$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer File: fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer (raw, json) Hash identifier: 832oEUr1AwhVzLv2jk2qXcVeywE42CJbf3s0UgJJUL0= Subject key identifier: 7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:28 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 202.5.8.0/22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10502 (0x2906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7E088F89A61632E17D919F943E97A09ABD03C93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:9d:6b:f3:3d:65:2b:10:2a:34:3a:23:cf: 92:21:10:c3:27:dc:02:dd:0d:e8:6c:2b:e5:5b:c0: a1:0f:1b:99:ed:66:46:a1:5d:8e:d6:ba:ef:bd:8f: d9:80:d1:d5:99:93:3c:4d:93:1f:cf:af:f2:e4:4e: 14:1e:b2:f5:f4:95:ab:7c:89:7a:f6:25:c0:d9:10: cb:0c:e9:02:e0:40:28:10:42:1e:fd:76:86:9e:26: af:2c:ce:0c:a6:58:f5:6e:0a:fe:da:cb:79:f9:97: 72:dd:dc:6c:ad:35:6b:b3:a5:67:d2:d0:1a:0c:96: 77:5c:58:29:51:c6:07:78:ab:d4:fa:3f:6f:4f:2d: b9:cd:f6:93:88:59:dd:b5:b2:4f:c0:0d:d5:9d:36: 15:ce:45:ef:48:3a:f1:62:0b:a1:bc:7e:78:90:e7: 4c:e1:db:80:ec:75:cf:d9:c4:53:f4:38:23:dd:20: 38:23:3c:16:28:3b:b0:f2:b2:86:ba:8c:a0:a7:1b: ab:b2:be:0b:da:0f:49:4a:f4:fc:7e:e2:f7:b8:23: 9a:38:67:7d:ce:3a:f1:e9:2c:7b:e3:af:96:90:07: 39:56:62:f7:20:1f:f7:b8:33:c2:44:14:81:b7:85: 15:f7:36:d7:1e:9b:4f:d5:58:d4:c1:6e:7e:51:03: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.5.8.0/22 Signature Algorithm: sha256WithRSAEncryption 11:51:b2:d2:33:6b:be:fc:04:18:e1:fc:18:36:2d:8d:7e:82: cb:9a:7d:a6:ab:93:f3:54:51:94:7a:d4:23:14:b8:3d:af:08: 4b:93:24:4c:a6:a3:49:7a:99:3a:1f:de:26:8b:29:a8:1e:df: 80:2d:60:2c:97:3c:d4:7a:dc:a4:57:3b:fd:4d:77:bf:1e:7c: 4d:45:f2:4e:72:51:81:83:3c:fb:98:b1:4d:3a:30:94:10:42: 25:82:e4:1e:77:cb:86:dd:b5:f6:7b:5f:77:96:be:97:68:a1: de:53:bc:96:b9:f6:eb:e7:54:d5:7e:ff:63:27:fb:29:35:c0: 1a:2d:fb:2a:e2:9d:e9:bc:eb:6b:f4:00:bc:8e:18:8e:0b:5f: 52:9b:95:f8:a2:36:26:db:a7:4f:4b:68:9a:20:e5:b8:6f:ef: 26:65:40:85:5e:96:23:4d:5b:e3:fc:1e:87:ea:99:41:3d:0f: f9:7d:35:4c:ae:02:93:f2:d8:32:1a:b9:e0:f1:36:d8:29:d2: 1b:10:73:c7:db:5f:b2:ee:99:bb:af:a7:e7:c0:c1:be:b6:87: d9:05:a6:c5:2d:03:40:3e:50:2d:47:86:5c:d3:1f:44:35:94: 76:06:53:ab:b6:de:97:af:db:76:3d:22:8c:fe:fd:fa:c5:4c: 15:3e:e4:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKQYwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyOFoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoN0UwODhGODlBNjE2MzJFMTdEOTE5Rjk0M0U5N0EwOUFCRDAzQzkz QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL1TnWvzPWUrECo0OiPP kiEQwyfcAt0N6Gwr5VvAoQ8bme1mRqFdjta6772P2YDR1ZmTPE2TH8+v8uROFB6y 9fSVq3yJevYlwNkQywzpAuBAKBBCHv12hp4mryzODKZY9W4K/trLefmXct3cbK01 a7OlZ9LQGgyWd1xYKVHGB3ir1Po/b08tuc32k4hZ3bWyT8AN1Z02Fc5F70g68WIL obx+eJDnTOHbgOx1z9nEU/Q4I90gOCM8Fig7sPKyhrqMoKcbq7K+C9oPSUr0/H7i 97gjmjhnfc468ekse+OvlpAHOVZi9yAf97gzwkQUgbeFFfc21x6bT9VY1MFuflED lk8CAwEAAaOCAlQwggJQMB0GA1UdDgQWBBR+CI+JphYy4X2Rn5Q+l6CavQPJOzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERUR1JPVVAv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVERUR1JPVVAvZmdpUGlhWVdNdUY5a1otVVBwZWdtcjBEeVRzLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsoFCDANBgkqhkiG9w0BAQsFAAOC AQEAEVGy0jNrvvwEGOH8GDYtjX6Cy5p9pquT81RRlHrUIxS4Pa8IS5MkTKajSXqZ Oh/eJospqB7fgC1gLJc81HrcpFc7/U13vx58TUXyTnJRgYM8+5ixTTowlBBCJYLk HnfLht219ntfd5a+l2ih3lO8lrn26+dU1X7/Yyf7KTXAGi37KuKd6bzra/QAvI4Y jgtfUpuV+KI2JtunT0tomiDluG/vJmVAhV6WI01b4/weh+qZQT0P+X01TK4Ck/LY Mhq54PE22CnSGxBzx9tfsu6Zu6+n58DBvraH2QWmxS0DQD5QLUeGXNMfRDWUdgZT q7bel6/bdj0ijP79+sVMFT7keg== -----END CERTIFICATE-----Generated at Tue May 21 21:12:31 2024 by rpki-client on console-fra.rpki-client.org