$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer File: Y0AKpubGixPd3JwAuCWGEkJz-ps.cer (raw, json) Hash identifier: FjzBSHQfd3Dob9JpXI6ca90MvH3Jp0UXPmUlxPW+W9E= Subject key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2D33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:13 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.122.224.0/22 IP: 2403:96c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11571 (0x2d33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:94:a3:ca:4f:d8:67:cc:40:ed:26:ae:cc: f9:6e:ba:ed:6b:d9:d9:f8:d1:55:f5:89:9f:28:5e: 37:f1:17:25:ed:ca:2f:6b:f8:70:c3:9d:c4:95:68: c9:f1:c7:fa:21:a1:3c:70:df:87:65:08:13:bc:da: 6a:5d:77:c2:1f:4b:17:a9:45:c4:c3:da:2c:3e:77: 4b:13:f3:ac:78:26:af:ad:c9:8d:7b:a7:2c:d1:68: 3b:4d:ba:ed:3e:bc:9b:51:1e:53:a7:33:25:21:ef: d0:a4:a9:cb:35:86:f4:d0:e1:5b:78:62:7d:78:91: 9a:fa:91:70:82:10:07:75:5d:3a:ce:2d:3e:a3:78: 2f:2f:6e:5d:68:7b:cc:a3:a3:f4:37:46:2a:4b:39: 48:7c:93:8d:25:33:55:eb:42:76:2f:ec:49:9c:7f: c1:a4:0f:32:a3:be:4b:61:e9:e3:63:06:28:8e:aa: 81:52:de:df:f7:c9:33:6e:98:37:17:29:fc:d1:7c: af:8b:e1:cf:f0:9b:84:04:92:a5:3d:04:0c:80:09: fe:a8:0b:29:ba:f4:a8:be:a1:ba:af:b2:b4:bb:42: 28:f8:85:25:24:0c:4b:9a:6b:f2:25:1f:19:17:27: fb:6f:54:19:56:69:b4:89:56:ee:0d:c3:53:b2:05: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.224.0/22 IPv6: 2403:96c0::/32 Signature Algorithm: sha256WithRSAEncryption 94:11:42:14:e2:26:6f:c3:80:d1:3e:09:44:55:97:53:b4:8e: 41:20:31:e4:8c:95:9e:26:ac:12:7e:c5:d3:35:18:2c:2f:6f: 6e:65:60:48:c0:72:b9:e0:1a:0e:cd:7b:da:07:be:4d:15:87: 39:30:67:39:13:09:3e:90:6f:a7:6a:2f:27:23:20:21:7d:c1: 9f:71:c5:ce:fb:51:56:01:51:53:92:12:07:f0:b8:99:72:4b: 5d:58:50:fd:e7:f6:e6:4e:8d:b3:09:3c:de:83:e1:08:98:48: b4:0d:6d:20:34:80:9a:8d:4f:30:27:4c:e8:5d:49:2e:55:0d: f6:7c:60:c1:2d:6e:68:9e:9f:33:43:88:aa:8e:c3:a5:54:47: 9d:87:68:f4:92:ac:f9:76:32:68:d1:fa:bd:2d:5b:9b:29:db: 0a:87:93:e7:a9:91:5a:c6:93:b1:dd:1f:03:37:e0:9a:f0:52: b2:55:36:92:26:50:19:fa:d1:bf:1a:d0:24:5f:f3:ab:3e:02: 7d:b8:90:7b:ea:e3:c8:ea:5d:f7:86:80:d2:92:7f:f2:88:a0: 35:69:27:a3:b4:9f:20:1f:64:03:bc:2e:e4:11:9f:62:0b:6d: a5:bb:8a:69:8f:d0:5b:5a:3e:f8:36:da:43:5b:2d:41:42:1c: fe:4b:3a:db -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICLTMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxM1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNjM0MDBBQTZFNkM2OEIxM0REREM5QzAwQjgyNTg2MTI0MjczRkE5 QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALi8lKPKT9hnzEDtJq7M +W667WvZ2fjRVfWJnyheN/EXJe3KL2v4cMOdxJVoyfHH+iGhPHDfh2UIE7zaal13 wh9LF6lFxMPaLD53SxPzrHgmr63JjXunLNFoO0267T68m1EeU6czJSHv0KSpyzWG 9NDhW3hifXiRmvqRcIIQB3VdOs4tPqN4Ly9uXWh7zKOj9DdGKks5SHyTjSUzVetC di/sSZx/waQPMqO+S2Hp42MGKI6qgVLe3/fJM26YNxcp/NF8r4vhz/CbhASSpT0E DIAJ/qgLKbr0qL6huq+ytLtCKPiFJSQMS5pr8iUfGRcn+29UGVZptIlW7g3DU7IF Pv8CAwEAAaOCAmcwggJjMB0GA1UdDgQWBBRjQAqm5saLE93cnAC4JYYSQnP6mzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklTSU9ONFlF Uy8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9WSVNJT040WUVTL1kwQUtwdWJHaXhQZDNKd0F1Q1dHRWtKei1wcy5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJneuAwDQQCAAIwBwMFACQD lsAwDQYJKoZIhvcNAQELBQADggEBAJQRQhTiJm/DgNE+CURVl1O0jkEgMeSMlZ4m rBJ+xdM1GCwvb25lYEjAcrngGg7Ne9oHvk0VhzkwZzkTCT6Qb6dqLycjICF9wZ9x xc77UVYBUVOSEgfwuJlyS11YUP3n9uZOjbMJPN6D4QiYSLQNbSA0gJqNTzAnTOhd SS5VDfZ8YMEtbmienzNDiKqOw6VUR52HaPSSrPl2MmjR+r0tW5sp2wqHk+epkVrG k7HdHwM34JrwUrJVNpImUBn60b8a0CRf86s+An24kHvq48jqXfeGgNKSf/KIoDVp J6O0nyAfZAO8LuQRn2ILbaW7immP0FtaPvg22kNbLUFCHP5LOts= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org