$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DjrlLg48orgFrsL_itmlf3IHWqo.cer File: DjrlLg48orgFrsL_itmlf3IHWqo.cer (raw, json) Hash identifier: 4/hofu9y8wWWGJI7JFR0+llb0lBGIZbS6zbJMt7VV2c= Subject key identifier: 0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2F75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:13:48 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 152611 IP: 2401:b9a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12149 (0x2f75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 02:13:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0E3AE52E0E3CA2B805AEC2FF8AD9A57F72075AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:71:9c:e8:cf:94:7b:f8:2c:51:fb:c5:bb: 7a:a7:6c:f6:00:17:f0:90:53:65:11:f7:2a:3b:68: e3:4d:97:32:5f:cb:73:74:4e:92:8d:3e:6d:91:3a: c5:17:a5:3f:c9:ad:07:3a:99:f6:b3:51:05:c8:be: 04:58:7a:bc:51:1c:77:5c:4f:df:79:46:21:2f:9c: 09:62:1d:50:84:e7:3e:6b:52:b1:ae:fe:61:29:c9: e5:d6:96:34:64:e0:42:bc:60:5e:19:7a:ca:6d:9b: 98:59:b9:5d:17:aa:b3:14:b3:07:b4:09:f6:fe:84: 36:73:8d:1e:89:e0:c2:17:1e:12:43:84:d3:c0:ed: ca:1a:e4:ea:55:22:d0:3b:6c:9a:35:56:3c:fb:3e: e5:4f:f3:d7:bd:6a:cc:c6:e2:ab:b5:aa:39:fa:ad: 50:f0:cc:64:ff:c2:1f:9a:1a:8f:0b:4b:3d:6c:4e: 0f:15:72:03:83:47:ad:91:7f:40:4c:94:b8:26:18: 09:a8:1b:f0:06:3a:c6:e5:19:14:f3:ab:fe:46:47: 81:f6:7c:44:52:af:67:20:d2:9b:ee:9c:27:2f:1a: 4f:41:42:56:7c:25:f7:1d:ef:1a:39:0f:01:95:1f: e8:62:bd:6f:40:5a:cd:cc:e4:13:6a:6e:33:a6:5b: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152611 sbgp-ipAddrBlock: critical IPv6: 2401:b9a0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:21:f5:c5:34:b9:84:d1:a0:b1:9e:23:e6:0d:2d:01:cc:e3: fb:3a:27:46:09:88:be:4c:3a:93:5e:1d:99:ef:19:63:f3:9b: b2:42:60:95:fe:8e:81:b2:87:49:b0:7a:30:d1:3f:2c:47:92: 48:56:2b:a8:d0:3b:36:5e:87:62:fc:54:f2:a2:d1:6f:86:1d: eb:0a:f0:06:dc:8c:c6:26:64:a9:b9:63:66:ef:78:3c:11:99: d8:31:55:db:68:6c:25:8a:e6:c5:32:72:e1:c2:d6:37:20:a1: 91:c7:20:ce:ed:44:b1:d1:39:cf:33:0a:36:f9:8b:77:1e:1e: 2d:d1:1e:97:db:e6:9d:41:7a:1d:03:57:84:bb:de:60:ce:9c: 78:0f:4c:8d:8b:5c:b2:29:84:64:53:f2:99:c2:a5:ff:a0:3e: af:45:78:68:8e:42:73:5f:df:5f:7d:37:b2:a3:7e:ee:6b:33: 76:d1:51:e2:4c:8f:38:23:2b:24:bd:a4:94:f8:b3:90:b5:84: ad:a4:7c:97:cf:56:2c:ea:1c:3a:cc:47:ac:9e:38:94:d9:0b: 60:c6:61:12:04:e4:db:81:7f:75:28:cc:0c:d6:4f:74:9a:aa: 9b:3b:f7:6f:08:cc:82:de:20:d1:e7:37:70:ae:e0:7e:42:35: 15:62:d2:ca -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICL3UwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAyMTM0OFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMEUzQUU1MkUwRTNDQTJCODA1QUVDMkZGOEFEOUE1N0Y3MjA3NUFB QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVQcZzoz5R7+CxR+8W7 eqds9gAX8JBTZRH3Kjto402XMl/Lc3ROko0+bZE6xRelP8mtBzqZ9rNRBci+BFh6 vFEcd1xP33lGIS+cCWIdUITnPmtSsa7+YSnJ5daWNGTgQrxgXhl6ym2bmFm5XReq sxSzB7QJ9v6ENnONHongwhceEkOE08Dtyhrk6lUi0DtsmjVWPPs+5U/z171qzMbi q7WqOfqtUPDMZP/CH5oajwtLPWxODxVyA4NHrZF/QEyUuCYYCagb8AY6xuUZFPOr /kZHgfZ8RFKvZyDSm+6cJy8aT0FCVnwl9x3vGjkPAZUf6GK9b0BazczkE2puM6Zb 0D0CAwEAAaOCAm0wggJpMB0GA1UdDgQWBBQOOuUuDjyiuAWuwv+K2aV/cgdaqjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VLzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0JFSURPVS9EanJsTGc0OG9yZ0Zyc0xfaXRtbGYzSUhXcW8ubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwJUIzAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBuaAwDQYJKoZIhvcNAQELBQADggEBAH8h9cU0uYTRoLGeI+YNLQHM4/s6 J0YJiL5MOpNeHZnvGWPzm7JCYJX+joGyh0mwejDRPyxHkkhWK6jQOzZeh2L8VPKi 0W+GHesK8AbcjMYmZKm5Y2bveDwRmdgxVdtobCWK5sUycuHC1jcgoZHHIM7tRLHR Oc8zCjb5i3ceHi3RHpfb5p1Beh0DV4S73mDOnHgPTI2LXLIphGRT8pnCpf+gPq9F eGiOQnNf3199N7Kjfu5rM3bRUeJMjzgjKyS9pJT4s5C1hK2kfJfPVizqHDrMR6ye OJTZC2DGYRIE5NuBf3UozAzWT3Saqps7928IzILeINHnN3Cu4H5CNRVi0so= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:29 2024 by rpki-client on console-ams.rpki-client.org