$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer File: KY7S_WrVxbVoffYUonXC_ISNTpQ.cer (raw, json) Hash identifier: 5/fYSKvF9Aok17QGRjFpcqQ/uAukNyThIMmVXg6/hLM= Subject key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2ECF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:32 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.159.206.0/23 IP: 2406:db40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11983 (0x2ecf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:d2:2e:0c:54:e7:df:51:36:82:19:89:df: e1:06:33:ca:4c:e8:ed:76:26:c9:eb:2c:06:17:d0: 05:26:8d:e2:22:3a:94:3b:12:a5:3b:b4:86:d7:ad: 1d:0a:26:22:2c:04:ee:b0:21:b8:b6:97:ca:91:a9: 15:74:6c:1d:d8:c2:65:09:78:83:8d:99:26:6a:2b: 8e:3f:95:37:71:f3:20:f9:9e:73:77:05:2e:d8:f2: 2e:81:91:9f:c1:8a:a5:ad:6c:40:02:3c:a7:18:a1: 13:44:8f:a3:33:e5:ce:aa:ca:6a:02:5d:e4:39:bc: 3a:0f:89:3c:3f:82:2d:85:88:ef:51:9b:b7:2a:a5: d8:2e:8b:f7:79:49:71:e6:e4:ba:c4:24:1e:ec:ad: 6b:d9:4f:83:34:a4:7a:e7:ce:57:0b:cd:8c:0c:f9: 5e:e4:9f:8d:b4:b2:ad:05:65:c8:34:1e:d7:e8:92: b9:87:7b:68:07:f0:87:d4:ba:d6:45:91:d1:23:95: c9:56:c3:75:5e:01:20:f7:a1:8a:b1:15:55:a5:13: 59:35:64:3f:a0:87:56:14:b3:53:3a:c6:cc:12:66: ab:09:84:42:18:94:55:de:98:4d:4d:bc:25:a4:fb: a6:25:58:90:65:5b:5f:69:62:8d:bf:11:1c:b8:0e: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.206.0/23 IPv6: 2406:db40::/32 Signature Algorithm: sha256WithRSAEncryption 06:9f:37:03:c9:5a:4f:77:91:a7:f5:cb:36:b2:cc:be:d2:39: f5:0c:8e:46:9f:02:80:23:1b:4f:96:20:74:4d:7a:2a:81:b4: 2b:a9:c5:03:b8:2b:62:27:56:61:1f:57:ab:5e:78:c9:e9:13: d6:12:de:4a:0c:53:94:a0:f4:b0:a0:64:d6:f3:df:af:e9:e6: 21:9c:84:37:be:49:33:45:f2:4f:68:f8:b5:95:ae:69:50:1a: a9:7b:ce:5c:a0:24:0b:8a:c0:eb:78:1d:24:c9:6e:e3:8f:0c: 16:bf:47:3f:09:c0:6d:23:45:66:14:67:aa:96:e1:fb:70:12: fa:22:90:2a:da:dd:13:f7:3d:e2:d0:92:da:3a:19:83:cc:1c: 94:15:a2:ba:b0:a5:b5:55:82:14:7d:18:23:4f:f9:10:04:53: f5:5f:c5:4c:9d:13:71:c4:ce:fa:ad:81:a8:5b:5b:99:9c:2a: 6e:25:e7:4b:24:0a:b7:08:56:33:41:ef:a1:d4:69:5f:b1:61: d9:d5:b8:a9:0e:f8:6e:f0:09:c9:9c:53:d0:26:a6:59:8a:f9: c9:af:ac:6e:69:48:88:5e:2b:d5:34:ed:72:a5:80:bf:f9:d3: 73:83:8a:00:e5:60:32:7c:28:f2:4f:02:43:fb:a7:86:c2:6c: 15:29:21:35 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICLs8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMjk4RUQyRkQ2QUQ1QzVCNTY4N0RGNjE0QTI3NUMyRkM4NDhENEU5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN1e0i4MVOffUTaCGYnf 4QYzykzo7XYmyessBhfQBSaN4iI6lDsSpTu0htetHQomIiwE7rAhuLaXypGpFXRs HdjCZQl4g42ZJmorjj+VN3HzIPmec3cFLtjyLoGRn8GKpa1sQAI8pxihE0SPozPl zqrKagJd5Dm8Og+JPD+CLYWI71Gbtyql2C6L93lJcebkusQkHuyta9lPgzSkeufO VwvNjAz5XuSfjbSyrQVlyDQe1+iSuYd7aAfwh9S61kWR0SOVyVbDdV4BIPehirEV VaUTWTVkP6CHVhSzUzrGzBJmqwmEQhiUVd6YTU28JaT7piVYkGVbX2lijb8RHLgO GpUCAwEAAaOCAlswggJXMB0GA1UdDgQWBBQpjtL9atXFtWh99hSidcL8hI1OlDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFROUy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9U VE5TL0tZN1NfV3JWeGJWb2ZmWVVvblhDX0lTTlRwUS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnn84wDQQCAAIwBwMFACQG20AwDQYJKoZIhvcN AQELBQADggEBAAafNwPJWk93kaf1yzayzL7SOfUMjkafAoAjG0+WIHRNeiqBtCup xQO4K2InVmEfV6teeMnpE9YS3koMU5Sg9LCgZNbz36/p5iGchDe+STNF8k9o+LWV rmlQGql7zlygJAuKwOt4HSTJbuOPDBa/Rz8JwG0jRWYUZ6qW4ftwEvoikCra3RP3 PeLQkto6GYPMHJQVorqwpbVVghR9GCNP+RAEU/VfxUydE3HEzvqtgahbW5mcKm4l 50skCrcIVjNB76HUaV+xYdnVuKkO+G7wCcmcU9AmplmK+cmvrG5pSIheK9U07XKl gL/503ODigDlYDJ8KPJPAkP7p4bCbBUpITU= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:34 2024 by rpki-client on console-ams.rpki-client.org