$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer File: IKzKhxhQA3Ov93tBSyPcal8UdO4.cer (raw, json) Hash identifier: d1xJyFv1HdE1PYPlToEFMyl6iHbA7VWTxLgjD4arSIg= Subject key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1743 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 17 Oct 2024 03:15:42 +0000 Certificate not after: Wed 15 Oct 2025 15:30:20 +0000 Subordinate resources: IP: 160.191.8.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5955 (0x1743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Oct 17 03:15:42 2024 GMT Not After : Oct 15 15:30:20 2025 GMT Subject: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:2d:51:d3:88:62:7b:d9:0c:39:5f:b0:54: 57:6d:5c:db:b7:b0:d6:d8:bb:6d:5e:6f:7e:3a:a4: 2d:f8:02:09:f4:cc:b9:51:4f:72:99:2c:ea:14:cc: 1b:ef:40:67:fa:66:65:b8:75:c4:ae:db:93:93:36: e5:33:6c:7a:fa:82:f6:1b:09:51:8a:b6:ee:d7:d2: f0:50:eb:ac:9c:83:3b:53:35:86:89:ce:50:ee:ff: aa:d5:0c:ec:6a:f0:e4:a0:ce:5a:c9:89:06:af:06: 07:c5:ff:4e:6e:a3:27:d1:c7:2d:f6:aa:47:19:6a: 4f:54:1b:c0:fa:60:43:a8:72:9e:c0:c4:c2:23:7b: 02:43:b8:48:81:7f:b9:a8:36:a5:b9:b1:b8:c2:35: e1:28:8b:88:0b:9e:a1:6e:79:d8:ad:eb:e7:25:6f: 8c:ff:19:e3:c2:03:00:11:a5:47:27:ab:87:c7:46: a0:a4:1c:f2:3e:41:ab:81:62:b0:d2:c3:80:32:a9: e6:1a:2b:fb:7a:58:0a:ba:73:9e:88:34:7b:2b:5f: 9e:0e:f8:42:28:f6:f8:3f:29:28:ba:17:51:56:29: 06:f6:dd:d8:3a:73:85:a3:a4:98:b7:3a:6e:53:c4: 1b:94:c5:b9:70:ca:b4:af:d9:e8:e4:b1:5c:85:19: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.8.0/23 Signature Algorithm: sha256WithRSAEncryption c4:6b:e9:b5:b9:07:b1:b0:ca:43:c9:25:e0:59:b3:0b:e0:8f: 54:6e:fe:38:c9:41:c7:20:2f:df:62:61:0a:10:81:c1:51:fd: b1:e8:21:34:5f:32:c5:a5:c4:87:ee:cc:35:59:4d:70:4a:2f: 24:3a:4b:4f:bd:7b:82:65:45:2b:5a:36:46:d8:63:9d:94:fb: 2b:05:66:7e:e6:10:47:c7:02:a3:27:d5:b5:60:ae:dc:6e:05: 74:ec:ff:12:ba:54:ab:c8:a8:c9:ae:ff:f6:2d:eb:32:f9:46: 14:4d:e5:a4:7a:63:51:54:b0:06:e1:4b:c9:19:d0:8b:1d:ae: a7:b1:1a:91:d1:58:ef:4f:05:f4:ef:be:8b:c1:b8:9e:03:4e: ee:15:b6:fa:f7:1d:08:fa:e8:5f:b8:61:a4:35:0f:f0:e2:e5: 12:3f:b4:87:6f:66:83:aa:74:1b:df:7a:64:17:02:70:cc:18: 30:5a:63:7b:f9:2c:30:b3:0a:61:cb:1d:db:5a:5a:4d:2b:0e: 7a:ab:93:ba:fa:f3:32:9d:81:ff:4c:f4:aa:d9:a1:69:38:fe: 7a:1f:0c:12:a4:22:a5:c7:6b:61:fa:8b:38:b9:b9:0f:0b:ce: ca:e9:9d:2a:2f:60:f9:f3:83:a7:42:eb:19:4f:e4:e4:2c:00: 27:47:5d:57 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICF0MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MTAxNzAzMTU0MloXDTI1MTAxNTE1MzAyMFowMzEx MC8GA1UEAxMoMjBBQ0NBODcxODUwMDM3M0FGRjc3QjQxNEIyM0RDNkE1RjE0NzRF RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbYLVHTiGJ72Qw5X7BU V21c27ew1ti7bV5vfjqkLfgCCfTMuVFPcpks6hTMG+9AZ/pmZbh1xK7bk5M25TNs evqC9hsJUYq27tfS8FDrrJyDO1M1honOUO7/qtUM7Grw5KDOWsmJBq8GB8X/Tm6j J9HHLfaqRxlqT1QbwPpgQ6hynsDEwiN7AkO4SIF/uag2pbmxuMI14SiLiAueoW55 2K3r5yVvjP8Z48IDABGlRyerh8dGoKQc8j5Bq4FisNLDgDKp5hor+3pYCrpznog0 eytfng74Qij2+D8pKLoXUVYpBvbd2DpzhaOkmLc6blPEG5TFuXDKtK/Z6OSxXIUZ LpsCAwEAAaOCAlAwggJMMB0GA1UdDgQWBBQgrMqHGFADc6/3e0FLI9xqXxR07jAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERELzBX BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0NBVEhERC9JS3pLaHhoUUEzT3Y5M3RCU3lQY2FsOFVkTzQubWZ0MDEGCCsGAQUF BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoL8IMA0GCSqGSIb3DQEBCwUAA4IBAQDE a+m1uQexsMpDySXgWbML4I9Ubv44yUHHIC/fYmEKEIHBUf2x6CE0XzLFpcSH7sw1 WU1wSi8kOktPvXuCZUUrWjZG2GOdlPsrBWZ+5hBHxwKjJ9W1YK7cbgV07P8SulSr yKjJrv/2Lesy+UYUTeWkemNRVLAG4UvJGdCLHa6nsRqR0VjvTwX0776LwbieA07u Fbb69x0I+uhfuGGkNQ/w4uUSP7SHb2aDqnQb33pkFwJwzBgwWmN7+Swwswphyx3b WlpNKw56q5O6+vMynYH/TPSq2aFpOP56HwwSpCKlx2th+os4ubkPC87K6Z0qL2D5 84OnQusZT+TkLAAnR11X -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:59 2024 by rpki-client on console-fra.rpki-client.org