$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer File: C9olxjD4_0bjB7GUzSqtHm0GMx0.cer (raw, json) Hash identifier: sUxqHQFcPoXmAa6Kv4zswMNph6xZkWaofhr54ptw29I= Subject key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:15 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.126.88.0/22 IP: 2405:67c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11621 (0x2d65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:14:f1:c6:f0:0e:91:35:77:e3:0d:e5:78: 22:bf:76:47:b6:aa:20:9e:b4:df:c9:b5:7a:5a:38: 83:3a:c2:69:4d:42:1e:c0:26:ca:85:57:18:e1:4e: 3f:bf:78:84:89:11:fe:80:b7:6a:56:c6:f0:45:df: b9:a4:09:b6:27:83:99:72:3c:f0:c9:a6:04:a0:56: b7:a9:85:ff:fd:97:fd:ff:5a:9b:12:26:e5:98:ef: b3:15:ea:7c:bd:a1:38:6e:1e:91:be:9d:f4:fa:8d: ac:62:83:92:30:21:38:ad:cb:df:7d:9a:a7:f6:71: 5a:57:4f:56:3f:12:9b:cf:54:93:38:67:12:36:46: 67:bc:c3:74:1e:f7:23:f3:40:44:96:ea:ac:58:aa: 5d:ce:50:a1:a3:0e:87:fa:e9:ed:3d:06:84:a1:1d: 32:64:77:77:2a:20:10:35:12:74:88:16:e0:4a:2d: dc:1a:60:16:d6:c7:b0:d3:41:11:7c:5b:59:89:9b: 92:e4:c5:7a:b1:57:10:6b:f3:cd:a9:2e:86:4f:f1: 7a:1e:27:34:b4:82:f3:fe:11:05:ed:a5:33:24:b7: 83:e5:75:b1:0b:44:28:27:01:7a:91:d2:f8:7c:fe: f9:72:9a:7e:ce:ec:30:b6:3e:50:85:53:15:37:be: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.126.88.0/22 IPv6: 2405:67c0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:60:1a:b2:cc:02:2c:d5:52:aa:92:bd:ee:3a:7d:f2:40:00: b2:0f:f7:a6:62:d6:04:cc:e8:6d:ed:11:59:c2:a4:a5:6b:0c: f0:a9:28:e2:62:9c:fa:80:84:d7:9b:d5:79:8f:8c:4f:12:6d: 56:01:cf:01:bc:52:bc:c9:6d:95:4e:9a:79:b2:35:94:b3:ac: ab:e6:1d:06:9c:6f:ca:b9:68:06:9f:f5:1e:85:98:c7:b5:78: 6d:27:9a:26:10:6d:ba:cc:0d:75:be:07:f6:f2:90:8d:5e:1a: 4d:e8:d9:2b:75:c0:6c:31:49:a0:50:a5:e1:73:6e:21:c5:13: 52:7b:8a:45:19:bb:ff:f2:1e:e3:0a:35:8d:6a:6e:9f:d4:78: 1d:16:d7:fb:1d:09:ba:92:6c:a4:ac:33:a6:37:6e:74:e2:49: 7a:53:46:a6:12:b9:f5:4a:3a:8b:fa:c1:27:bb:88:f5:6b:78: 8c:e8:78:d8:e9:db:28:04:66:65:a2:da:30:aa:d5:eb:9d:85: 88:cf:9a:5d:a8:d5:72:8c:3d:e9:3f:90:c8:88:bf:a8:b5:53: 95:6e:39:4d:68:3d:16:00:22:a2:63:25:30:7e:34:1a:8b:62: 0d:f4:1f:e4:8f:77:87:bc:df:cd:fa:92:da:12:0a:89:2f:5c: 1d:5b:54:d5 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICLWUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxNVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMEJEQTI1QzYzMEY4RkY0NkUzMDdCMTk0Q0QyQUFEMUU2RDA2MzMx RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqxFPHG8A6RNXfjDeV4 Ir92R7aqIJ6038m1elo4gzrCaU1CHsAmyoVXGOFOP794hIkR/oC3albG8EXfuaQJ tieDmXI88MmmBKBWt6mF//2X/f9amxIm5ZjvsxXqfL2hOG4ekb6d9PqNrGKDkjAh OK3L332ap/ZxWldPVj8Sm89UkzhnEjZGZ7zDdB73I/NARJbqrFiqXc5QoaMOh/rp 7T0GhKEdMmR3dyogEDUSdIgW4Eot3BpgFtbHsNNBEXxbWYmbkuTFerFXEGvzzaku hk/xeh4nNLSC8/4RBe2lMyS3g+V1sQtEKCcBepHS+Hz++XKafs7sMLY+UIVTFTe+ ZNMCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQL2iXGMPj/RuMHsZTNKq0ebQYzHTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hBTkdGVS8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSEFOR0ZVL0M5b2x4akQ0XzBiakI3R1V6U3F0SG0wR014MC5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnflgwDQQCAAIwBwMFACQFZ8AwDQYJ KoZIhvcNAQELBQADggEBAFtgGrLMAizVUqqSve46ffJAALIP96Zi1gTM6G3tEVnC pKVrDPCpKOJinPqAhNeb1XmPjE8SbVYBzwG8UrzJbZVOmnmyNZSzrKvmHQacb8q5 aAaf9R6FmMe1eG0nmiYQbbrMDXW+B/bykI1eGk3o2St1wGwxSaBQpeFzbiHFE1J7 ikUZu//yHuMKNY1qbp/UeB0W1/sdCbqSbKSsM6Y3bnTiSXpTRqYSufVKOov6wSe7 iPVreIzoeNjp2ygEZmWi2jCq1eudhYjPml2o1XKMPek/kMiIv6i1U5VuOU1oPRYA IqJjJTB+NBqLYg30H+SPd4e83836ktoSCokvXB1bVNU= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:23 2024 by rpki-client on console-fra.rpki-client.org