$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer File: Z3gr2kgldGOtzabXLy7kG1_ZShE.cer (raw, json) Hash identifier: 50yv2u+jjKA4qFXyt5CqElNsO14umhs1fMp+4uAxlMk= Subject key identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 3022 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 13 Sep 2024 08:18:37 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 2404:a3c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12322 (0x3022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 13 08:18:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:8e:93:25:fe:d6:3d:b4:77:b0:8d:40:a1: 4d:ec:05:52:a0:ce:be:7f:94:75:ad:8d:88:ef:49: 9b:dc:e1:cf:7e:89:06:e0:6f:db:14:b2:87:ff:fd: a0:2f:fb:8c:a5:f5:19:9d:2b:89:27:1a:d6:c3:39: c1:e1:46:78:dd:a6:82:c8:8f:69:c2:c2:85:25:88: 5e:78:7b:22:55:04:bb:44:70:86:50:07:51:62:81: d8:33:35:aa:50:17:2c:4b:85:f1:4f:09:3f:49:a4: 62:36:cd:a8:dc:c6:0b:5d:8b:7c:d4:c9:06:3a:85: c7:a4:da:3b:c3:29:57:e3:39:37:d2:0a:94:61:5e: 28:34:f3:ac:97:7e:43:72:dc:8c:e0:38:2b:4f:34: ad:6a:ab:cc:fe:df:0d:b9:ac:1d:14:1a:f6:8f:98: 9f:a9:1c:5a:f4:77:65:51:7b:bb:d2:89:dd:c0:c6: 21:7e:a2:56:22:06:35:a2:63:87:0e:d7:08:79:d8: 6d:22:37:7b:72:7f:cf:1e:d3:8e:be:01:17:61:22: 91:fa:99:bb:02:e2:f2:29:33:60:80:18:47:03:6f: 46:9b:1c:f3:e0:d9:08:8d:a7:a6:6e:6e:70:71:98: 2e:ad:67:43:e9:83:e9:9f:65:80:18:c6:09:6c:a7: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:a3c0::/32 Signature Algorithm: sha256WithRSAEncryption 19:93:94:b9:73:b7:c5:36:8f:fb:e0:11:8d:4c:cb:13:52:72: 61:bc:ec:fc:9d:f9:1d:35:a4:c6:2e:66:98:6f:ac:03:3d:c5: 94:88:ad:ed:7a:60:c9:7e:68:4a:92:de:97:86:78:d1:6d:40: 69:41:ed:7e:85:27:f3:e7:5a:4a:20:65:53:12:70:39:eb:25: f8:14:1e:14:cd:44:ba:15:b9:1e:5f:93:dc:7a:4b:b8:c6:a8: 73:52:22:15:35:c0:cc:41:83:04:e9:33:74:a6:3e:50:c9:91: 7b:79:84:f6:47:7d:17:31:13:81:f4:b0:4c:48:f1:cf:fe:25: ef:8a:36:e1:59:7f:1d:31:be:72:0b:a5:e1:87:0e:0f:aa:5a: b6:38:da:a8:33:a3:88:af:91:e2:1f:91:56:1d:51:98:25:78: cd:a3:45:7e:f5:ae:68:eb:2b:4c:1e:29:93:66:8d:c8:2d:b0: e7:18:71:94:6f:79:ba:ea:a0:83:0c:ab:a8:0d:ef:b8:90:95: 9e:33:59:cd:fd:1c:66:25:db:87:d0:41:e3:ff:60:c7:83:02: ad:51:0d:fc:82:e2:8e:70:24:2c:bd:dc:8d:b1:cd:10:32:e9: 41:f2:87:18:b3:97:56:46:3d:ed:2b:95:de:da:e8:c6:0d:f3: fa:33:64:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICMCIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDkxMzA4MTgzN1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNjc3ODJCREE0ODI1NzQ2M0FEQ0RBNkQ3MkYyRUU0MUI1RkQ5NEEx MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBhjpMl/tY9tHewjUCh TewFUqDOvn+Uda2NiO9Jm9zhz36JBuBv2xSyh//9oC/7jKX1GZ0riSca1sM5weFG eN2mgsiPacLChSWIXnh7IlUEu0RwhlAHUWKB2DM1qlAXLEuF8U8JP0mkYjbNqNzG C12LfNTJBjqFx6TaO8MpV+M5N9IKlGFeKDTzrJd+Q3LcjOA4K080rWqrzP7fDbms HRQa9o+Yn6kcWvR3ZVF7u9KJ3cDGIX6iViIGNaJjhw7XCHnYbSI3e3J/zx7Tjr4B F2EikfqZuwLi8ikzYIAYRwNvRpsc8+DZCI2npm5ucHGYLq1nQ+mD6Z9lgBjGCWyn mEkCAwEAAaOCAlMwggJPMB0GA1UdDgQWBBRneCvaSCV0Y63NptcvLuQbX9lKETAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9VRC8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9JTUNMT1VEL1ozZ3Iya2dsZEdPdHphYlhMeTdrRzFfWlNoRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYI KwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBKPAMA0GCSqGSIb3DQEBCwUAA4IB AQAZk5S5c7fFNo/74BGNTMsTUnJhvOz8nfkdNaTGLmaYb6wDPcWUiK3temDJfmhK kt6XhnjRbUBpQe1+hSfz51pKIGVTEnA56yX4FB4UzUS6FbkeX5Pceku4xqhzUiIV NcDMQYME6TN0pj5QyZF7eYT2R30XMROB9LBMSPHP/iXvijbhWX8dMb5yC6Xhhw4P qlq2ONqoM6OIr5HiH5FWHVGYJXjNo0V+9a5o6ytMHimTZo3ILbDnGHGUb3m66qCD DKuoDe+4kJWeM1nN/RxmJduH0EHj/2DHgwKtUQ38guKOcCQsvdyNsc0QMulB8ocY s5dWRj3tK5Xe2ujGDfP6M2Sc -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:43 2024 by rpki-client on console-fra.rpki-client.org