$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ODsu-CC-VSm_ObPEsuq69SNpd4s.cer File: ODsu-CC-VSm_ObPEsuq69SNpd4s.cer (raw, json) Hash identifier: vzJPdUAmZk5iqGNCO5so+ooYDAgQTrHfknFSAJf6Umk= Subject key identifier: 38:3B:2E:F8:20:BE:55:29:BF:39:B3:C4:B2:EA:BA:F5:23:69:77:8B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3065 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ODsu-CC-VSm_ObPEsuq69SNpd4s.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Tue 24 Sep 2024 06:19:46 +0000 Certificate not after: Tue 23 Sep 2025 15:30:20 +0000 Subordinate resources: IP: 2401:c620::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12389 (0x3065) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 24 06:19:46 2024 GMT Not After : Sep 23 15:30:20 2025 GMT Subject: CN=383B2EF820BE5529BF39B3C4B2EABAF52369778B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:87:74:31:36:d2:a3:dd:e1:3b:89:00:05: 2e:94:e4:f6:41:19:94:6d:1a:b2:99:2f:e4:81:2d: 14:49:8d:14:a1:90:74:af:a9:27:66:c7:43:a6:5b: 0e:7d:d8:8d:43:c6:18:ad:af:39:41:01:2b:0a:46: 22:e9:de:3b:96:dc:20:99:d6:95:5d:b8:89:47:f1: d4:ad:42:1b:b6:f5:d3:2e:1c:ae:ba:30:3e:ad:24: 07:a8:eb:f4:80:63:d4:5b:62:a8:5c:22:dc:76:12: 3a:6e:0b:c7:f1:d2:36:ff:b4:4b:8d:a0:c6:65:f8: ac:1f:a3:6d:2a:f8:02:61:24:20:fc:78:8f:c1:0c: 7f:f2:9c:48:5e:3e:e2:93:c6:9b:5f:57:fd:61:7d: b0:af:c8:20:b0:43:cd:53:04:9a:9b:e1:47:fb:16: 23:99:a8:a3:52:4e:b8:3f:7c:83:c4:f6:c0:63:d4: d6:4f:b8:11:90:fb:90:fa:9a:75:7c:9c:f8:a6:82: a6:c0:91:54:29:f9:b2:03:85:8d:72:09:9d:75:e3: f7:44:9e:c2:55:2a:e9:57:f8:37:60:32:af:d0:f1: a2:1f:4f:39:01:a0:67:95:bb:82:ed:b0:48:34:1a: 15:d0:bf:bc:19:e5:68:93:63:40:b1:4f:f0:59:f4: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3B:2E:F8:20:BE:55:29:BF:39:B3:C4:B2:EA:BA:F5:23:69:77:8B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ODsu-CC-VSm_ObPEsuq69SNpd4s.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:c620::/32 Signature Algorithm: sha256WithRSAEncryption 7d:62:28:39:8e:c5:d4:2e:23:ac:4b:a4:eb:b1:43:e4:a1:5d: d7:cb:06:e9:8c:4d:e9:ac:11:b3:68:e3:cc:26:b6:5e:e6:94: dc:4f:be:e0:14:52:86:91:44:2a:bd:54:a3:5e:32:76:1d:f4: 1b:69:d2:fc:18:3f:03:dd:5a:53:f8:2c:61:a5:c6:3d:74:49: e7:12:38:22:f7:8d:fa:a8:5a:3d:f3:90:8e:a3:3e:57:d8:0f: 88:22:80:6f:3b:fa:26:33:7d:b3:01:c8:20:fa:13:58:97:bd: 03:18:dc:bf:00:24:02:91:cb:77:2d:e3:6b:5b:48:81:32:f3: f8:71:e1:6e:15:98:c2:bd:16:d2:05:ba:ae:8a:fc:b0:fd:7f: 2e:87:e3:0d:b7:da:db:6a:c2:7a:8a:58:8c:30:0b:33:fc:79: e0:bb:1a:7c:e2:ab:51:46:bd:fb:6e:ea:30:97:49:a5:08:a9: 3b:4e:d0:18:cc:10:9f:9d:0b:6c:aa:ab:cb:b3:f7:86:b5:75: aa:2d:62:19:7b:77:00:91:eb:78:bd:e4:43:a0:3a:09:9b:76: 32:70:e7:7e:c6:ec:c2:c4:95:f6:72:72:f7:16:8c:19:53:af: c0:47:d8:95:04:53:fb:66:43:58:28:6f:f0:48:e2:52:53:4f: bd:d8:7e:5b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICMGUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDkyNDA2MTk0NloXDTI1MDkyMzE1MzAyMFowMzEx MC8GA1UEAxMoMzgzQjJFRjgyMEJFNTUyOUJGMzlCM0M0QjJFQUJBRjUyMzY5Nzc4 QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKwLh3QxNtKj3eE7iQAF LpTk9kEZlG0aspkv5IEtFEmNFKGQdK+pJ2bHQ6ZbDn3YjUPGGK2vOUEBKwpGIune O5bcIJnWlV24iUfx1K1CG7b10y4crrowPq0kB6jr9IBj1FtiqFwi3HYSOm4Lx/HS Nv+0S42gxmX4rB+jbSr4AmEkIPx4j8EMf/KcSF4+4pPGm19X/WF9sK/IILBDzVME mpvhR/sWI5moo1JOuD98g8T2wGPU1k+4EZD7kPqadXyc+KaCpsCRVCn5sgOFjXIJ nXXj90SewlUq6Vf4N2Ayr9Dxoh9POQGgZ5W7gu2wSDQaFdC/vBnlaJNjQLFP8Fn0 7GUCAwEAAaOCAlkwggJVMB0GA1UdDgQWBBQ4Oy74IL5VKb85s8Sy6rr1I2l3izAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9UX1RGTl9D Ty8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9OT1RfVEZOX0NPL09Ec3UtQ0MtVlNtX09iUEVzdXE2OVNOcGQ0cy5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAcYgMA0GCSqGSIb3DQEB CwUAA4IBAQB9Yig5jsXULiOsS6TrsUPkoV3XywbpjE3prBGzaOPMJrZe5pTcT77g FFKGkUQqvVSjXjJ2HfQbadL8GD8D3VpT+CxhpcY9dEnnEjgi9436qFo985COoz5X 2A+IIoBvO/omM32zAcgg+hNYl70DGNy/ACQCkct3LeNrW0iBMvP4ceFuFZjCvRbS Bbquivyw/X8uh+MNt9rbasJ6iliMMAsz/Hnguxp84qtRRr37buowl0mlCKk7TtAY zBCfnQtsqqvLs/eGtXWqLWIZe3cAket4veRDoDoJm3YycOd+xuzCxJX2cnL3FowZ U6/AR9iVBFP7ZkNYKG/wSOJSU0+92H5b -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:30 2024 by rpki-client on console-fra.rpki-client.org