$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer File: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (raw, json) Hash identifier: eCIocOZjzfwVVcrHUEs5L1QeXfRMfWalOPDrDem813Y= Subject key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 16C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Tue 24 Sep 2024 06:19:47 +0000 Certificate not after: Tue 23 Sep 2025 15:30:20 +0000 Subordinate resources: IP: 160.187.100.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5829 (0x16c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Sep 24 06:19:47 2024 GMT Not After : Sep 23 15:30:20 2025 GMT Subject: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:ba:8c:f3:9b:ff:0e:28:4f:86:b3:47:ee: 04:6e:c6:b7:a9:03:a3:ef:2c:a1:8c:f4:2f:3d:07: 4b:67:67:f7:11:52:25:a1:15:41:25:f1:2e:83:c0: bd:ff:5b:04:73:ab:41:5e:40:12:da:0a:1d:93:ce: 38:36:b7:0e:3a:42:78:c7:74:e5:b1:7b:51:4a:78: a7:50:03:b2:d3:4b:10:7f:05:db:9a:10:6c:55:60: c7:ae:38:b7:84:1b:c0:86:c3:07:a3:e3:73:e6:eb: 07:03:7a:be:b6:95:b7:9f:30:8c:a2:a2:8f:5d:72: 78:a6:e1:df:6a:26:21:52:02:d6:ff:d6:f5:fc:a4: 5a:e9:01:b9:e2:db:cb:84:3e:a8:87:47:64:e6:a0: fe:ed:a6:c4:11:49:65:e9:40:ce:57:55:58:a9:92: 6e:10:e3:30:db:68:e4:e1:f5:3a:b6:6e:d6:08:c9: 40:95:7f:4d:68:b8:41:de:86:17:a1:b5:ee:96:e0: 38:9b:98:15:2f:63:3d:14:18:4a:2d:9b:c3:43:34: 99:10:69:db:4b:33:6c:3d:21:ca:33:7f:45:81:8a: 0e:1f:9e:6a:4e:65:03:d5:27:f6:3a:3c:6f:97:71: 33:e5:d1:53:6a:c3:ab:a4:df:ef:a4:00:a6:9c:e2: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.100.0/23 Signature Algorithm: sha256WithRSAEncryption 26:c3:75:af:7a:a4:ed:60:ad:ce:d3:ae:c9:4e:54:8d:36:98: 75:7f:77:a2:55:9f:57:14:d1:b4:ac:fc:6a:1f:66:32:03:33: ce:c1:56:92:d6:0b:41:68:6f:c1:ca:5a:bc:a9:dd:77:3e:58: 77:b3:1c:1e:35:8e:45:f9:2a:a5:a1:e0:12:07:68:6f:8c:40: ca:74:c3:e6:34:b4:04:f1:02:80:4f:f7:a2:b8:d8:05:9d:22: 57:eb:e6:27:4d:85:49:a7:6d:98:ae:34:6c:61:6e:b4:93:2a: 08:ac:57:79:0f:2f:32:6c:89:8c:db:10:ce:92:07:ab:1b:c0: 97:9d:7c:4d:01:44:ba:55:47:08:e3:38:0b:9a:71:49:8f:fe: a8:2d:2c:83:1a:a0:14:83:39:0a:6f:ec:d5:8f:26:5e:44:d1: df:c0:db:47:94:52:be:c0:b1:10:ca:15:09:36:ea:97:43:9a: 3d:e6:71:89:fa:13:3b:43:d3:f7:ce:fc:98:ef:6e:b8:10:4d: d6:5d:bd:ce:a3:8c:fc:f8:f0:ae:48:ee:fc:09:03:34:ee:10: 3c:b6:ac:a0:4e:94:de:a6:e9:e2:79:c0:20:cf:d1:a9:78:76: ad:27:3f:dc:f6:dd:56:80:ef:9f:51:66:9c:2a:a7:fc:d5:26: d1:9b:d0:e5 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICFsUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDkyNDA2MTk0N1oXDTI1MDkyMzE1MzAyMFowMzEx MC8GA1UEAxMoNkEyQjEzOTZDMTQyREE2NzExNTE4ODc1RTkwQzRBRUM5MEIwRjVD NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ9zuozzm/8OKE+Gs0fu BG7Gt6kDo+8soYz0Lz0HS2dn9xFSJaEVQSXxLoPAvf9bBHOrQV5AEtoKHZPOODa3 DjpCeMd05bF7UUp4p1ADstNLEH8F25oQbFVgx644t4QbwIbDB6Pjc+brBwN6vraV t58wjKKij11yeKbh32omIVIC1v/W9fykWukBueLby4Q+qIdHZOag/u2mxBFJZelA zldVWKmSbhDjMNto5OH1OrZu1gjJQJV/TWi4Qd6GF6G17pbgOJuYFS9jPRQYSi2b w0M0mRBp20szbD0hyjN/RYGKDh+eak5lA9Un9jo8b5dxM+XRU2rDq6Tf76QAppzi Vf0CAwEAAaOCAlgwggJUMB0GA1UdDgQWBBRqKxOWwULaZxFRiHXpDErskLD1xDAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9UX1RGTl9D Ty8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9OT1RfVEZOX0NPL2Fpc1Rsc0ZDMm1jUlVZaDE2UXhLN0pDdzljUS5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu2QwDQYJKoZIhvcNAQEL BQADggEBACbDda96pO1grc7TrslOVI02mHV/d6JVn1cU0bSs/GofZjIDM87BVpLW C0Fob8HKWryp3Xc+WHezHB41jkX5KqWh4BIHaG+MQMp0w+Y0tATxAoBP96K42AWd Ilfr5idNhUmnbZiuNGxhbrSTKgisV3kPLzJsiYzbEM6SB6sbwJedfE0BRLpVRwjj OAuacUmP/qgtLIMaoBSDOQpv7NWPJl5E0d/A20eUUr7AsRDKFQk26pdDmj3mcYn6 EztD0/fO/JjvbrgQTdZdvc6jjPz48K5I7vwJAzTuEDy2rKBOlN6m6eJ5wCDP0al4 dq0nP9z23VaA759RZpwqp/zVJtGb0OU= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:43 2024 by rpki-client on console-fra.rpki-client.org