$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/U0x2J0ozCwce_SDbBfbQQpKTdD4.cer File: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (raw, json) Hash identifier: i+vmShmM3tmOUZtyrjsXcgLEDvygDrzo91TW3LPPoGc= Subject key identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 13DB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:03 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 2001:7fa:1::/48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 21:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5083 (0x13db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Validity Not Before: Sep 1 03:11:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=534C76274A330B071EFD20DB05F6D0429293743E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:16:eb:ee:2b:29:44:81:14:a2:40:4a:d9: 5c:e5:7f:5c:43:b3:3f:f1:9e:d5:25:2e:a7:52:b7: e4:8a:b2:4d:18:08:59:97:ec:92:86:2f:9c:a8:7e: bd:18:0d:18:4b:13:49:fd:71:5a:63:4a:97:0a:01: 56:40:85:7f:7d:ec:62:84:15:87:12:c2:54:51:ef: 86:77:a4:20:c5:a4:d5:a2:99:9e:43:22:89:88:6a: 93:5c:d5:0d:74:9f:b4:dd:e5:7c:76:2e:35:de:22: d5:f2:2e:7a:46:38:b7:cf:07:ba:5f:f7:5e:5b:e4: 91:22:6f:31:2d:0e:2c:78:82:69:25:f0:55:a6:96: 46:fe:3a:14:af:41:cb:db:40:11:5a:54:e1:bd:32: c4:cd:a9:46:28:a3:0f:73:1d:08:ea:eb:83:63:09: 64:3c:57:63:89:7f:36:3b:c6:47:17:ca:42:27:0b: cb:3a:dc:36:7f:eb:a0:da:68:48:22:ec:52:fa:6c: c7:39:24:e7:ef:da:c3:be:53:44:22:f1:75:27:ea: 18:53:1c:05:2f:02:fe:3a:d7:b0:d4:25:1a:5d:fe: 6d:25:39:96:16:40:f5:70:c2:c0:5e:c4:9c:e3:5f: f7:a8:73:44:ab:9c:6a:1b:90:95:f3:61:f2:d8:58: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4C:76:27:4A:33:0B:07:1E:FD:20:DB:05:F6:D0:42:92:93:74:3E X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/U0x2J0ozCwce_SDbBfbQQpKTdD4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:7fa:1::/48 Signature Algorithm: sha256WithRSAEncryption 99:ec:a3:dd:01:33:78:01:c7:b3:37:e2:a8:5a:ae:09:0f:9c: 27:9c:27:55:b5:cf:99:1f:40:f2:ad:01:ae:40:d8:8a:ae:c3: 89:50:4c:87:08:a8:38:c6:d5:d5:91:9a:62:8a:fe:a1:84:85: 61:2b:1e:b4:e3:05:b9:42:81:75:bd:bb:a4:2f:43:9a:b1:c4: a7:c9:1a:75:9a:6c:9f:29:a3:dd:a6:f8:98:45:9e:76:dd:16: 4d:57:5a:e5:01:c0:45:12:2e:65:8f:01:bb:af:8b:1f:d5:5c: ef:56:89:db:94:f7:16:30:5d:d5:c9:83:57:cd:1a:60:ba:a3: 7e:34:d9:cc:0f:58:e7:df:49:95:b9:11:17:08:33:5a:2d:30: f7:50:0a:a5:9f:00:27:cd:55:99:1a:55:8f:bc:ab:72:e5:80: be:fd:55:42:ed:43:e6:33:54:ff:36:fc:ba:88:c6:81:3f:c7: b0:b0:4c:a8:7a:37:7c:58:94:e2:b6:20:90:8e:87:05:9e:2e: da:70:16:d0:53:92:c7:53:4c:fb:0a:e4:5d:1f:d1:0b:67:d1: 61:1d:e3:4b:ae:70:55:d9:bd:51:5d:b4:c2:c3:3f:41:0c:14: 25:95:f0:d2:5d:fd:b0:8f:e1:d8:8e:ae:7c:c7:a4:e7:cf:30: a5:af:67:e7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICE9swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTIzMDkwMTAzMTEwM1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoNTM0Qzc2Mjc0QTMzMEIwNzFFRkQyMERCMDVGNkQwNDI5MjkzNzQz RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFyFuvuKylEgRSiQErZ XOV/XEOzP/Ge1SUup1K35IqyTRgIWZfskoYvnKh+vRgNGEsTSf1xWmNKlwoBVkCF f33sYoQVhxLCVFHvhnekIMWk1aKZnkMiiYhqk1zVDXSftN3lfHYuNd4i1fIuekY4 t88Hul/3XlvkkSJvMS0OLHiCaSXwVaaWRv46FK9By9tAEVpU4b0yxM2pRiijD3Md COrrg2MJZDxXY4l/NjvGRxfKQicLyzrcNn/roNpoSCLsUvpsxzkk5+/aw75TRCLx dSfqGFMcBS8C/jrXsNQlGl3+bSU5lhZA9XDCwF7EnONf96hzRKucahuQlfNh8thY wJECAwEAAaOCAlEwggJNMB0GA1UdDgQWBBRTTHYnSjMLBx79INsF9tBCkpN0PjAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SElORVQvVTB4Mkowb3pDd2NlX1NEYkJmYlFRcEtUZEQ0Lm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABB/oAATANBgkqhkiG9w0BAQsFAAOCAQEA meyj3QEzeAHHszfiqFquCQ+cJ5wnVbXPmR9A8q0BrkDYiq7DiVBMhwioOMbV1ZGa Yor+oYSFYSsetOMFuUKBdb27pC9DmrHEp8kadZpsnymj3ab4mEWedt0WTVda5QHA RRIuZY8Bu6+LH9Vc71aJ25T3FjBd1cmDV80aYLqjfjTZzA9Y599JlbkRFwgzWi0w 91AKpZ8AJ81VmRpVj7yrcuWAvv1VQu1D5jNU/zb8uojGgT/HsLBMqHo3fFiU4rYg kI6HBZ4u2nAW0FOSx1NM+wrkXR/RC2fRYR3jS65wVdm9UV20wsM/QQwUJZXw0l39 sI/h2I6ufMek588wpa9n5w== -----END CERTIFICATE-----Generated at Tue May 21 06:28:51 2024 by rpki-client on console-ams.rpki-client.org