$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer File: KY7S_WrVxbVoffYUonXC_ISNTpQ.cer (raw, json) Hash identifier: P3+Uh89sNyieP8faj0A+VyAKotnxgPP+w5xr9wV/TCE= Subject key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 28B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:23 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.159.206.0/23 IP: 2406:db40::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10418 (0x28b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5e:d2:2e:0c:54:e7:df:51:36:82:19:89:df: e1:06:33:ca:4c:e8:ed:76:26:c9:eb:2c:06:17:d0: 05:26:8d:e2:22:3a:94:3b:12:a5:3b:b4:86:d7:ad: 1d:0a:26:22:2c:04:ee:b0:21:b8:b6:97:ca:91:a9: 15:74:6c:1d:d8:c2:65:09:78:83:8d:99:26:6a:2b: 8e:3f:95:37:71:f3:20:f9:9e:73:77:05:2e:d8:f2: 2e:81:91:9f:c1:8a:a5:ad:6c:40:02:3c:a7:18:a1: 13:44:8f:a3:33:e5:ce:aa:ca:6a:02:5d:e4:39:bc: 3a:0f:89:3c:3f:82:2d:85:88:ef:51:9b:b7:2a:a5: d8:2e:8b:f7:79:49:71:e6:e4:ba:c4:24:1e:ec:ad: 6b:d9:4f:83:34:a4:7a:e7:ce:57:0b:cd:8c:0c:f9: 5e:e4:9f:8d:b4:b2:ad:05:65:c8:34:1e:d7:e8:92: b9:87:7b:68:07:f0:87:d4:ba:d6:45:91:d1:23:95: c9:56:c3:75:5e:01:20:f7:a1:8a:b1:15:55:a5:13: 59:35:64:3f:a0:87:56:14:b3:53:3a:c6:cc:12:66: ab:09:84:42:18:94:55:de:98:4d:4d:bc:25:a4:fb: a6:25:58:90:65:5b:5f:69:62:8d:bf:11:1c:b8:0e: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.206.0/23 IPv6: 2406:db40::/32 Signature Algorithm: sha256WithRSAEncryption 81:26:13:3f:4e:fd:bd:85:b6:ff:3d:a2:c9:49:6c:02:39:3c: ec:d7:5f:31:87:43:b5:8b:9e:78:e1:91:ad:29:bd:d1:a7:33: 6e:74:ee:c5:37:eb:9c:b6:07:4c:3e:a4:cf:d3:40:3a:9c:fe: bc:a1:6a:23:6a:ca:ba:c0:d7:55:9d:59:f5:a2:f0:8a:a8:54: b2:5a:47:e7:de:85:ac:d5:a4:95:a3:48:88:da:d2:0b:5d:fe: 98:ac:93:39:1e:eb:aa:86:c3:b3:3c:17:7d:49:ae:ae:fb:8a: 9e:3c:76:df:84:d9:2c:29:4f:70:66:af:ec:c6:cc:20:ab:58: 9b:21:2d:b0:a0:5b:81:a3:5c:fd:2d:13:d6:9b:a9:5d:93:18: ed:43:3e:c4:5a:fa:04:89:2e:ef:cc:2b:76:ae:d0:ee:7e:c0: 66:a1:82:58:39:83:2c:2d:4d:b4:f4:6e:c0:76:67:3c:6e:ae: b9:bd:5f:ab:5b:a5:68:52:03:48:ac:60:b3:f3:eb:3d:06:45: 47:49:bb:dc:2f:f9:32:16:56:7e:25:3f:a7:95:ad:05:df:94: a4:df:73:23:7f:59:b1:cf:df:c6:a8:bd:0d:50:17:ca:55:68: c8:5b:0f:6e:d3:49:a2:4a:4c:d1:b9:f8:fa:c5:c6:98:ba:ef: a5:bd:28:36 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICKLIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyM1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMjk4RUQyRkQ2QUQ1QzVCNTY4N0RGNjE0QTI3NUMyRkM4NDhENEU5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN1e0i4MVOffUTaCGYnf 4QYzykzo7XYmyessBhfQBSaN4iI6lDsSpTu0htetHQomIiwE7rAhuLaXypGpFXRs HdjCZQl4g42ZJmorjj+VN3HzIPmec3cFLtjyLoGRn8GKpa1sQAI8pxihE0SPozPl zqrKagJd5Dm8Og+JPD+CLYWI71Gbtyql2C6L93lJcebkusQkHuyta9lPgzSkeufO VwvNjAz5XuSfjbSyrQVlyDQe1+iSuYd7aAfwh9S61kWR0SOVyVbDdV4BIPehirEV VaUTWTVkP6CHVhSzUzrGzBJmqwmEQhiUVd6YTU28JaT7piVYkGVbX2lijb8RHLgO GpUCAwEAAaOCAlswggJXMB0GA1UdDgQWBBQpjtL9atXFtWh99hSidcL8hI1OlDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFROUy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9U VE5TL0tZN1NfV3JWeGJWb2ZmWVVvblhDX0lTTlRwUS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnn84wDQQCAAIwBwMFACQG20AwDQYJKoZIhvcN AQELBQADggEBAIEmEz9O/b2Ftv89oslJbAI5POzXXzGHQ7WLnnjhka0pvdGnM250 7sU365y2B0w+pM/TQDqc/ryhaiNqyrrA11WdWfWi8IqoVLJaR+fehazVpJWjSIja 0gtd/piskzke66qGw7M8F31Jrq77ip48dt+E2SwpT3Bmr+zGzCCrWJshLbCgW4Gj XP0tE9abqV2TGO1DPsRa+gSJLu/MK3au0O5+wGahglg5gywtTbT0bsB2Zzxurrm9 X6tbpWhSA0isYLPz6z0GRUdJu9wv+TIWVn4lP6eVrQXflKTfcyN/WbHP38aovQ1Q F8pVaMhbD27TSaJKTNG5+PrFxpi676W9KDY= -----END CERTIFICATE-----Generated at Tue May 21 06:28:43 2024 by rpki-client on console-ams.rpki-client.org