$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer File: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (raw, json) Hash identifier: /9Ni0OThyEMOiww60u+X4RGCFBbqRl4vDb7BbK6BBbA= Subject key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 161D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:30:51 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 160.25.220.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Sep 2024 17:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5661 (0x161d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 26 02:30:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:d0:b8:ad:bc:04:02:3e:91:87:f7:ab:8f: 56:53:e8:6b:7e:72:2e:d7:6f:cc:9c:75:73:e5:43: f4:e3:1f:28:e0:c1:18:50:3d:75:4b:13:33:8b:9f: 8e:97:fa:41:5d:d1:3b:f8:a6:61:1d:dc:e0:31:c6: bc:c0:a3:0c:13:82:65:d6:2f:99:3a:30:7f:07:cb: 60:7c:c9:df:52:a8:f3:32:6d:9f:c1:68:23:81:a8: 7e:a2:13:5c:f0:a1:86:3f:d2:eb:4b:82:ea:60:24: cf:1f:ba:25:f2:b7:ad:dd:d3:2f:3a:39:d4:2a:1f: 97:7e:20:9a:7e:c0:20:6f:99:e4:8d:cf:68:34:e0: 70:10:20:ab:54:6e:a0:09:9c:4c:ab:ff:77:54:25: d0:a9:c1:5e:44:a5:87:ed:63:1b:78:b9:58:12:77: 39:db:6e:02:2e:4a:d4:d5:50:09:f4:ac:a8:43:f4: fa:51:b5:66:37:91:1a:de:9a:ef:8f:5a:c9:7a:4b: b7:28:18:f6:4b:81:83:3f:7f:36:15:33:63:44:a4: ab:cf:7d:77:55:6c:e7:5b:33:f2:74:34:b7:ab:a6: b8:b9:70:01:33:d8:b5:d7:5a:93:59:ec:69:70:85: f8:88:5f:e3:0a:5b:0f:14:b1:62:7c:c8:17:63:61: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.220.0/23 Signature Algorithm: sha256WithRSAEncryption 70:fd:ad:fd:0e:d6:63:ea:ef:8d:04:7a:69:8e:64:68:94:19: be:d8:81:c0:2c:57:89:f9:10:9c:42:6b:56:94:0c:82:8a:7a: e8:e2:e1:15:53:b9:5c:84:d9:86:24:19:a7:41:37:b7:0a:a8: 42:15:ea:07:31:7c:c2:0b:30:05:2e:fd:be:50:c1:48:fc:ef: e2:4e:65:6c:cd:ee:06:82:8f:ef:0c:53:52:b9:db:c9:4c:f9: a2:99:2b:f1:1f:3f:46:89:47:73:ec:04:b5:d0:e3:36:5a:31: cb:bd:db:44:e2:a7:20:a9:68:50:bd:b7:bc:fb:78:fb:1a:34: ac:e8:39:da:2c:92:af:fd:31:74:bd:da:5f:7b:3b:95:03:7c: f4:a6:51:24:72:71:38:78:ae:d6:bf:5d:70:ca:08:9e:ce:28: c8:4e:2f:2f:7b:b9:19:fd:bb:2c:12:06:f0:75:19:72:83:73: 11:af:d9:92:8a:db:8f:e8:b3:09:9c:3c:bb:08:4e:94:11:73: 62:d4:53:07:0c:05:1f:c2:95:bb:87:9e:ba:96:24:76:67:fd: f5:14:b8:00:24:44:01:00:ed:b3:30:06:c5:8a:37:5f:e4:31: 2f:f5:8a:df:6a:b4:ec:fd:db:0c:db:cf:6b:ef:73:4a:35:6a: 48:28:1c:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFh0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyNjAyMzA1MVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNDIyRTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVE MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcv0LitvAQCPpGH96uP VlPoa35yLtdvzJx1c+VD9OMfKODBGFA9dUsTM4ufjpf6QV3RO/imYR3c4DHGvMCj DBOCZdYvmTowfwfLYHzJ31Ko8zJtn8FoI4GofqITXPChhj/S60uC6mAkzx+6JfK3 rd3TLzo51Cofl34gmn7AIG+Z5I3PaDTgcBAgq1RuoAmcTKv/d1Ql0KnBXkSlh+1j G3i5WBJ3OdtuAi5K1NVQCfSsqEP0+lG1ZjeRGt6a749ayXpLtygY9kuBgz9/NhUz Y0Skq899d1Vs51sz8nQ0t6umuLlwATPYtddak1nsaXCF+Ihf4wpbDxSxYnzIF2Nh 6o8CAwEAAaOCAlQwggJQMB0GA1UdDgQWBBRCLnyV2H3prushKgxMywF05lyl0DAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRFQ0gv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvU0tJUFRFQ0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZ3DANBgkqhkiG9w0BAQsFAAOC AQEAcP2t/Q7WY+rvjQR6aY5kaJQZvtiBwCxXifkQnEJrVpQMgop66OLhFVO5XITZ hiQZp0E3twqoQhXqBzF8wgswBS79vlDBSPzv4k5lbM3uBoKP7wxTUrnbyUz5opkr 8R8/RolHc+wEtdDjNloxy73bROKnIKloUL23vPt4+xo0rOg52iySr/0xdL3aX3s7 lQN89KZRJHJxOHiu1r9dcMoIns4oyE4vL3u5Gf27LBIG8HUZcoNzEa/Zkorbj+iz CZw8uwhOlBFzYtRTBwwFH8KVu4eeupYkdmf99RS4ACREAQDtszAGxYo3X+QxL/WK 32q07P3bDNvPa+9zSjVqSCgczg== -----END CERTIFICATE-----Generated at Thu Sep 19 13:51:51 2024 by rpki-client on console-fra.rpki-client.org