$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer File: o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer (raw, json) Hash identifier: XXgpMbQAUqH1t0rCBiJv6a0IHdcCC6wom9qxv3EzBJc= Subject key identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 285C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:19 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 211.79.208.0/20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10332 (0x285c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A37C6EE2B0ED0AF8321102E34E14B6A976F7989D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:48:0f:97:22:22:44:d5:90:d6:bd:20:ff: 91:79:dd:25:c6:fa:c3:49:13:b6:9d:0b:1c:ed:e9: fc:00:37:72:fc:9a:74:bc:ad:4b:75:77:7f:82:e5: 56:4b:70:f3:ff:c7:87:c9:51:7f:a1:90:7c:5a:a2: ed:cf:a0:56:5b:e0:85:74:f5:48:14:32:42:d9:a8: 4a:c7:35:fd:78:84:11:37:ce:43:2c:40:f3:29:d0: 39:45:99:de:82:11:0d:ff:fc:2d:cc:80:e2:45:4a: 62:68:3e:a3:76:c2:eb:f6:01:eb:9c:bc:da:13:5c: fd:47:65:95:57:2f:30:c8:7a:a0:ea:aa:12:b9:dd: 5d:58:c9:e1:21:91:89:19:60:5f:6c:e7:77:c7:bc: ca:4d:53:0e:04:96:6f:ee:b3:3d:4f:09:d2:2f:35: 67:21:fb:95:f5:62:53:e1:97:bd:ce:61:09:06:05: f9:34:34:aa:0f:bd:fe:07:99:33:48:ee:88:f3:e9: 23:6c:dd:bf:b3:67:c4:c3:f3:02:25:80:f2:17:1f: 31:df:ae:09:69:84:e6:60:ad:f5:2f:d3:18:01:6c: 0f:c4:19:cc:d0:d1:e8:13:fd:f9:df:fa:a5:cc:2a: 9a:43:19:c1:33:c9:20:bb:ad:cb:56:43:19:9d:82: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.208.0/20 Signature Algorithm: sha256WithRSAEncryption 08:98:8e:c4:01:4a:54:79:5f:74:0d:b1:7f:d8:b3:c8:b5:e2: 45:76:03:71:81:cd:f8:8d:3b:f8:ee:ea:da:ca:30:44:e2:66: bb:74:0b:8d:9c:db:33:e4:48:66:87:58:55:0b:91:94:56:bc: b1:79:39:b7:8d:6a:01:4d:7f:16:e8:22:19:0a:08:dd:ac:ea: 63:39:53:e4:c8:8f:39:9c:a0:13:79:ad:e9:d4:39:7b:d8:5f: 70:8a:55:91:36:b8:e6:b3:eb:5c:6f:0b:54:8c:e1:57:f7:6c: 40:92:1d:55:e8:f8:de:0a:f2:c6:8a:b1:e1:92:4b:bf:1a:fc: 7a:15:85:7a:c5:8c:bc:fa:1c:4c:b8:02:6b:96:dc:96:29:c2: 1e:33:cd:ad:5b:f6:ea:fc:ad:6d:2c:c6:34:a6:7e:b5:e3:e6: b7:f5:46:3c:5c:48:66:86:68:ef:7c:67:29:f0:dc:c7:04:38: 95:34:94:ae:6b:ec:df:19:49:71:e1:e0:a6:66:9f:46:e9:bb: f6:55:19:db:6c:f3:b4:e6:6c:ff:1f:ab:9c:01:c0:dd:ab:ea: de:95:b0:89:38:1f:77:33:6a:34:63:c6:85:31:8f:66:a4:8a: 18:ff:27:0e:fd:cd:db:19:a2:63:9d:84:94:a1:f6:19:9e:a2: f4:8e:12:de -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgICKFwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExOVoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoQTM3QzZFRTJCMEVEMEFGODMyMTEwMkUzNEUxNEI2QTk3NkY3OTg5 RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN+dSA+XIiJE1ZDWvSD/ kXndJcb6w0kTtp0LHO3p/AA3cvyadLytS3V3f4LlVktw8//Hh8lRf6GQfFqi7c+g VlvghXT1SBQyQtmoSsc1/XiEETfOQyxA8ynQOUWZ3oIRDf/8LcyA4kVKYmg+o3bC 6/YB65y82hNc/UdllVcvMMh6oOqqErndXVjJ4SGRiRlgX2znd8e8yk1TDgSWb+6z PU8J0i81ZyH7lfViU+GXvc5hCQYF+TQ0qg+9/geZM0juiPPpI2zdv7NnxMPzAiWA 8hcfMd+uCWmE5mCt9S/TGAFsD8QZzNDR6BP9+d/6pcwqmkMZwTPJILuty1ZDGZ2C v7kCAwEAAaOCAkowggJGMB0GA1UdDgQWBBSjfG7isO0K+DIRAuNOFLapdveYnTAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUJNLzBUBggr BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lC TS9vM3h1NHJEdEN2Z3lFUUxqVGhTMnFYYjNtSjAubWZ0MDEGCCsGAQUFBzANhiVo dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQE00/QMA0GCSqGSIb3DQEBCwUAA4IBAQAImI7EAUpU eV90DbF/2LPIteJFdgNxgc34jTv47urayjBE4ma7dAuNnNsz5Ehmh1hVC5GUVryx eTm3jWoBTX8W6CIZCgjdrOpjOVPkyI85nKATea3p1Dl72F9wilWRNrjms+tcbwtU jOFX92xAkh1V6PjeCvLGirHhkku/Gvx6FYV6xYy8+hxMuAJrltyWKcIeM82tW/bq /K1tLMY0pn614+a39UY8XEhmhmjvfGcp8NzHBDiVNJSua+zfGUlx4eCmZp9G6bv2 VRnbbPO05mz/H6ucAcDdq+relbCJOB93M2o0Y8aFMY9mpIoY/ycO/c3bGaJjnYSU ofYZnqL0jhLe -----END CERTIFICATE-----Generated at Tue May 21 23:31:17 2024 by rpki-client on console-ams.rpki-client.org