$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer File: mgzAu2MdFRMQI4SQg9lBotvN-mU.cer (raw, json) Hash identifier: VsXXKtLTINbdBEN8MnIuigEO4x+YjNtjvBSF8JrxYmw= Subject key identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1738 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Tue 15 Oct 2024 07:15:19 +0000 Certificate not after: Tue 14 Oct 2025 15:30:23 +0000 Subordinate resources: IP: 160.191.4.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5944 (0x1738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Oct 15 07:15:19 2024 GMT Not After : Oct 14 15:30:23 2025 GMT Subject: CN=9A0CC0BB631D15131023849083D941A2DBCDFA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:ce:e1:7c:11:28:c1:21:f3:2e:94:75:b0: 79:64:71:ea:79:7d:3d:9d:1e:c5:1b:c1:3c:f0:5f: f2:25:0b:cb:ae:16:41:5a:bd:23:98:f0:a8:71:9c: 74:02:f1:4e:47:e1:02:a0:cb:4f:3a:bd:4e:45:c4: 71:13:e6:e6:9b:3c:a6:66:d4:96:ce:8f:38:5b:49: 8e:55:5e:35:e3:34:10:86:2e:ad:0c:0c:b2:e3:74: f5:b0:c9:d5:64:76:a2:ea:68:3b:27:6f:01:37:c0: ee:ce:19:dc:03:bf:07:f1:5d:13:14:7d:69:77:d7: 55:b0:18:4b:14:71:59:c8:51:b1:5c:62:ee:93:0a: 03:70:e6:29:53:52:f6:d7:b5:1b:35:75:fb:68:77: ca:7b:3e:9f:bd:43:16:9b:e9:46:0c:db:ee:e6:f5: 2e:6f:51:ca:6d:a1:4f:79:40:ef:46:43:03:d3:51: a9:3c:81:5c:5c:eb:80:2d:f4:6f:b0:8f:d7:c2:f2: 3f:7a:9a:81:30:89:01:89:eb:07:e6:01:c4:84:0a: 5e:9a:21:7a:d8:d7:f7:a0:f2:35:04:eb:91:c8:e1: a5:75:73:d7:c0:30:3c:87:74:c7:85:57:f8:97:3e: 2b:78:01:79:5b:33:d8:13:90:7f:a6:ff:19:a5:6a: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.4.0/23 Signature Algorithm: sha256WithRSAEncryption 93:76:4d:0e:e0:7a:38:40:0a:43:d5:ca:69:63:05:a7:58:ca: 64:99:69:26:b6:7c:58:ec:7c:01:0f:d7:2a:7e:a3:e6:31:b1: 6f:c7:02:00:df:de:60:67:24:cb:00:bf:13:5a:a1:be:87:d3: e3:dc:fa:d7:49:e8:4b:74:37:c2:bf:d6:1e:d0:1e:28:a9:41: c9:cd:c8:df:b9:8b:a1:75:cb:85:fa:6e:3e:ee:a2:34:9f:13: cf:93:f7:33:1b:9d:04:22:6f:ae:a4:1b:11:48:89:08:10:e2: 18:6c:d2:00:5c:a8:72:26:5f:8c:48:87:3b:9a:55:29:c4:6c: 32:7b:7b:44:0a:90:fc:40:60:41:1d:77:de:d9:f9:fa:53:4d: aa:51:ee:37:76:c9:52:0a:33:37:5c:ef:e9:14:a2:b6:71:b5: 4d:b3:b6:ae:15:f5:4f:bc:f9:d8:f9:59:39:aa:23:1a:f0:5c: 3a:ba:54:59:87:12:b4:a5:36:d4:62:8e:26:b8:93:fc:5d:0b: a0:3d:e2:19:54:02:98:d7:90:1d:3c:99:3d:89:37:f3:e5:88: 9e:0a:8f:0b:be:79:26:f6:11:47:c9:ef:43:24:2b:1a:10:8c: ed:db:ea:e0:49:da:b9:8d:d8:61:46:15:10:68:86:83:5a:c4: 3c:5b:f4:54 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICFzgwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MTAxNTA3MTUxOVoXDTI1MTAxNDE1MzAyM1owMzEx MC8GA1UEAxMoOUEwQ0MwQkI2MzFEMTUxMzEwMjM4NDkwODNEOTQxQTJEQkNERkE2 NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK27zuF8ESjBIfMulHWw eWRx6nl9PZ0exRvBPPBf8iULy64WQVq9I5jwqHGcdALxTkfhAqDLTzq9TkXEcRPm 5ps8pmbUls6POFtJjlVeNeM0EIYurQwMsuN09bDJ1WR2oupoOydvATfA7s4Z3AO/ B/FdExR9aXfXVbAYSxRxWchRsVxi7pMKA3DmKVNS9te1GzV1+2h3yns+n71DFpvp Rgzb7ub1Lm9Rym2hT3lA70ZDA9NRqTyBXFzrgC30b7CP18LyP3qagTCJAYnrB+YB xIQKXpohetjX96DyNQTrkcjhpXVz18AwPId0x4VX+Jc+K3gBeVsz2BOQf6b/GaVq mCkCAwEAAaOCAk4wggJKMB0GA1UdDgQWBBSaDMC7Yx0VExAjhJCD2UGi2836ZTAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1ZS0wvMFYG CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev SU1ZS0wvbWd6QXUyTWRGUk1RSTRTUWc5bEJvdHZOLW1VLm1mdDAxBggrBgEFBQcw DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaC/BDANBgkqhkiG9w0BAQsFAAOCAQEAk3ZN DuB6OEAKQ9XKaWMFp1jKZJlpJrZ8WOx8AQ/XKn6j5jGxb8cCAN/eYGckywC/E1qh vofT49z610noS3Q3wr/WHtAeKKlByc3I37mLoXXLhfpuPu6iNJ8Tz5P3MxudBCJv rqQbEUiJCBDiGGzSAFyociZfjEiHO5pVKcRsMnt7RAqQ/EBgQR133tn5+lNNqlHu N3bJUgozN1zv6RSitnG1TbO2rhX1T7z52PlZOaojGvBcOrpUWYcStKU21GKOJriT /F0LoD3iGVQCmNeQHTyZPYk38+WIngqPC755JvYRR8nvQyQrGhCM7dvq4EnauY3Y YUYVEGiGg1rEPFv0VA== -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:19 2024 by rpki-client on console-fra.rpki-client.org