$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer File: mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer (raw, json) Hash identifier: zszkFIOlrBfc0UOY1p05ee/ey/GeDVjIAKN90bLT/UM= Subject key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 27F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:13 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: AS: 131633 IP: 103.122.20.0/22 IP: 2403:86c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10226 (0x27f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:11:31:53:4b:52:ab:84:b3:fb:61:c4:22:2f: 05:f0:77:27:4f:76:e7:b1:39:0d:eb:7f:67:74:6e: 4f:44:f6:7a:a9:58:6a:1f:72:02:a7:b1:f8:3e:41: 42:9b:78:9b:9a:35:24:fe:df:cc:a1:cd:37:79:c4: 0b:a5:37:8b:ab:44:1f:7a:3b:f4:3e:1c:07:bb:fe: 66:0c:ed:5f:8b:e7:1e:a1:ea:8d:87:d9:2b:d3:d2: ae:20:67:f7:4c:72:33:b8:6c:2c:9b:fb:bc:5a:e5: 48:99:83:49:a3:6e:91:73:a0:82:d7:76:af:f0:01: 46:62:f0:7e:fe:50:68:ec:4d:3c:d1:c6:4e:7c:89: 04:e2:55:53:86:81:d0:20:50:57:1b:96:12:0b:57: b5:2a:7e:bd:11:d6:18:59:eb:2b:5e:9d:51:9e:5d: c3:18:60:09:66:01:f4:5e:48:b6:01:8a:85:ee:07: 6e:6d:c9:bc:94:8d:09:6a:b5:9e:45:7e:52:a1:06: ed:8c:9e:f9:ea:55:42:2e:55:14:0c:0e:1a:95:85: 54:97:ca:a5:0d:75:06:54:eb:5d:3c:fd:34:30:d4: 97:d5:41:93:70:8f:8a:76:dc:b1:17:eb:b2:ef:15: b4:4a:87:53:46:21:76:52:c2:39:3f:06:3d:39:07: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131633 sbgp-ipAddrBlock: critical IPv4: 103.122.20.0/22 IPv6: 2403:86c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:dc:ba:4d:a6:94:77:26:8e:8c:f5:9b:8c:ae:00:3b:b5:0b: e2:44:47:94:f5:48:f6:d3:9c:8d:b4:83:92:92:bd:25:d4:1a: d2:ad:0d:ba:48:4c:f0:71:39:a9:61:09:0c:0d:82:59:45:24: 29:30:ff:a9:65:23:92:74:eb:bf:d1:7a:14:34:2a:4d:c2:54: 2e:4a:0a:9b:5a:e9:30:cf:7e:5d:dc:ad:a9:e9:63:89:d8:5d: fb:15:d4:bd:77:f0:2d:b9:1e:79:db:b9:b4:e6:24:1b:21:f8: b0:f2:41:c5:b7:0b:fc:92:0e:67:be:4e:f5:74:bd:b6:9a:1f: 2d:cc:07:14:98:c2:86:e4:3a:20:fa:4d:03:d5:44:4e:2a:52: 58:b9:a3:33:56:6e:89:97:38:8f:58:fa:0a:82:59:22:c6:f5: 3f:9a:67:09:46:79:12:0d:ac:64:a4:2e:f4:76:d9:3e:c2:f5: b7:61:5a:f5:fc:42:e5:ff:aa:78:38:6f:08:e2:26:31:87:bc: a7:f9:b7:f2:92:66:41:6b:57:53:50:35:87:5f:d4:50:b2:f3: 1b:0a:dc:b0:1c:c8:de:d2:fc:38:c3:6c:47:16:4d:66:87:09: cc:60:4f:f1:1c:77:68:32:3d:94:86:65:3e:d6:d2:52:27:bd: 8b:09:72:65 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICJ/IwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExM1oXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoOTkzRjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOMRMVNLUquEs/thxCIv BfB3J09257E5Det/Z3RuT0T2eqlYah9yAqex+D5BQpt4m5o1JP7fzKHNN3nEC6U3 i6tEH3o79D4cB7v+ZgztX4vnHqHqjYfZK9PSriBn90xyM7hsLJv7vFrlSJmDSaNu kXOggtd2r/ABRmLwfv5QaOxNPNHGTnyJBOJVU4aB0CBQVxuWEgtXtSp+vRHWGFnr K16dUZ5dwxhgCWYB9F5ItgGKhe4Hbm3JvJSNCWq1nkV+UqEG7Yye+epVQi5VFAwO GpWFVJfKpQ11BlTrXTz9NDDUl9VBk3CPinbcsRfrsu8VtEqHU0YhdlLCOT8GPTkH jrkCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBSZP3KA8fm2VDndZa37aMoNbJm+xTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJBSE9T VC8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9TQUtVUkFIT1NUL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgIxMC4GCCsGAQUFBwEHAQH/BB8w HTAMBAIAATAGAwQCZ3oUMA0EAgACMAcDBQAkA4bAMA0GCSqGSIb3DQEBCwUAA4IB AQB93LpNppR3Jo6M9ZuMrgA7tQviREeU9Uj205yNtIOSkr0l1BrSrQ26SEzwcTmp YQkMDYJZRSQpMP+pZSOSdOu/0XoUNCpNwlQuSgqbWukwz35d3K2p6WOJ2F37FdS9 d/AtuR5527m05iQbIfiw8kHFtwv8kg5nvk71dL22mh8tzAcUmMKG5Dog+k0D1URO KlJYuaMzVm6JlziPWPoKglkixvU/mmcJRnkSDaxkpC70dtk+wvW3YVr1/ELl/6p4 OG8I4iYxh7yn+bfykmZBa1dTUDWHX9RQsvMbCtywHMje0vw4w2xHFk1mhwnMYE/x HHdoMj2UhmU+1tJSJ72LCXJl -----END CERTIFICATE-----Generated at Tue May 21 08:01:42 2024 by rpki-client on console-fra.rpki-client.org