$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer File: Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer (raw, json) Hash identifier: Y1+1PPOHzoqRqVDIfscjjkTHTMOkVcbtyiyKC5vcszY= Subject key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:32 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.236.226.0/23 IP: 2401:16a0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11991 (0x2ed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:1d:43:59:bd:4c:4a:e3:cd:06:ad:6f:83: 51:8a:71:d0:e5:c9:dd:88:f7:95:90:10:d7:2a:a0: 8e:b6:42:86:d8:69:e2:78:2e:d7:49:7a:56:17:56: 16:38:61:6a:c2:ef:79:92:a5:6f:0d:df:03:97:ae: 6f:c5:c7:21:6f:c6:48:83:25:8d:61:73:3c:59:ab: 42:85:9c:89:bc:e4:39:1c:da:4a:ab:f7:16:37:71: 50:06:bd:b6:f7:2f:64:50:d8:ca:59:6b:49:ec:e1: b1:be:07:13:6b:07:9c:86:a6:c5:4b:dc:12:5e:65: 6b:ad:f7:a0:b6:41:fe:01:bb:64:62:2c:14:83:c5: d9:0e:ef:e5:fd:8e:07:05:91:e8:9d:2e:91:33:fd: ef:5a:65:65:55:ac:ab:6d:d6:a5:ff:26:87:3e:e8: 3e:d9:0f:d6:b2:2f:bf:c1:79:6b:6e:6c:57:dc:9c: aa:85:b0:3e:ae:97:cc:6a:41:ac:5e:1c:c4:fe:a4: d1:12:5f:42:9d:39:f5:55:30:54:58:30:e5:7a:29: ce:35:f9:1b:b6:26:9e:5f:fe:62:48:d7:06:08:c4: 42:fc:05:73:51:e2:90:44:5e:72:ee:13:7b:9a:76: 12:d6:b8:a7:84:a9:12:b1:00:9c:80:1d:00:16:34: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.226.0/23 IPv6: 2401:16a0::/32 Signature Algorithm: sha256WithRSAEncryption 03:c9:44:ec:13:e6:40:f9:0f:be:e5:8b:8c:8c:31:c8:69:77: 6f:b4:c2:7a:d3:af:40:f3:f3:8e:d3:bd:40:57:bd:06:e7:fd: c6:5a:35:16:92:c5:7c:98:8e:fd:f5:13:82:a1:5b:a3:fd:49: f2:58:45:59:0a:fe:40:e1:93:f7:a9:be:bd:ce:e8:59:bf:f7: 1e:e9:4d:5a:1e:d6:30:04:73:9d:95:3d:6e:91:81:5d:a5:23: 97:a8:e5:f3:5a:6a:c3:53:c6:18:3d:c3:1e:e8:08:cb:d6:62: 96:94:88:00:7a:11:58:29:fa:41:7b:58:af:4f:54:c8:23:78: 21:e3:39:4a:08:4b:b0:55:4f:96:81:1f:82:f5:75:79:03:0c: a3:95:db:31:f1:5c:ad:bf:9a:00:f3:8c:dc:87:93:24:b4:c7: c2:34:cd:b4:69:c3:57:ef:5d:a2:9a:96:37:e9:51:b8:8c:d5: 22:70:8b:3d:ef:41:ed:cc:07:93:7b:4a:a5:f1:ee:71:38:e8: e9:ed:9a:18:5a:88:0c:4b:c6:91:24:02:cd:a2:81:b3:b6:6d: a7:80:66:85:18:18:93:22:1c:d4:b9:d4:7f:11:07:e7:42:94: d4:c6:39:c5:94:d7:c4:0d:57:ad:5b:1b:a8:10:ec:82:a9:8e: 9b:09:83:b7 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICLtcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczMloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNjI3RDY3NUZGNUUyQzhCQTkwRjRCNjU1QjEwOEI2OTI1REFGMTU5 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQFHUNZvUxK480GrW+D UYpx0OXJ3Yj3lZAQ1yqgjrZChthp4ngu10l6VhdWFjhhasLveZKlbw3fA5eub8XH IW/GSIMljWFzPFmrQoWcibzkORzaSqv3FjdxUAa9tvcvZFDYyllrSezhsb4HE2sH nIamxUvcEl5la633oLZB/gG7ZGIsFIPF2Q7v5f2OBwWR6J0ukTP971plZVWsq23W pf8mhz7oPtkP1rIvv8F5a25sV9ycqoWwPq6XzGpBrF4cxP6k0RJfQp059VUwVFgw 5XopzjX5G7Ymnl/+YkjXBgjEQvwFc1HikERecu4Te5p2Eta4p4SpErEAnIAdABY0 sA0CAwEAAaOCAlkwggJVMB0GA1UdDgQWBBRifWdf9eLIupD0tlWxCLaSXa8VlTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkZULzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0pG VC9ZbjFuWF9YaXlMcVE5TFpWc1FpMmtsMnZGWlUubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBZ+ziMA0EAgACMAcDBQAkARagMA0GCSqGSIb3DQEB CwUAA4IBAQADyUTsE+ZA+Q++5YuMjDHIaXdvtMJ6069A8/OO071AV70G5/3GWjUW ksV8mI799ROCoVuj/UnyWEVZCv5A4ZP3qb69zuhZv/ce6U1aHtYwBHOdlT1ukYFd pSOXqOXzWmrDU8YYPcMe6AjL1mKWlIgAehFYKfpBe1ivT1TII3gh4zlKCEuwVU+W gR+C9XV5Awyjldsx8Vytv5oA84zch5MktMfCNM20acNX712impY36VG4jNUicIs9 70HtzAeTe0ql8e5xOOjp7ZoYWogMS8aRJALNooGztm2ngGaFGBiTIhzUudR/EQfn QpTUxjnFlNfEDVetWxuoEOyCqY6bCYO3 -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org