$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer File: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (raw, json) Hash identifier: J6Gx2U1PXOzP/hVJKu6NfBx5dVWR/NQgnsBaZR4aOok= Subject key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 161F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:30:53 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 160.25.104.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5663 (0x161f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 26 02:30:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:09:61:de:c2:c3:69:3b:42:f8:25:48:a7: 2f:35:12:b3:ea:fd:b6:2d:f6:35:75:49:93:6b:dd: 73:75:a9:48:35:28:de:5f:7d:62:bc:df:4d:54:e5: e9:7b:74:e6:06:c0:1c:52:27:a5:d9:de:7b:9f:4e: 80:68:40:c9:0b:1c:0e:c8:cb:69:a0:21:20:fb:ff: 58:99:b8:dc:a7:1a:97:70:0a:85:0d:14:51:94:6e: 80:3a:9c:d2:0d:c1:ee:2e:02:bf:b6:1b:87:6d:63: 21:7a:ec:09:96:bf:c1:e4:79:8d:53:27:d3:a9:3c: 11:95:6c:a1:08:9f:05:cd:ce:90:6c:cf:c6:db:5b: 09:a0:84:4e:fb:55:1e:0d:aa:b9:40:45:00:7c:be: 80:a0:cd:5b:86:64:98:6d:c2:3c:6d:55:9f:b0:b6: 60:39:86:33:d0:4f:75:0c:0c:f6:21:c4:11:6f:35: 5b:ec:a7:cb:11:11:a6:93:7e:9a:5a:75:4c:71:dc: e1:4a:f1:9c:5f:88:dd:d9:4a:fa:c9:a2:a5:b1:b0: 1b:56:b5:81:7b:61:ea:54:88:d1:35:f9:53:42:fd: 96:db:f9:89:25:77:c1:ea:ee:c3:e8:84:77:fc:09: 4e:b3:c2:12:70:9c:0e:60:0b:f2:4c:c9:c9:06:fd: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/23 Signature Algorithm: sha256WithRSAEncryption cd:c7:0b:3f:ce:31:e1:02:6d:f8:13:ee:a8:15:17:0b:eb:ad: 26:76:5d:06:f5:4c:24:dd:14:b6:af:75:14:93:4f:73:2a:ff: b3:43:5d:0f:4c:a7:05:6a:cf:fd:67:fe:39:3a:96:0d:e2:fa: cb:7d:b9:6d:7c:39:7c:4d:a5:d0:4f:c8:54:6c:26:1a:1a:a4: 59:0c:5e:65:6e:ca:2a:7e:4b:eb:75:87:cd:e9:6e:fe:c9:2c: f0:c3:a1:47:e7:ac:ef:b2:5d:a9:e5:0e:1f:6e:17:77:98:74: 73:00:66:6b:9b:52:40:02:61:28:08:b9:91:79:fe:72:50:c8: e9:4a:8d:7c:26:86:c0:22:43:13:21:7f:ae:57:0c:5c:f7:cb: 0b:32:9d:85:44:a4:99:2d:f5:0d:49:08:aa:95:8c:91:92:94: 27:87:03:af:fc:5c:17:4e:49:46:64:94:f5:b0:3b:a7:25:ec: 66:aa:61:3c:13:68:03:38:c6:1a:ec:a7:38:b0:b9:b5:0c:e5: 91:ff:61:ff:ce:38:73:91:15:02:87:42:f3:09:53:e4:89:f9: 41:11:e4:78:a7:2c:20:5a:c6:6e:f7:5c:24:96:05:4b:7b:03: 4b:4d:05:6e:cf:45:35:97:7b:50:31:f7:a5:db:f9:26:69:3e: 7f:6d:1a:6a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICFh8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyNjAyMzA1M1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoN0U5Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1 MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOPyCWHewsNpO0L4JUin LzUSs+r9ti32NXVJk2vdc3WpSDUo3l99YrzfTVTl6Xt05gbAHFInpdnee59OgGhA yQscDsjLaaAhIPv/WJm43Kcal3AKhQ0UUZRugDqc0g3B7i4Cv7Ybh21jIXrsCZa/ weR5jVMn06k8EZVsoQifBc3OkGzPxttbCaCETvtVHg2quUBFAHy+gKDNW4ZkmG3C PG1Vn7C2YDmGM9BPdQwM9iHEEW81W+ynyxERppN+mlp1THHc4UrxnF+I3dlK+smi pbGwG1a1gXth6lSI0TX5U0L9ltv5iSV3weruw+iEd/wJTrPCEnCcDmAL8kzJyQb9 vl8CAwEAAaOCAlIwggJOMB0GA1UdDgQWBBR+nO8nyN7RNQazOZ2ZLs/2JrV5UTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVDSC8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9DQ0VURUNIL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgGWgwDQYJKoZIhvcNAQELBQADggEB AM3HCz/OMeECbfgT7qgVFwvrrSZ2XQb1TCTdFLavdRSTT3Mq/7NDXQ9MpwVqz/1n /jk6lg3i+st9uW18OXxNpdBPyFRsJhoapFkMXmVuyip+S+t1h83pbv7JLPDDoUfn rO+yXanlDh9uF3eYdHMAZmubUkACYSgIuZF5/nJQyOlKjXwmhsAiQxMhf65XDFz3 ywsynYVEpJkt9Q1JCKqVjJGSlCeHA6/8XBdOSUZklPWwO6cl7GaqYTwTaAM4xhrs pziwubUM5ZH/Yf/OOHORFQKHQvMJU+SJ+UER5HinLCBaxm73XCSWBUt7A0tNBW7P RTWXe1Ax96Xb+SZpPn9tGmo= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org