$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer File: C2fHjjXSNjKiVTKu_otKn8q-O00.cer (raw, json) Hash identifier: h8vLyFPJchLvyRg+67CplV6DgXi4lgvcJUc+zDS8RSQ= Subject key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1657 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Wed 04 Sep 2024 00:45:37 +0000 Certificate not after: Thu 28 Aug 2025 15:30:19 +0000 Subordinate resources: IP: 160.30.210.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5719 (0x1657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Sep 4 00:45:37 2024 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:c3:97:64:ab:48:c0:cc:45:f8:50:b8:6f: 49:fd:b0:dd:f3:62:69:85:a4:33:62:3f:fc:fe:4b: f1:6c:65:4c:36:38:83:79:1a:97:09:a1:f7:da:42: b5:9c:07:7e:b8:26:bb:79:4b:f9:7c:a3:b9:3b:47: 4c:c4:8e:82:0f:08:ee:a4:4c:02:4e:90:42:d5:dd: 87:46:01:17:e0:df:8f:72:c9:cb:b1:5e:02:63:a8: 34:7c:f8:70:a3:2f:fc:17:2b:2e:7b:26:90:f7:fd: 21:48:c2:c7:a3:e1:ad:a0:3a:7f:74:80:b3:50:7f: 33:81:ba:e6:a3:ef:0a:03:8f:ec:3d:0a:7c:18:e6: e9:4c:46:b2:c1:ec:3e:a0:c2:fd:01:cf:4a:37:43: 13:b2:8e:3d:83:50:0e:11:bc:39:ba:50:5f:42:1a: ec:16:5c:9f:02:a0:dd:9e:6a:66:cd:8d:0f:07:87: 7b:57:e8:1b:31:d4:49:67:67:30:fb:7f:67:ca:e3: fb:42:e2:b1:af:d0:d0:64:d0:3b:7a:8e:68:74:27: 32:7a:f3:23:5e:81:64:1c:cd:bd:42:16:77:ac:d3: fc:e2:b0:3b:5c:27:be:66:ee:f5:aa:f0:52:8c:f1: 32:c6:98:bc:a9:95:3b:9a:43:8e:ca:f2:56:fa:35: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.210.0/23 Signature Algorithm: sha256WithRSAEncryption ac:ed:24:10:03:1c:8b:b7:06:86:04:a3:09:49:02:1a:aa:6b: f6:3a:5b:16:5c:de:dc:80:43:de:ec:1e:8f:6a:60:d0:65:3d: 77:d9:d7:cc:f5:99:6c:cd:c6:a2:12:1a:ff:b7:10:fa:41:f7: 9a:a4:14:bd:07:8b:a6:de:22:73:e4:16:f0:72:24:e5:4a:57: 6f:95:64:c2:81:a3:b6:8b:5b:5f:65:e0:48:08:43:6b:b4:27: 35:6a:f4:9c:eb:48:51:02:48:2b:2f:df:fc:de:c0:66:45:16: 50:cd:28:88:c5:4c:23:65:8e:b4:f4:50:0b:c4:29:9b:4f:14: 09:7a:14:b9:63:37:45:de:5c:dd:fa:9c:38:8d:c8:f3:fe:f4: ed:bb:e7:bb:11:cf:96:e7:aa:a8:09:71:a7:3e:62:a5:69:ee: bc:f8:3d:30:3f:6d:04:81:ba:47:e2:aa:62:1f:a2:5b:af:37: b0:c9:a1:70:2d:7d:47:b1:cd:ef:5a:bf:85:9e:2d:5a:cd:ea: ad:2d:62:d9:26:05:e9:d9:ed:21:ce:54:f7:e2:99:d3:f1:86: 22:dd:35:be:ab:34:ad:b6:c6:69:7a:37:e3:b7:fd:62:2b:75: bd:9d:7c:53:7d:b1:de:a4:56:e8:52:fd:dd:d5:04:72:96:25: 27:18:58:27 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICFlcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDkwNDAwNDUzN1oXDTI1MDgyODE1MzAxOVowMzEx MC8GA1UEAxMoMEI2N0M3OEUzNUQyMzYzMkEyNTUzMkFFRkU4QjRBOUZDQUJFM0I0 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0bw5dkq0jAzEX4ULhv Sf2w3fNiaYWkM2I//P5L8WxlTDY4g3kalwmh99pCtZwHfrgmu3lL+XyjuTtHTMSO gg8I7qRMAk6QQtXdh0YBF+Dfj3LJy7FeAmOoNHz4cKMv/BcrLnsmkPf9IUjCx6Ph raA6f3SAs1B/M4G65qPvCgOP7D0KfBjm6UxGssHsPqDC/QHPSjdDE7KOPYNQDhG8 ObpQX0Ia7BZcnwKg3Z5qZs2NDweHe1foGzHUSWdnMPt/Z8rj+0Lisa/Q0GTQO3qO aHQnMnrzI16BZBzNvUIWd6zT/OKwO1wnvmbu9arwUozxMsaYvKmVO5pDjsryVvo1 MAUCAwEAAaOCAlgwggJUMB0GA1UdDgQWBBQLZ8eONdI2MqJVMq7+i0qfyr47TTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQVEVD SC8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9DT0RFVVBURUNIL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgHtIwDQYJKoZIhvcNAQEL BQADggEBAKztJBADHIu3BoYEowlJAhqqa/Y6WxZc3tyAQ97sHo9qYNBlPXfZ18z1 mWzNxqISGv+3EPpB95qkFL0Hi6beInPkFvByJOVKV2+VZMKBo7aLW19l4EgIQ2u0 JzVq9JzrSFECSCsv3/zewGZFFlDNKIjFTCNljrT0UAvEKZtPFAl6FLljN0XeXN36 nDiNyPP+9O2757sRz5bnqqgJcac+YqVp7rz4PTA/bQSBukfiqmIfoluvN7DJoXAt fUexze9av4WeLVrN6q0tYtkmBenZ7SHOVPfimdPxhiLdNb6rNK22xml6N+O3/WIr db2dfFN9sd6kVuhS/d3VBHKWJScYWCc= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:23 2024 by rpki-client on console-fra.rpki-client.org