$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer File: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (raw, json) Hash identifier: iXU4XXzGBdFRHEDSe5df89gXym9whhcj27zSqAJswzI= Subject key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1607 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:32 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 64.78.160.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5639 (0x1607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 26 01:57:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:f1:b8:2d:ca:d3:63:08:2b:e4:0f:82:12: fe:c1:1c:8e:b5:21:63:8c:1f:64:ab:77:95:70:ae: ba:24:06:0f:77:bd:cb:89:75:4e:ac:fc:75:1e:65: 3a:13:32:85:3c:59:fe:68:7e:d7:05:83:d4:ea:48: 3b:01:8f:8b:12:db:24:40:35:ac:da:b9:fb:61:16: 18:fd:66:cf:0f:c3:e1:76:93:cf:bd:63:f6:16:c2: 64:b7:90:cc:0b:51:3e:7c:b7:4c:83:5a:9c:36:9e: 0a:bf:5e:ae:8d:79:01:a4:d1:09:76:81:1b:bf:9c: d6:7c:56:df:52:fe:0d:8b:36:28:f6:05:61:9e:e2: 70:6e:df:11:7d:36:d5:ce:4b:89:e4:ae:49:15:01: f7:56:99:83:02:43:90:ef:46:3b:95:08:54:ea:f7: 4c:61:96:c9:b1:b5:45:e6:9b:9f:db:b0:40:22:b9: fc:b6:3b:12:d0:2f:f5:11:d6:af:79:d4:b1:85:71: 53:ae:d0:3f:1e:69:ff:bc:5b:80:c7:9c:a5:1b:53: 27:af:76:1b:b6:68:7e:04:85:72:18:65:fb:2b:8a: db:34:d4:00:ec:75:4c:6f:72:1f:d8:dd:2e:43:a3: 3b:67:f9:7a:6b:11:27:ba:a4:12:d1:04:ca:9c:64: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 64.78.160.0/20 Signature Algorithm: sha256WithRSAEncryption a9:6f:a9:7c:2f:84:a8:a3:46:7c:e5:63:40:88:49:12:6d:e0: 49:1d:2c:4e:69:83:da:e7:bf:ba:c8:ff:75:a0:30:49:c5:bc: 15:9e:cd:6a:ee:77:12:81:67:75:c3:6d:9a:b2:eb:22:30:32: 29:57:0c:a5:4a:f8:69:c2:aa:7b:0b:74:75:7f:83:95:7b:3a: 60:83:1f:6f:72:3f:83:05:3a:fe:4d:a6:2c:f3:f9:fc:dc:14: 69:b2:54:d3:48:91:7b:74:ba:01:9d:22:7f:ee:dd:f8:f1:9c: b5:d6:25:a4:d1:eb:f8:5d:57:46:ef:e3:2e:0e:8b:fd:6e:0c: bc:4a:06:35:d9:fb:d0:0e:36:12:bc:8e:57:6e:b7:04:7b:e4: 2b:00:83:a1:9f:c2:b6:2b:ab:9b:96:01:5a:ea:3f:97:fb:ca: 33:85:56:03:65:aa:0c:52:3a:3e:df:1e:a7:fc:58:85:05:b4: 99:23:e0:7d:90:f5:f1:69:3f:41:55:1a:61:bc:e3:8b:4a:54: 97:2e:37:c0:1d:9b:96:e1:fa:c9:70:5b:f6:2b:83:07:ff:1a: 88:ec:cd:c3:00:bb:b9:d0:1f:51:5b:69:01:84:e3:bb:22:14: ae:8f:38:8b:05:89:ff:08:2a:92:99:18:34:eb:2c:3d:b3:b3: 84:f6:ff:db -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICFgcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyNjAxNTczMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoMzczMEQ5QTE5NUFCNzEwMjg2NzIyQ0U1Q0NBNDY3Q0ZCQTVCRDQ5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQY8bgtytNjCCvkD4IS /sEcjrUhY4wfZKt3lXCuuiQGD3e9y4l1Tqz8dR5lOhMyhTxZ/mh+1wWD1OpIOwGP ixLbJEA1rNq5+2EWGP1mzw/D4XaTz71j9hbCZLeQzAtRPny3TINanDaeCr9ero15 AaTRCXaBG7+c1nxW31L+DYs2KPYFYZ7icG7fEX021c5LieSuSRUB91aZgwJDkO9G O5UIVOr3TGGWybG1Reabn9uwQCK5/LY7EtAv9RHWr3nUsYVxU67QPx5p/7xbgMec pRtTJ692G7ZofgSFchhl+yuK2zTUAOx1TG9yH9jdLkOjO2f5emsRJ7qkEtEEypxk EmUCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBQ3MNmhlatxAoZyLOXMpGfPulvUlDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09N LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL05JTUJVU0NPTS9OekRab1pXcmNRS0djaXpsektSbno3cGIxSlEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQE6gMA0GCSqGSIb3DQEBCwUA A4IBAQCpb6l8L4Soo0Z85WNAiEkSbeBJHSxOaYPa57+6yP91oDBJxbwVns1q7ncS gWd1w22asusiMDIpVwylSvhpwqp7C3R1f4OVezpggx9vcj+DBTr+TaYs8/n83BRp slTTSJF7dLoBnSJ/7t348Zy11iWk0ev4XVdG7+MuDov9bgy8SgY12fvQDjYSvI5X brcEe+QrAIOhn8K2K6ublgFa6j+X+8ozhVYDZaoMUjo+3x6n/FiFBbSZI+B9kPXx aT9BVRphvOOLSlSXLjfAHZuW4frJcFv2K4MH/xqI7M3DALu50B9RW2kBhOO7IhSu jziLBYn/CCqSmRg06yw9s7OE9v/b -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:38 2024 by rpki-client on console-ams.rpki-client.org