$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer File: gCumEj6hI_Q52pHKPeWlrgqkE3g.cer (raw, json) Hash identifier: NbXoVJfBj2p8DtgVVG14rROqgd17IPmv+2VdrOqx+2o= Subject key identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2F05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:34 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 131610 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12037 (0x2f05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:19:e0:ff:3b:32:ba:f8:02:1c:c1:2c:fd: cc:e1:be:fa:f5:32:f2:ac:53:db:3c:a6:9f:88:6b: d9:33:d8:1d:92:07:79:5e:3d:a2:4a:01:56:fa:c7: ce:34:46:27:40:7a:7c:0b:9a:5d:99:73:54:cb:1a: eb:97:a4:16:f4:16:3d:f0:fc:be:5b:b4:16:a0:05: 2b:41:23:e8:93:dd:c4:4c:1f:ce:5a:51:0c:e6:fd: 8c:ed:42:61:1e:1d:48:61:44:8f:44:a3:6b:5c:51: 40:d0:bf:d7:b2:85:53:85:10:6e:31:94:2c:d3:da: 84:8e:2f:eb:d1:50:a0:a5:56:4b:e2:31:70:46:a0: ba:b2:67:8a:3c:72:51:7f:92:d9:5e:c8:8b:04:e6: 17:22:61:2f:33:4a:0e:73:33:9e:78:04:55:8f:d4: c9:c7:1e:17:17:78:2e:25:26:77:5c:f5:30:37:5d: 95:84:0c:79:04:1a:74:19:b2:eb:13:11:a8:5c:03: 1a:e2:bb:f1:b9:e0:88:6c:14:26:23:c0:2f:f3:d8: 49:f1:ab:fc:10:da:b5:61:54:4d:05:97:38:a7:ea: 36:c7:cf:5a:54:25:6f:dc:df:1f:44:a6:d3:58:5a: 91:4e:c9:87:9d:a9:44:d1:ac:25:9a:30:3f:41:dc: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131610 Signature Algorithm: sha256WithRSAEncryption 5e:44:ac:56:01:e2:d0:01:d4:b3:a9:38:e0:79:8c:54:09:fe: 22:62:6a:27:5c:c6:d3:df:04:b3:b3:69:f8:06:ec:b9:f8:f0: c8:5b:02:79:88:b7:00:ea:77:cb:fd:45:39:d6:1e:43:8a:f4: e1:73:7b:06:30:d2:6e:e0:7a:d6:3c:5a:c9:d2:fd:c4:5d:e3: 23:b4:f3:d7:7e:7d:38:91:42:b7:0c:e6:34:51:e1:37:df:28: 73:1f:f9:1e:d1:6c:b8:0e:2f:e6:c4:ac:97:5a:80:04:11:9a: 61:a1:82:da:e2:08:f7:2a:e6:a5:36:1e:a0:21:03:7f:8a:73: 54:a1:e7:1d:96:47:1a:4e:5e:84:ef:32:2d:e9:f5:7b:c3:85: 5f:f5:dd:85:5b:39:8f:d8:e2:32:2d:54:cd:e0:f1:bf:71:87: cb:04:0f:d3:c6:3c:75:b2:14:8d:c2:54:91:7f:3d:ed:d5:e0: 0b:6f:f2:2c:48:1a:95:61:f0:c2:94:ce:04:11:3f:e4:54:ac: f2:bf:34:27:37:a4:7a:f0:21:7f:ee:c5:2d:ae:3d:ed:cf:51: d2:84:9c:7d:e1:4c:8d:43:c8:f9:a3:ac:96:c8:5c:00:b0:d2: ea:80:20:7b:5c:cc:ac:c3:7f:74:9b:59:44:27:4a:db:5f:2f: e5:e9:84:27 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICLwUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczNFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoODAyQkE2MTIzRUExMjNGNDM5REE5MUNBM0RFNUE1QUUwQUE0MTM3 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/mGeD/OzK6+AIcwSz9 zOG++vUy8qxT2zymn4hr2TPYHZIHeV49okoBVvrHzjRGJ0B6fAuaXZlzVMsa65ek FvQWPfD8vlu0FqAFK0Ej6JPdxEwfzlpRDOb9jO1CYR4dSGFEj0Sja1xRQNC/17KF U4UQbjGULNPahI4v69FQoKVWS+IxcEagurJnijxyUX+S2V7IiwTmFyJhLzNKDnMz nngEVY/UycceFxd4LiUmd1z1MDddlYQMeQQadBmy6xMRqFwDGuK78bngiGwUJiPA L/PYSfGr/BDatWFUTQWXOKfqNsfPWlQlb9zfH0Sm01hakU7Jh52pRNGsJZowP0Hc sAcCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBSAK6YSPqEj9Dnakco95aWuCqQTeDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU5TT05ORVQv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQU5TT05ORVQvZ0N1bUVqNmhJX1E1MnBIS1BlV2xyZ3FrRTNnLm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCAhowDQYJKoZIhvcNAQELBQADggEBAF5E rFYB4tAB1LOpOOB5jFQJ/iJiaidcxtPfBLOzafgG7Ln48MhbAnmItwDqd8v9RTnW HkOK9OFzewYw0m7getY8WsnS/cRd4yO089d+fTiRQrcM5jRR4TffKHMf+R7RbLgO L+bErJdagAQRmmGhgtriCPcq5qU2HqAhA3+Kc1Sh5x2WRxpOXoTvMi3p9XvDhV/1 3YVbOY/Y4jItVM3g8b9xh8sED9PGPHWyFI3CVJF/Pe3V4Atv8ixIGpVh8MKUzgQR P+RUrPK/NCc3pHrwIX/uxS2uPe3PUdKEnH3hTI1DyPmjrJbIXACw0uqAIHtczKzD f3SbWUQnSttfL+XphCc= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:44 2024 by rpki-client on console-fra.rpki-client.org