$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer File: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (raw, json) Hash identifier: FiV7Ei+lt+ybn751+3O3q4ssu5PJT+1hnMA7AuHG10g= Subject key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 145A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Wed 13 Dec 2023 04:00:32 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 64.78.160.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 05:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5210 (0x145a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Dec 13 04:00:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:f1:b8:2d:ca:d3:63:08:2b:e4:0f:82:12: fe:c1:1c:8e:b5:21:63:8c:1f:64:ab:77:95:70:ae: ba:24:06:0f:77:bd:cb:89:75:4e:ac:fc:75:1e:65: 3a:13:32:85:3c:59:fe:68:7e:d7:05:83:d4:ea:48: 3b:01:8f:8b:12:db:24:40:35:ac:da:b9:fb:61:16: 18:fd:66:cf:0f:c3:e1:76:93:cf:bd:63:f6:16:c2: 64:b7:90:cc:0b:51:3e:7c:b7:4c:83:5a:9c:36:9e: 0a:bf:5e:ae:8d:79:01:a4:d1:09:76:81:1b:bf:9c: d6:7c:56:df:52:fe:0d:8b:36:28:f6:05:61:9e:e2: 70:6e:df:11:7d:36:d5:ce:4b:89:e4:ae:49:15:01: f7:56:99:83:02:43:90:ef:46:3b:95:08:54:ea:f7: 4c:61:96:c9:b1:b5:45:e6:9b:9f:db:b0:40:22:b9: fc:b6:3b:12:d0:2f:f5:11:d6:af:79:d4:b1:85:71: 53:ae:d0:3f:1e:69:ff:bc:5b:80:c7:9c:a5:1b:53: 27:af:76:1b:b6:68:7e:04:85:72:18:65:fb:2b:8a: db:34:d4:00:ec:75:4c:6f:72:1f:d8:dd:2e:43:a3: 3b:67:f9:7a:6b:11:27:ba:a4:12:d1:04:ca:9c:64: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 64.78.160.0/20 Signature Algorithm: sha256WithRSAEncryption 14:04:a0:ad:ef:20:b9:8c:6c:f7:db:39:80:30:da:4a:e8:e1: 34:9b:d7:56:5e:b3:8c:b2:af:67:50:18:24:91:20:4b:02:8c: b7:57:a3:db:f9:e2:b2:c2:3e:fb:57:f8:e0:c5:2a:a2:a2:02: f3:d5:88:d0:c1:7b:40:42:e0:62:8b:4b:f8:3d:c9:a7:87:83: fd:ab:b2:bc:92:76:c0:f4:25:00:65:d5:99:1a:0d:a6:4e:00: 63:bc:19:ba:35:78:47:a0:dc:de:b6:5a:02:73:e3:19:36:c1: a3:12:90:a3:e0:74:32:19:e6:bc:9f:df:87:c5:a4:d6:ea:bc: 67:62:35:b9:a2:6e:8f:de:e3:45:22:fd:36:47:2c:e5:6c:1d: 45:bc:71:3d:63:27:a9:9b:61:87:44:a3:84:72:1e:fb:e1:48: 9b:c4:1b:c3:86:c1:51:80:1a:20:fc:26:84:d5:09:69:a4:48: 3a:08:a1:f1:2e:aa:88:bc:ea:d0:5b:ff:81:cf:e5:84:76:87: d6:ce:3d:34:5f:6e:41:b3:a2:aa:2e:7c:c8:5b:28:f2:67:eb: 39:8c:93:26:85:f9:07:0a:0d:42:3b:aa:38:b2:2b:82:40:de: 86:3b:28:07:f7:d6:4c:37:a3:65:20:4c:8c:ca:9d:9a:d9:90: 79:e9:27:cd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICFFowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTIzMTIxMzA0MDAzMloXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoMzczMEQ5QTE5NUFCNzEwMjg2NzIyQ0U1Q0NBNDY3Q0ZCQTVCRDQ5 NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANQY8bgtytNjCCvkD4IS /sEcjrUhY4wfZKt3lXCuuiQGD3e9y4l1Tqz8dR5lOhMyhTxZ/mh+1wWD1OpIOwGP ixLbJEA1rNq5+2EWGP1mzw/D4XaTz71j9hbCZLeQzAtRPny3TINanDaeCr9ero15 AaTRCXaBG7+c1nxW31L+DYs2KPYFYZ7icG7fEX021c5LieSuSRUB91aZgwJDkO9G O5UIVOr3TGGWybG1Reabn9uwQCK5/LY7EtAv9RHWr3nUsYVxU67QPx5p/7xbgMec pRtTJ692G7ZofgSFchhl+yuK2zTUAOx1TG9yH9jdLkOjO2f5emsRJ7qkEtEEypxk EmUCAwEAAaOCAlYwggJSMB0GA1UdDgQWBBQ3MNmhlatxAoZyLOXMpGfPulvUlDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09N LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL05JTUJVU0NPTS9OekRab1pXcmNRS0djaXpsektSbno3cGIxSlEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQE6gMA0GCSqGSIb3DQEBCwUA A4IBAQAUBKCt7yC5jGz32zmAMNpK6OE0m9dWXrOMsq9nUBgkkSBLAoy3V6Pb+eKy wj77V/jgxSqiogLz1YjQwXtAQuBii0v4Pcmnh4P9q7K8knbA9CUAZdWZGg2mTgBj vBm6NXhHoNzetloCc+MZNsGjEpCj4HQyGea8n9+HxaTW6rxnYjW5om6P3uNFIv02 RyzlbB1FvHE9Yyepm2GHRKOEch774UibxBvDhsFRgBog/CaE1QlppEg6CKHxLqqI vOrQW/+Bz+WEdofWzj00X25Bs6KqLnzIWyjyZ+s5jJMmhfkHCg1CO6o4siuCQN6G OygH99ZMN6NlIEyMyp2a2ZB56SfN -----END CERTIFICATE-----Generated at Tue May 21 06:28:45 2024 by rpki-client on console-ams.rpki-client.org