$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer File: o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer (raw, json) Hash identifier: cEZ0fakh8j9wExEK0cfnVGUd3CbOKz4tM0yQBHh9IvY= Subject key identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2EE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:33 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 211.79.208.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12005 (0x2ee5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A37C6EE2B0ED0AF8321102E34E14B6A976F7989D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:48:0f:97:22:22:44:d5:90:d6:bd:20:ff: 91:79:dd:25:c6:fa:c3:49:13:b6:9d:0b:1c:ed:e9: fc:00:37:72:fc:9a:74:bc:ad:4b:75:77:7f:82:e5: 56:4b:70:f3:ff:c7:87:c9:51:7f:a1:90:7c:5a:a2: ed:cf:a0:56:5b:e0:85:74:f5:48:14:32:42:d9:a8: 4a:c7:35:fd:78:84:11:37:ce:43:2c:40:f3:29:d0: 39:45:99:de:82:11:0d:ff:fc:2d:cc:80:e2:45:4a: 62:68:3e:a3:76:c2:eb:f6:01:eb:9c:bc:da:13:5c: fd:47:65:95:57:2f:30:c8:7a:a0:ea:aa:12:b9:dd: 5d:58:c9:e1:21:91:89:19:60:5f:6c:e7:77:c7:bc: ca:4d:53:0e:04:96:6f:ee:b3:3d:4f:09:d2:2f:35: 67:21:fb:95:f5:62:53:e1:97:bd:ce:61:09:06:05: f9:34:34:aa:0f:bd:fe:07:99:33:48:ee:88:f3:e9: 23:6c:dd:bf:b3:67:c4:c3:f3:02:25:80:f2:17:1f: 31:df:ae:09:69:84:e6:60:ad:f5:2f:d3:18:01:6c: 0f:c4:19:cc:d0:d1:e8:13:fd:f9:df:fa:a5:cc:2a: 9a:43:19:c1:33:c9:20:bb:ad:cb:56:43:19:9d:82: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.208.0/20 Signature Algorithm: sha256WithRSAEncryption 00:95:27:00:c0:91:2b:df:ff:bf:41:51:65:f0:bc:ee:01:f3: 8f:d8:4e:e7:19:fe:21:7d:2d:2b:0a:5f:4e:0c:59:57:19:ce: 47:b5:61:d6:fb:81:ff:ad:c0:e6:00:0f:f1:ad:8d:86:90:f4: e4:c9:72:9d:5c:da:33:9b:73:dc:da:04:c9:d4:dd:0e:cc:9f: cd:38:1b:df:23:0b:d8:ec:c3:49:3e:01:9a:c3:f6:b1:66:41: a9:91:79:53:82:c0:6b:47:40:ee:0f:22:48:75:05:f8:e5:a0: 13:50:bf:4f:01:fc:4d:55:dc:b8:a8:ae:23:7d:02:01:86:28: f8:d8:29:5c:8a:5f:a2:ab:85:a0:82:16:02:8b:a7:13:a9:7c: 95:74:11:43:ec:67:22:a6:d0:1c:7b:65:cb:39:31:46:96:a3: b0:34:fe:dc:cf:f3:83:d7:88:78:20:51:a8:ac:1c:a2:9b:27: e7:2e:bd:06:6a:77:4f:1b:c1:e7:41:05:9f:c4:db:af:ef:ae: 9b:9e:35:e1:c2:18:07:87:5b:9c:c5:91:15:36:c2:60:2a:d9: 62:48:39:61:8a:fe:1c:7e:1b:dd:53:3b:19:ba:65:d9:9b:d4: 00:1b:0c:75:30:2d:f2:58:be:d4:b1:e0:42:00:93:a4:c7:a7: be:3f:14:07 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgICLuUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczM1oXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQTM3QzZFRTJCMEVEMEFGODMyMTEwMkUzNEUxNEI2QTk3NkY3OTg5 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN+dSA+XIiJE1ZDWvSD/ kXndJcb6w0kTtp0LHO3p/AA3cvyadLytS3V3f4LlVktw8//Hh8lRf6GQfFqi7c+g VlvghXT1SBQyQtmoSsc1/XiEETfOQyxA8ynQOUWZ3oIRDf/8LcyA4kVKYmg+o3bC 6/YB65y82hNc/UdllVcvMMh6oOqqErndXVjJ4SGRiRlgX2znd8e8yk1TDgSWb+6z PU8J0i81ZyH7lfViU+GXvc5hCQYF+TQ0qg+9/geZM0juiPPpI2zdv7NnxMPzAiWA 8hcfMd+uCWmE5mCt9S/TGAFsD8QZzNDR6BP9+d/6pcwqmkMZwTPJILuty1ZDGZ2C v7kCAwEAAaOCAkowggJGMB0GA1UdDgQWBBSjfG7isO0K+DIRAuNOFLapdveYnTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUJNLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lC TS9vM3h1NHJEdEN2Z3lFUUxqVGhTMnFYYjNtSjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQE00/QMA0GCSqGSIb3DQEBCwUAA4IBAQAAlScAwJEr 3/+/QVFl8LzuAfOP2E7nGf4hfS0rCl9ODFlXGc5HtWHW+4H/rcDmAA/xrY2GkPTk yXKdXNozm3Pc2gTJ1N0OzJ/NOBvfIwvY7MNJPgGaw/axZkGpkXlTgsBrR0DuDyJI dQX45aATUL9PAfxNVdy4qK4jfQIBhij42Clcil+iq4WgghYCi6cTqXyVdBFD7Gci ptAce2XLOTFGlqOwNP7cz/OD14h4IFGorByimyfnLr0GandPG8HnQQWfxNuv766b njXhwhgHh1ucxZEVNsJgKtliSDlhiv4cfhvdUzsZumXZm9QAGwx1MC3yWL7UseBC AJOkx6e+PxQH -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:50 2024 by rpki-client on console-ams.rpki-client.org