$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer File: gCumEj6hI_Q52pHKPeWlrgqkE3g.cer (raw, json) Hash identifier: yTjbpjXwu4gH6rSUtQTUaStDNZvZVqWp+MyU+INOsFk= Subject key identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Thu 28 Dec 2023 20:38:16 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: AS: 131610 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 11:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10999 (0x2af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Dec 28 20:38:16 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:19:e0:ff:3b:32:ba:f8:02:1c:c1:2c:fd: cc:e1:be:fa:f5:32:f2:ac:53:db:3c:a6:9f:88:6b: d9:33:d8:1d:92:07:79:5e:3d:a2:4a:01:56:fa:c7: ce:34:46:27:40:7a:7c:0b:9a:5d:99:73:54:cb:1a: eb:97:a4:16:f4:16:3d:f0:fc:be:5b:b4:16:a0:05: 2b:41:23:e8:93:dd:c4:4c:1f:ce:5a:51:0c:e6:fd: 8c:ed:42:61:1e:1d:48:61:44:8f:44:a3:6b:5c:51: 40:d0:bf:d7:b2:85:53:85:10:6e:31:94:2c:d3:da: 84:8e:2f:eb:d1:50:a0:a5:56:4b:e2:31:70:46:a0: ba:b2:67:8a:3c:72:51:7f:92:d9:5e:c8:8b:04:e6: 17:22:61:2f:33:4a:0e:73:33:9e:78:04:55:8f:d4: c9:c7:1e:17:17:78:2e:25:26:77:5c:f5:30:37:5d: 95:84:0c:79:04:1a:74:19:b2:eb:13:11:a8:5c:03: 1a:e2:bb:f1:b9:e0:88:6c:14:26:23:c0:2f:f3:d8: 49:f1:ab:fc:10:da:b5:61:54:4d:05:97:38:a7:ea: 36:c7:cf:5a:54:25:6f:dc:df:1f:44:a6:d3:58:5a: 91:4e:c9:87:9d:a9:44:d1:ac:25:9a:30:3f:41:dc: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131610 Signature Algorithm: sha256WithRSAEncryption 79:c3:ba:3e:ea:c9:ac:61:2f:63:18:99:e7:1b:50:06:87:ae: f7:dc:7f:23:6d:a8:4d:c8:b3:3d:8a:f2:82:82:24:79:de:ac: d1:a1:7d:4d:3e:18:d3:47:5c:32:a5:11:ce:c2:ad:52:49:5b: dc:c0:ec:ea:0f:e3:73:f4:55:a1:fd:c7:18:e3:4d:34:bf:5c: d6:c6:f3:c7:83:ab:59:7b:c3:1b:03:95:e4:67:80:2e:a0:9a: 91:5f:2c:1d:4d:45:f4:58:4b:d4:86:5a:37:16:9d:27:a4:97: 76:31:c0:72:90:5a:fc:ef:28:39:63:8e:5d:83:36:5c:28:8b: 41:3c:67:8f:c7:87:69:9b:8f:80:d8:3f:30:b2:f6:00:05:96: 6e:fc:ba:4e:9c:bf:e5:b2:fb:f9:4f:1f:35:b7:1f:a2:3a:81: 72:4f:82:c0:d9:c8:85:6b:45:44:50:5f:59:4d:0c:9a:34:66: 98:5f:de:29:3f:04:28:1b:e3:9f:32:90:74:40:c6:e7:ae:14: f8:56:a4:64:a2:c8:7f:4d:4c:49:9f:32:83:02:31:ed:07:9d: d9:a0:a8:06:35:9d:30:66:f8:4d:9c:74:e7:76:c1:8f:a8:24: e0:2d:1f:aa:f9:5b:5a:73:04:27:6d:7c:c1:fb:45:f7:26:02: ad:3e:ee:ac -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICKvcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMTIyODIwMzgxNloXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoODAyQkE2MTIzRUExMjNGNDM5REE5MUNBM0RFNUE1QUUwQUE0MTM3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/mGeD/OzK6+AIcwSz9 zOG++vUy8qxT2zymn4hr2TPYHZIHeV49okoBVvrHzjRGJ0B6fAuaXZlzVMsa65ek FvQWPfD8vlu0FqAFK0Ej6JPdxEwfzlpRDOb9jO1CYR4dSGFEj0Sja1xRQNC/17KF U4UQbjGULNPahI4v69FQoKVWS+IxcEagurJnijxyUX+S2V7IiwTmFyJhLzNKDnMz nngEVY/UycceFxd4LiUmd1z1MDddlYQMeQQadBmy6xMRqFwDGuK78bngiGwUJiPA L/PYSfGr/BDatWFUTQWXOKfqNsfPWlQlb9zfH0Sm01hakU7Jh52pRNGsJZowP0Hc sAcCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBSAK6YSPqEj9Dnakco95aWuCqQTeDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU5TT05ORVQv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQU5TT05ORVQvZ0N1bUVqNmhJX1E1MnBIS1BlV2xyZ3FrRTNnLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCAhowDQYJKoZIhvcNAQELBQADggEBAHnD uj7qyaxhL2MYmecbUAaHrvfcfyNtqE3Isz2K8oKCJHnerNGhfU0+GNNHXDKlEc7C rVJJW9zA7OoP43P0VaH9xxjjTTS/XNbG88eDq1l7wxsDleRngC6gmpFfLB1NRfRY S9SGWjcWnSekl3YxwHKQWvzvKDljjl2DNlwoi0E8Z4/Hh2mbj4DYPzCy9gAFlm78 uk6cv+Wy+/lPHzW3H6I6gXJPgsDZyIVrRURQX1lNDJo0Zphf3ik/BCgb458ykHRA xueuFPhWpGSiyH9NTEmfMoMCMe0HndmgqAY1nTBm+E2cdOd2wY+oJOAtH6r5W1pz BCdtfMH7RfcmAq0+7qw= -----END CERTIFICATE-----Generated at Tue May 7 15:44:18 2024 by rpki-client on console-ams.rpki-client.org