$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/U0x2J0ozCwce_SDbBfbQQpKTdD4.cer File: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (raw, json) Hash identifier: TUpXuq5IiOp7RZQfiu5V8aRBdOLeuD7cHsIpEx2Nxk0= Subject key identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 15A6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:37 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 2001:7fa:1::/48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 08:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5542 (0x15a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Validity Not Before: Aug 26 01:57:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=534C76274A330B071EFD20DB05F6D0429293743E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:16:eb:ee:2b:29:44:81:14:a2:40:4a:d9: 5c:e5:7f:5c:43:b3:3f:f1:9e:d5:25:2e:a7:52:b7: e4:8a:b2:4d:18:08:59:97:ec:92:86:2f:9c:a8:7e: bd:18:0d:18:4b:13:49:fd:71:5a:63:4a:97:0a:01: 56:40:85:7f:7d:ec:62:84:15:87:12:c2:54:51:ef: 86:77:a4:20:c5:a4:d5:a2:99:9e:43:22:89:88:6a: 93:5c:d5:0d:74:9f:b4:dd:e5:7c:76:2e:35:de:22: d5:f2:2e:7a:46:38:b7:cf:07:ba:5f:f7:5e:5b:e4: 91:22:6f:31:2d:0e:2c:78:82:69:25:f0:55:a6:96: 46:fe:3a:14:af:41:cb:db:40:11:5a:54:e1:bd:32: c4:cd:a9:46:28:a3:0f:73:1d:08:ea:eb:83:63:09: 64:3c:57:63:89:7f:36:3b:c6:47:17:ca:42:27:0b: cb:3a:dc:36:7f:eb:a0:da:68:48:22:ec:52:fa:6c: c7:39:24:e7:ef:da:c3:be:53:44:22:f1:75:27:ea: 18:53:1c:05:2f:02:fe:3a:d7:b0:d4:25:1a:5d:fe: 6d:25:39:96:16:40:f5:70:c2:c0:5e:c4:9c:e3:5f: f7:a8:73:44:ab:9c:6a:1b:90:95:f3:61:f2:d8:58: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:7fa:1::/48 Signature Algorithm: sha256WithRSAEncryption 41:c4:5e:69:86:11:be:31:58:64:80:cb:ad:7a:f1:46:1b:70: 8a:ce:54:a3:21:58:34:4f:93:87:c6:a2:40:45:44:85:7d:20: 53:59:8f:a9:fd:cd:69:99:6c:db:11:09:c3:95:38:d7:8b:fb: 07:99:61:d4:ca:2e:32:9a:da:7f:56:82:98:da:dd:2f:0c:e0: cb:56:f8:14:4e:54:3e:dc:0a:f7:0d:da:4c:17:60:1e:a3:30: 2c:94:fc:a4:b5:2d:81:06:f0:ba:08:20:a9:df:53:77:40:40: 12:26:4c:89:d3:09:93:7c:da:7c:b1:e0:46:6f:9d:d9:b5:a5: f1:91:91:79:4b:76:75:2b:9c:26:6f:b9:f5:ae:2e:ec:ff:18: 5b:ab:17:11:af:ae:14:a2:d8:45:48:18:1c:bf:a9:bb:fc:8a: 60:bb:d2:a7:c1:97:56:fd:e1:a3:b9:85:53:40:ff:d7:b8:3c: 97:d8:23:26:f2:5b:c2:c7:7e:5f:e0:3f:2b:8b:77:c3:dd:3b: eb:82:87:a1:b9:6a:09:e4:4e:d9:b7:51:84:5c:79:86:b3:bb: a5:bc:b1:f6:38:77:3b:21:ef:5e:a4:41:ba:69:4f:0f:ad:4d: ac:f9:04:c0:93:b1:e5:a2:70:90:b2:c8:2b:dd:56:01:fb:75: 31:ee:e8:58 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICFaYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI0MDgyNjAxNTczN1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNTM0Qzc2Mjc0QTMzMEIwNzFFRkQyMERCMDVGNkQwNDI5MjkzNzQz RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFyFuvuKylEgRSiQErZ XOV/XEOzP/Ge1SUup1K35IqyTRgIWZfskoYvnKh+vRgNGEsTSf1xWmNKlwoBVkCF f33sYoQVhxLCVFHvhnekIMWk1aKZnkMiiYhqk1zVDXSftN3lfHYuNd4i1fIuekY4 t88Hul/3XlvkkSJvMS0OLHiCaSXwVaaWRv46FK9By9tAEVpU4b0yxM2pRiijD3Md COrrg2MJZDxXY4l/NjvGRxfKQicLyzrcNn/roNpoSCLsUvpsxzkk5+/aw75TRCLx dSfqGFMcBS8C/jrXsNQlGl3+bSU5lhZA9XDCwF7EnONf96hzRKucahuQlfNh8thY wJECAwEAAaOCAlEwggJNMB0GA1UdDgQWBBRTTHYnSjMLBx79INsF9tBCkpN0PjAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SElORVQvVTB4Mkowb3pDd2NlX1NEYkJmYlFRcEtUZEQ0Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABB/oAATANBgkqhkiG9w0BAQsFAAOCAQEA QcReaYYRvjFYZIDLrXrxRhtwis5UoyFYNE+Th8aiQEVEhX0gU1mPqf3NaZls2xEJ w5U414v7B5lh1MouMpraf1aCmNrdLwzgy1b4FE5UPtwK9w3aTBdgHqMwLJT8pLUt gQbwugggqd9Td0BAEiZMidMJk3zafLHgRm+d2bWl8ZGReUt2dSucJm+59a4u7P8Y W6sXEa+uFKLYRUgYHL+pu/yKYLvSp8GXVv3ho7mFU0D/17g8l9gjJvJbwsd+X+A/ K4t3w90764KHoblqCeRO2bdRhFx5hrO7pbyx9jh3OyHvXqRBumlPD61NrPkEwJOx 5aJwkLLIK91WAft1Me7oWA== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:40 2024 by rpki-client on console-fra.rpki-client.org