$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer File: H4d5g1J0cOIA1a4GoBWIITVV_uY.cer (raw, json) Hash identifier: W0HBTR/YoC/2RtCk8kuA8vQmaxqhlJVN1pvu5QhRoew= Subject key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2E79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:28 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.14.170.0/23 IP: 2400:b0a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11897 (0x2e79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1F877983527470E200D5AE06A01588213555FEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:12:0f:bb:da:0b:4b:c0:00:e1:59:f4:58: 31:ba:d6:cb:65:14:08:cd:ec:3d:16:6a:2d:2c:35: 5c:fb:f1:14:c8:f6:57:98:2a:43:a5:ea:1b:39:39: 7d:6a:a5:d6:56:7e:68:0b:8d:1e:37:cf:72:58:e4: 5b:7b:3f:41:bf:5f:1f:f9:c6:e1:cf:62:32:14:0e: 9f:b8:99:04:16:9c:6b:2a:99:dd:0e:8a:d7:7d:13: 9d:cb:d6:3b:09:49:2e:d8:fe:38:5c:53:84:53:0e: 6f:b1:e0:db:33:1c:9b:45:9a:b3:95:3a:74:12:f8: eb:60:9b:45:8b:69:7d:47:01:a5:e0:a4:81:35:74: a3:7c:0c:a0:06:fa:6b:d4:de:3d:99:2f:e6:50:40: d0:7f:0a:52:15:30:76:ee:65:5b:c1:66:09:11:5c: ea:ad:30:3f:a0:8e:25:6e:5b:9c:95:b9:95:73:88: ca:cd:66:9c:2d:76:7c:e3:9f:51:09:56:f5:7e:80: 93:51:83:5b:8c:8c:a5:c8:9c:cf:c4:77:88:df:6c: f5:af:48:d4:e0:02:8e:8b:8b:88:21:72:ff:87:2e: 25:03:18:06:9d:fd:60:ae:73:94:c8:ac:e1:66:4f: de:4f:02:c8:a5:77:fa:76:07:59:54:88:11:11:3b: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.14.170.0/23 IPv6: 2400:b0a0::/32 Signature Algorithm: sha256WithRSAEncryption 75:db:f4:cc:0d:8d:b1:70:fe:e5:34:a4:e7:34:bf:41:8b:31: e8:a5:65:e6:16:69:21:7e:e4:b0:fa:34:35:8f:16:64:4e:c3: 41:0d:7f:19:ad:13:ae:80:b3:c0:64:76:03:84:d8:25:b1:69: de:45:11:cf:ce:db:42:b5:8e:a5:4a:5a:2f:cd:ef:bd:3f:e1: 36:39:e4:ae:b2:07:bc:0f:0c:6f:8d:4f:19:25:6a:d5:67:1b: b4:d9:6d:c2:11:69:5b:50:16:96:9f:35:9c:2c:90:06:43:59: 5b:bd:06:44:77:8f:e7:d7:a1:5d:73:3a:e7:b2:54:1e:37:e5: 28:fe:40:f9:db:ee:91:37:d9:db:1e:2b:04:99:05:8e:47:55: 3f:93:08:a5:9b:e4:e8:0a:b9:52:04:af:a3:f3:bf:00:f3:6a: 64:60:41:11:23:98:b8:ba:db:30:60:16:34:50:10:45:19:4d: 82:1c:6f:a7:9f:4b:b1:78:41:3b:38:b5:66:48:36:c7:30:8c: 8e:89:23:3f:79:30:c2:d2:b4:2e:53:90:93:67:f2:03:66:1d: 1f:10:2c:de:30:b1:93:ef:6e:f8:9e:4b:8c:24:29:e6:08:8d: eb:af:e4:d1:9f:9b:82:99:7b:45:87:89:12:b8:81:60:99:b1: 1b:e3:6c:1d -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICLnkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcyOFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMUY4Nzc5ODM1Mjc0NzBFMjAwRDVBRTA2QTAxNTg4MjEzNTU1RkVF NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJavEg+72gtLwADhWfRY MbrWy2UUCM3sPRZqLSw1XPvxFMj2V5gqQ6XqGzk5fWql1lZ+aAuNHjfPcljkW3s/ Qb9fH/nG4c9iMhQOn7iZBBacayqZ3Q6K130TncvWOwlJLtj+OFxThFMOb7Hg2zMc m0Was5U6dBL462CbRYtpfUcBpeCkgTV0o3wMoAb6a9TePZkv5lBA0H8KUhUwdu5l W8FmCRFc6q0wP6COJW5bnJW5lXOIys1mnC12fOOfUQlW9X6Ak1GDW4yMpcicz8R3 iN9s9a9I1OACjouLiCFy/4cuJQMYBp39YK5zlMis4WZP3k8CyKV3+nYHWVSIERE7 H9ECAwEAAaOCAl0wggJZMB0GA1UdDgQWBBQfh3mDUnRw4gDVrgagFYghNVX+5jAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1BTWVMvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Q1BTWVMvSDRkNWcxSjBjT0lBMWE0R29CV0lJVFZWX3VZLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAuBggrBgEF BQcBBwEB/wQfMB0wDAQCAAEwBgMEAWcOqjANBAIAAjAHAwUAJACwoDANBgkqhkiG 9w0BAQsFAAOCAQEAddv0zA2NsXD+5TSk5zS/QYsx6KVl5hZpIX7ksPo0NY8WZE7D QQ1/Ga0TroCzwGR2A4TYJbFp3kURz87bQrWOpUpaL83vvT/hNjnkrrIHvA8Mb41P GSVq1WcbtNltwhFpW1AWlp81nCyQBkNZW70GRHeP59ehXXM657JUHjflKP5A+dvu kTfZ2x4rBJkFjkdVP5MIpZvk6Aq5UgSvo/O/APNqZGBBESOYuLrbMGAWNFAQRRlN ghxvp59LsXhBOzi1Zkg2xzCMjokjP3kwwtK0LlOQk2fyA2YdHxAs3jCxk+9u+J5L jCQp5giN66/k0Z+bgpl7RYeJEriBYJmxG+NsHQ== -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:32 2024 by rpki-client on console-ams.rpki-client.org