cc:66:23:c9:a7:c0:8a:88:a6:8d:5d:df:f1:ae:17:ce:6c: 3c:29:c8:59:79:2b:3b:20:03:47:62:97:6f:77:b6:0c:b3:11: 4c:b8:49:9a -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICFgMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyNjAxNTcxOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMDZBRTE0ODBDRUZDNUNFMDgwMjkyOTdGNEQ0OUNCQ0FCRDZDRTJG MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6W7Hz8wajPzLHkDbEg m/p1rIU161xtu2RXGwqYt5kt4IBqsvZpmKzD+X5X9HvjhNC5e6lfg9/EM1OfQDXQ 83zJn86B7+ICsswVW9O+WR+XJ7BrKJ22djsiFi8aJPzHtATabVWp82zxIZKz4oim 4EJYOgT/vrPu1EHEShYAg8wE6PjEE4WPk2ct3pEhdDUlG/372A94D5mnTrSG/G5W rAmua8asQ6AhZCHlhiOHUJKka7sS18FL20pYOBFRVqvn2HF4N2k4YqDH39qzEp9Q 7G9rRZBupHz5B4BBksoLl5qCSiDM5Sk1KYL4VAh+olDdLXpappfJQ3STlV9hivqy o4kCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBQGrhSAzvxc4IApKX9NScvKvWzi8jAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElTTkVULzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1RJU05FVC9CcTRVZ003OFhPQ0FLU2xfVFVuTHlyMXM0dkkubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi98wDQYJKoZIhvcNAQELBQADggEBAMGg V7IIgwTsfzGZR7IEe/kMwDQgEg6/aBqVdKly1H+xHpKG/EbaC427iNCLe5nFXpbJ rzy+bBACsKSCyIqRxESN8vpI150FzLTGliHFHV8liSwxrcV5ScBmUntb7jA/Nez3 bvVDKebFR8QyuNgWn3ODmF4/FX4ACRF9yGJ68FNOK4BPVcG4jB3AKvFfmEhhF/ky WVCrrSwsFvINXFxLaEPj16ZKq4zfxl2xX5kgmBy3yXrw2TXPK5fXAf9lGJwL4vvp DlYUPLy5s9M9uiyc3W5JueWa/XqhNZPMZiPJp8CKiKaNXd/xrhfObDwpyFl5Kzsg A0dil293tgyzEUy4SZo= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org