$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer (raw, json) Hash identifier: gXkKhtWkaq9XGzfdG0BpFq52ENBtzOXeNGgnII/2FGU= Subject key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:33 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 202.5.12.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10594 (0x2962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:ed:f2:f4:a6:b4:3a:ff:16:52:0c:22:75: 65:fa:ad:b9:7f:21:d5:db:66:7e:4e:62:0a:d2:0e: af:dd:92:17:24:7f:a1:9b:d3:de:a7:cf:04:f8:10: ce:ce:19:11:3f:72:be:24:2c:f7:0c:76:a1:78:bf: 2e:01:d4:f4:c2:87:22:c0:50:ab:43:bf:67:76:87: df:e0:aa:67:af:f8:cf:0c:c6:1d:7e:21:50:09:05: 9f:11:ce:9e:a1:c7:02:43:a5:42:69:bd:1c:eb:d7: b9:fe:0d:d0:2c:4e:64:2d:c9:1e:ae:12:7e:73:00: ba:a8:fc:5f:78:38:eb:69:3e:b5:13:92:ef:1f:4d: 62:fd:58:f0:51:01:72:58:7f:00:e9:fb:1f:75:bb: 77:4b:27:ad:5a:01:c4:ec:06:a0:50:ec:c5:a0:84: 2b:95:e0:37:7a:c6:95:55:cc:ab:96:df:b0:e8:44: 97:f7:3a:7a:3c:83:ea:31:c6:8c:cf:6c:8d:ee:9e: 54:63:e6:10:b6:a3:a7:e0:41:0a:10:de:44:86:42: 47:88:6b:81:c0:82:3d:8b:6a:50:47:24:aa:2c:44: da:ca:15:52:36:05:99:41:68:06:9a:2c:4e:7d:25: 76:02:7d:d2:ec:47:1b:d6:ce:2f:c1:19:36:4e:e6: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.5.12.0/22 Signature Algorithm: sha256WithRSAEncryption 81:f8:c4:a5:54:ee:bb:45:a0:3f:84:7a:e9:d0:50:06:6b:22: 49:47:62:f3:94:89:06:3d:7e:03:06:97:0b:a0:cb:1c:10:27: 71:89:e3:66:5a:e7:10:f9:2a:28:4a:36:8c:6d:65:62:ff:31: f0:2a:f4:eb:87:cc:d4:21:5d:cd:a5:9d:d8:d0:76:7d:e7:88: c6:dc:7a:f6:ba:a3:b7:a9:51:c8:71:df:de:89:5c:5d:1d:e4: 0f:40:14:da:95:d8:07:7b:56:91:6a:d6:ac:e3:92:26:a6:67: 69:d8:60:42:12:20:a3:a2:47:b7:2e:ea:54:7d:c1:e9:e6:8f: c3:05:b5:19:0e:eb:6d:f6:b6:55:03:d8:5d:7a:af:07:02:ac: d0:d3:9c:ba:02:77:4c:23:3e:bb:74:a1:5e:22:8b:13:e7:a1: af:d8:db:cb:ff:1d:7f:66:d8:a8:ac:bc:28:10:b8:e9:d6:b8: be:96:1f:9c:9e:33:6d:d5:1c:ac:4e:3c:80:66:ee:2a:59:0d: dc:02:80:bb:fb:de:d1:64:c2:10:94:08:40:50:d4:ac:c3:2f: 63:60:05:83:5e:35:e2:c2:0f:c2:3d:f3:07:91:48:55:b4:4d: a9:f6:c8:8f:c8:9f:b9:b0:27:20:a0:91:c1:10:ab:33:07:96: be:ca:12:6a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICKWIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEzM1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoM0I0OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMx7fL0prQ6/xZSDCJ1 ZfqtuX8h1dtmfk5iCtIOr92SFyR/oZvT3qfPBPgQzs4ZET9yviQs9wx2oXi/LgHU 9MKHIsBQq0O/Z3aH3+CqZ6/4zwzGHX4hUAkFnxHOnqHHAkOlQmm9HOvXuf4N0CxO ZC3JHq4SfnMAuqj8X3g462k+tROS7x9NYv1Y8FEBclh/AOn7H3W7d0snrVoBxOwG oFDsxaCEK5XgN3rGlVXMq5bfsOhEl/c6ejyD6jHGjM9sje6eVGPmELajp+BBChDe RIZCR4hrgcCCPYtqUEckqixE2soVUjYFmUFoBposTn0ldgJ90uxHG9bOL8EZNk7m ENUCAwEAAaOCAk4wggJKMB0GA1UdDgQWBBQ7Sbh6P/OJY0x9CQ122uqpb+79kDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TkNSRUUvTzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsoFDDANBgkqhkiG9w0BAQsFAAOCAQEAgfjE pVTuu0WgP4R66dBQBmsiSUdi85SJBj1+AwaXC6DLHBAncYnjZlrnEPkqKEo2jG1l Yv8x8Cr064fM1CFdzaWd2NB2feeIxtx69rqjt6lRyHHf3olcXR3kD0AU2pXYB3tW kWrWrOOSJqZnadhgQhIgo6JHty7qVH3B6eaPwwW1GQ7rbfa2VQPYXXqvBwKs0NOc ugJ3TCM+u3ShXiKLE+ehr9jby/8df2bYqKy8KBC46da4vpYfnJ4zbdUcrE48gGbu KlkN3AKAu/ve0WTCEJQIQFDUrMMvY2AFg1414sIPwj3zB5FIVbRNqfbIj8ifubAn IKCRwRCrMweWvsoSag== -----END CERTIFICATE-----Generated at Tue May 21 08:01:35 2024 by rpki-client on console-fra.rpki-client.org