$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer File: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (raw, json) Hash identifier: heZQPYBE8P7tzqUnJ86EYoqdDdu4GIvW5YOMongwFds= Subject key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 140F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:19 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 139.223.0.0/16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 05:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5135 (0x140f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Sep 1 03:11:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:ec:7c:fc:c1:a8:cf:cc:b1:e4:0d:b1:20: 9b:fa:75:ac:85:35:eb:5c:6d:bb:64:57:1b:0a:98: b7:99:2d:e0:80:6a:b2:f6:69:98:ac:c3:f9:7e:57: f4:7b:e3:84:d0:b9:7b:a9:5f:83:df:c4:33:53:9f: 40:35:d0:f3:7c:c9:9f:ce:81:ef:e2:02:b2:cc:15: 5b:d3:be:59:1f:97:27:b0:6b:28:9d:b6:76:3b:22: 16:2f:1a:24:fc:c7:b4:04:da:6d:55:a9:f3:6c:f1: 21:92:b3:e2:88:a6:e0:42:58:3a:04:ff:be:b3:ee: d4:41:c4:4a:16:00:83:cc:04:e8:f8:c4:13:85:8f: 93:67:2d:de:91:21:74:35:25:1b:fd:fb:d8:0f:78: 0f:99:a7:4e:b4:86:fc:6e:56:ac:09:ae:6b:c6:ac: 43:a0:21:64:21:e5:86:23:87:50:92:a4:6b:bb:12: d7:c1:4b:db:4a:58:38:11:51:56:ab:e7:d8:71:78: 37:69:38:62:a0:c7:df:da:b3:12:9f:50:ec:6f:6b: 45:90:6e:a4:7c:f9:07:80:41:92:ca:0b:97:9a:82: 4a:20:cc:e5:29:35:29:82:f8:54:08:7e:a2:50:dd: 2d:7a:5a:a6:97:c9:43:74:93:95:5f:61:8a:fa:b2: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:ef:03:dd:e6:13:a0:10:a5:5f:60:2f:77:89:15:b8:36:78: 8e:d2:eb:1c:e3:f3:22:52:0a:dd:97:8e:b7:60:d5:af:08:01: 01:17:be:7d:1e:af:69:df:9b:0b:5c:9b:41:2c:b1:f9:cb:63: 42:bd:cb:5e:ac:d1:54:9a:c5:12:cd:47:1b:60:7f:2e:db:dd: b9:c7:2c:21:3f:cf:fe:f7:1c:19:d6:62:80:0d:45:09:e6:c0: c5:d5:7b:b1:3a:f2:e7:7c:ce:57:96:ad:b4:dd:da:73:0a:4e: 35:f1:17:a3:53:c6:f4:f8:04:8e:ab:f5:41:75:d0:ac:9b:8b: 12:a5:e3:8d:65:4c:98:3e:6a:63:53:f8:ee:f2:10:2b:04:cc: fe:40:80:51:47:20:2f:45:97:42:e2:ea:92:9b:23:17:d4:a8: a3:7a:32:cb:55:92:92:ee:c3:63:1c:21:39:c4:0a:24:f4:8e: c5:85:39:ba:7b:46:e5:42:20:d7:64:03:40:62:cb:f4:aa:61: 25:23:6d:43:5f:70:21:8a:4a:0c:54:a6:bc:99:ab:dd:bc:45: 58:7d:2c:55:9d:7f:88:a0:ae:73:13:f3:18:0d:28:52:1f:3a: 27:27:e9:b2:aa:3c:45:03:76:bf:d6:87:93:10:d1:f5:14:9d: 8c:df:b8:83 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICFA8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTIzMDkwMTAzMTExOVoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMDZBRTE0ODBDRUZDNUNFMDgwMjkyOTdGNEQ0OUNCQ0FCRDZDRTJG MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6W7Hz8wajPzLHkDbEg m/p1rIU161xtu2RXGwqYt5kt4IBqsvZpmKzD+X5X9HvjhNC5e6lfg9/EM1OfQDXQ 83zJn86B7+ICsswVW9O+WR+XJ7BrKJ22djsiFi8aJPzHtATabVWp82zxIZKz4oim 4EJYOgT/vrPu1EHEShYAg8wE6PjEE4WPk2ct3pEhdDUlG/372A94D5mnTrSG/G5W rAmua8asQ6AhZCHlhiOHUJKka7sS18FL20pYOBFRVqvn2HF4N2k4YqDH39qzEp9Q 7G9rRZBupHz5B4BBksoLl5qCSiDM5Sk1KYL4VAh+olDdLXpappfJQ3STlV9hivqy o4kCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBQGrhSAzvxc4IApKX9NScvKvWzi8jAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElTTkVULzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1RJU05FVC9CcTRVZ003OFhPQ0FLU2xfVFVuTHlyMXM0dkkubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsG AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi98wDQYJKoZIhvcNAQELBQADggEBAB3v A93mE6AQpV9gL3eJFbg2eI7S6xzj8yJSCt2Xjrdg1a8IAQEXvn0er2nfmwtcm0Es sfnLY0K9y16s0VSaxRLNRxtgfy7b3bnHLCE/z/73HBnWYoANRQnmwMXVe7E68ud8 zleWrbTd2nMKTjXxF6NTxvT4BI6r9UF10KybixKl441lTJg+amNT+O7yECsEzP5A gFFHIC9Fl0Li6pKbIxfUqKN6MstVkpLuw2McITnECiT0jsWFObp7RuVCINdkA0Bi y/SqYSUjbUNfcCGKSgxUpryZq928RVh9LFWdf4igrnMT8xgNKFIfOicn6bKqPEUD dr/Wh5MQ0fUUnYzfuIM= -----END CERTIFICATE-----Generated at Tue May 21 23:30:59 2024 by rpki-client on console-ams.rpki-client.org