$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer File: UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer (raw, json) Hash identifier: HoRK16pSppJTh0dn+yCDkiL3tYArg83tCzOO+C/5Eq4= Subject key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 175B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 21 Oct 2024 09:16:31 +0000 Certificate not after: Tue 14 Oct 2025 15:30:32 +0000 Subordinate resources: IP: 160.191.6.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5979 (0x175b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Oct 21 09:16:31 2024 GMT Not After : Oct 14 15:30:32 2025 GMT Subject: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b3:78:8c:db:6a:85:6f:33:ef:7d:a2:66:7d: f6:86:10:57:31:42:78:91:01:8d:e7:16:c4:0d:b6: bd:31:6e:5e:b9:ac:89:b6:7f:81:06:af:46:89:87: ed:59:eb:99:1e:18:54:5a:4b:71:dd:31:56:79:2c: 34:c7:dc:6c:cd:a2:2a:d3:a2:1d:93:0b:f4:1f:ac: 5e:3e:b1:bb:9d:b6:ef:0a:d7:d6:75:a5:60:e7:b8: 7b:66:14:d4:66:9b:81:a1:51:7c:25:7f:34:7f:26: 1f:f2:4d:f5:91:59:a0:e0:4f:fb:47:67:5a:d3:c8: c3:12:85:d7:70:bb:6b:a1:7f:98:e1:fd:8d:33:89: 7c:71:44:9a:f1:0f:34:fb:27:ba:5b:a4:8e:08:09: 2b:0a:c7:8f:65:d9:42:ca:4a:db:c2:56:65:a9:59: d5:9e:76:b7:10:76:34:cb:22:33:1c:2e:ee:2b:92: b7:67:16:cc:0f:75:0f:5a:2b:f1:3b:49:ec:d6:b4: fd:74:61:e8:5e:fc:90:3a:fa:b0:c2:2f:5a:49:8f: 81:d8:c5:6a:6d:71:f8:a2:7e:84:6b:4b:f2:c6:3c: b5:90:42:fc:4f:1b:17:b9:c5:e3:87:83:19:a5:b7: cb:8f:43:97:7d:1c:35:89:4e:e5:f2:5e:62:0a:b4: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.6.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:2b:b0:8a:ef:8c:17:b2:67:a2:f4:a0:f6:8a:cb:c3:14:ae: 80:56:18:fb:89:24:42:e8:0c:64:d8:36:d1:c3:61:96:23:d7: 37:05:6f:51:51:7e:7d:e8:b3:09:99:e7:8e:61:50:91:b7:91: 20:96:16:2e:f9:ce:91:cc:db:b3:29:1f:71:27:ca:75:3a:7c: 7b:78:6c:69:64:02:04:93:e3:64:12:ad:bb:05:18:91:70:88: 52:a7:ca:5f:9c:80:9f:bc:06:d5:42:45:ee:2d:84:fc:54:e5: a6:98:f9:99:7e:40:2f:9d:2f:02:cf:8d:1b:55:23:8f:f4:f8: 1f:1f:f8:50:d5:99:a9:c7:15:25:93:70:fb:43:50:95:d9:a7: a5:85:90:e3:80:1a:ae:c9:26:48:4a:19:1b:85:a0:5c:c0:38: 80:33:45:aa:ab:f0:5b:4d:a6:66:e6:0a:80:7d:2c:ca:1c:b4: 80:15:4e:14:13:a0:45:e0:34:af:12:0d:e3:ac:44:89:69:d0: 83:13:db:a1:90:71:0a:82:81:8f:17:56:c4:9a:1f:9a:da:eb: 9e:6d:3a:98:af:cd:d8:b0:96:71:52:85:47:62:d1:19:88:7a: 51:79:2d:82:92:c3:95:c5:72:16:8c:b2:25:93:9c:76:cc:db: f9:cc:ec:e2 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICF1swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MTAyMTA5MTYzMVoXDTI1MTAxNDE1MzAzMlowMzEx MC8GA1UEAxMoNTMyMkU2MUFFOEM4REQ4OTUzRTFFNkJEQzk2QUU0ODI3QUZDRjk5 MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPGzeIzbaoVvM+99omZ9 9oYQVzFCeJEBjecWxA22vTFuXrmsibZ/gQavRomH7VnrmR4YVFpLcd0xVnksNMfc bM2iKtOiHZML9B+sXj6xu5227wrX1nWlYOe4e2YU1GabgaFRfCV/NH8mH/JN9ZFZ oOBP+0dnWtPIwxKF13C7a6F/mOH9jTOJfHFEmvEPNPsnulukjggJKwrHj2XZQspK 28JWZalZ1Z52txB2NMsiMxwu7iuSt2cWzA91D1or8TtJ7Na0/XRh6F78kDr6sMIv WkmPgdjFam1x+KJ+hGtL8sY8tZBC/E8bF7nF44eDGaW3y49Dl30cNYlO5fJeYgq0 MK0CAwEAAaOCAk4wggJKMB0GA1UdDgQWBBRTIuYa6MjdiVPh5r3JauSCevz5kDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVZVU4vMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TEVZVU4vVXlMbUd1akkzWWxUNGVhOXlXcmtnbnI4LVpBLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/BjANBgkqhkiG9w0BAQsFAAOCAQEAfSuw iu+MF7JnovSg9orLwxSugFYY+4kkQugMZNg20cNhliPXNwVvUVF+feizCZnnjmFQ kbeRIJYWLvnOkczbsykfcSfKdTp8e3hsaWQCBJPjZBKtuwUYkXCIUqfKX5yAn7wG 1UJF7i2E/FTlppj5mX5AL50vAs+NG1Ujj/T4Hx/4UNWZqccVJZNw+0NQldmnpYWQ 44AarskmSEoZG4WgXMA4gDNFqqvwW02mZuYKgH0syhy0gBVOFBOgReA0rxIN46xE iWnQgxPboZBxCoKBjxdWxJofmtrrnm06mK/N2LCWcVKFR2LRGYh6UXktgpLDlcVy FoyyJZOcdszb+czs4g== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:43 2024 by rpki-client on console-fra.rpki-client.org