$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer File: dqLtUg-AVK9-DJnb905Pde1FfDo.cer (raw, json) Hash identifier: Kl6pcvOrLi94zp8NS15gLbDEwVovdMez5+Dtm9/T9PA= Subject key identifier: 76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2F09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:34 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.97.48.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12041 (0x2f09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=76A2ED520F8054AF7E0C99DBF74E4F75ED457C3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:86:b7:4a:c7:58:71:60:2d:f1:7e:d9:06: 1f:a7:ea:ea:1e:86:48:14:d9:4e:60:6d:8a:bc:83: 16:ec:22:69:7b:51:9c:bb:a0:c3:27:33:35:bd:33: 7a:f3:5d:d5:05:34:c0:26:31:9b:f5:d8:89:d5:08: 16:75:56:6d:05:43:7d:22:7c:00:2d:30:4d:15:09: 2e:41:7f:8d:42:f3:7d:58:68:b5:4e:86:81:c1:7f: ce:57:10:73:19:fe:00:ee:6f:a0:42:fb:9d:26:ac: 6f:21:b1:e4:ca:c0:f3:37:3e:e1:fe:19:1f:6c:eb: 09:d6:ab:ef:34:f6:a3:41:28:25:6e:58:d5:33:9c: 5e:41:b1:da:bf:39:0e:62:d9:a3:88:34:b6:44:5e: 4e:b0:da:0e:9a:9b:ee:1a:05:22:b2:f0:ce:18:7d: 52:8a:96:d2:01:57:c6:96:01:ed:fa:b9:38:9e:0f: be:a0:ba:2d:1e:f8:30:7f:4b:22:94:7e:8a:4a:e7: be:81:7d:36:f2:2b:2d:d9:26:14:15:fd:29:26:c8: 48:48:21:a6:5d:d0:d3:54:d0:cd:1e:2f:f5:3c:9e: c6:dc:13:09:6e:bb:ff:86:b7:3e:37:56:09:a5:4e: ab:f2:bd:8e:f6:68:03:68:f6:2f:29:e6:1e:81:02: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.97.48.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:44:8e:c7:92:f7:f4:d1:1b:28:87:0a:73:0e:99:5f:25:98: 06:7d:cc:d2:24:0c:5a:fc:78:cc:f8:55:e0:b9:60:33:9d:a0: fb:c4:7d:0f:00:8c:3b:cd:d8:23:9c:8e:32:e8:3b:2f:7d:fe: 4b:fc:ac:2e:87:6e:73:9b:b3:35:eb:b9:ad:3b:65:f7:f5:1a: d1:40:94:d2:df:39:ff:2f:da:48:6b:63:08:3d:05:7f:ec:2e: 6a:73:df:5d:62:26:3b:1a:3a:f2:b7:60:66:a7:1d:a0:00:22: 95:55:ea:d6:97:c5:81:c7:67:28:0e:8f:be:fd:59:da:17:2a: 54:2d:1b:9e:76:1a:df:d1:ee:f0:ac:80:6b:07:29:a0:13:27: 7e:12:ff:5a:71:91:1d:cb:f7:b5:c7:57:53:c1:44:ca:95:4d: 93:fe:77:88:44:75:8d:d4:56:5f:9e:77:62:3c:ad:84:ec:71: 72:e1:e5:29:6a:fc:e9:e8:03:a4:23:02:7e:e3:f7:a8:b0:5e: 38:6d:8a:4c:d6:80:dd:64:94:fe:55:db:db:f2:c6:e2:07:e3: 1d:11:c4:c5:2e:1c:3c:fb:9f:7c:43:b2:14:f8:e7:ab:b5:05: f9:04:a5:b4:97:54:fa:a8:68:5a:5a:59:4b:50:fa:14:c9:f8: b5:e0:9f:f4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICLwkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczNFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNzZBMkVENTIwRjgwNTRBRjdFMEM5OURCRjc0RTRGNzVFRDQ1N0Mz QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALAWhrdKx1hxYC3xftkG H6fq6h6GSBTZTmBtiryDFuwiaXtRnLugwyczNb0zevNd1QU0wCYxm/XYidUIFnVW bQVDfSJ8AC0wTRUJLkF/jULzfVhotU6GgcF/zlcQcxn+AO5voEL7nSasbyGx5MrA 8zc+4f4ZH2zrCdar7zT2o0EoJW5Y1TOcXkGx2r85DmLZo4g0tkReTrDaDpqb7hoF IrLwzhh9UoqW0gFXxpYB7fq5OJ4PvqC6LR74MH9LIpR+ikrnvoF9NvIrLdkmFBX9 KSbISEghpl3Q01TQzR4v9TyextwTCW67/4a3PjdWCaVOq/K9jvZoA2j2LynmHoEC LiECAwEAAaOCAlgwggJUMB0GA1UdDgQWBBR2ou1SD4BUr34Mmdv3Tk917UV8OjAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVBUkxBQllT Uy8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9QRUFSTEFCWVNTL2RxTHRVZy1BVks5LURKbmI5MDVQZGUxRmZEby5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnYTAwDQYJKoZIhvcNAQEL BQADggEBAHxEjseS9/TRGyiHCnMOmV8lmAZ9zNIkDFr8eMz4VeC5YDOdoPvEfQ8A jDvN2COcjjLoOy99/kv8rC6HbnObszXrua07Zff1GtFAlNLfOf8v2khrYwg9BX/s Lmpz311iJjsaOvK3YGanHaAAIpVV6taXxYHHZygOj779WdoXKlQtG552Gt/R7vCs gGsHKaATJ34S/1pxkR3L97XHV1PBRMqVTZP+d4hEdY3UVl+ed2I8rYTscXLh5Slq /OnoA6QjAn7j96iwXjhtikzWgN1klP5V29vyxuIH4x0RxMUuHDz7n3xDshT456u1 BfkEpbSXVPqoaFpaWUtQ+hTJ+LXgn/Q= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org