$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer File: o55PwFcEngVg5h05adE6Xi8RrNI.cer (raw, json) Hash identifier: CXXsHAb/TSlnRzsuwMk6qKAJl7j3F1zFRn65fRBohlE= Subject key identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2F7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:23:25 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.127.218.0/23 IP: 2401:3a20::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12159 (0x2f7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 02:23:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9c:f4:60:30:47:a4:a8:33:e5:ae:5c:19:82: 2b:48:fd:8f:68:7e:51:fc:6a:72:8e:d0:cf:54:72: 01:c6:98:35:ce:dd:f3:f3:95:e9:ef:d3:c6:3a:22: c0:ce:f7:b2:ce:60:42:0c:a3:03:2c:95:ed:3e:15: 2f:61:ea:c5:34:46:cb:a2:39:6a:58:5e:ce:c8:1f: 6a:01:ef:e1:f2:67:e0:1e:10:ab:47:3b:51:66:3c: 54:1d:0f:0e:d5:16:be:fb:1b:78:3d:80:0b:1d:f6: 0b:10:4a:cf:4a:ae:b7:4b:d5:d1:d9:70:05:56:16: a4:5a:4f:48:01:a3:17:f2:b8:3b:ac:7f:04:68:9b: 42:09:66:e2:15:1a:17:e0:32:cb:1f:1f:8c:bb:97: f1:9f:09:6f:18:c1:11:89:8c:21:d2:10:58:f5:24: 5f:b3:68:41:c5:3c:d2:d8:25:d2:37:8c:4f:4c:b8: 04:95:64:6d:87:fa:18:8a:f8:91:56:ba:95:c5:57: 41:39:d6:78:ab:56:30:67:49:24:9d:e2:cc:ac:e4: 7a:04:70:9b:98:f8:08:4c:99:09:6c:ee:1a:89:0e: 9f:4d:89:3e:57:f4:4b:11:db:58:ef:c6:35:92:09: 1a:80:3b:30:f9:5c:86:e6:3a:15:f2:c7:e9:45:15: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.218.0/23 IPv6: 2401:3a20::/32 Signature Algorithm: sha256WithRSAEncryption 27:3e:1d:4d:57:60:5a:2c:db:61:d8:61:e7:15:61:43:ee:4c: 9b:e1:f8:c2:1c:5b:e1:d9:bf:10:e9:75:23:64:d8:61:fb:ec: b0:06:61:2b:1c:e2:5a:8b:23:b2:b8:91:00:39:6e:c3:f7:4d: ad:40:f7:ad:35:21:82:d9:bb:86:8a:09:f2:e6:1e:db:25:40: 9d:db:fb:6f:52:52:e2:d3:8f:56:c9:20:bc:af:76:1c:fa:51: 94:dd:af:a7:7e:29:dd:d7:d9:ca:9e:fb:6d:ed:48:78:2b:f8: 8d:b1:c3:6c:d1:ad:bc:6f:7e:9b:1c:d9:62:ab:7d:d4:46:70: c7:c1:a9:db:b9:2c:7c:80:29:b5:e2:4c:11:bf:1c:dc:65:a4: 82:74:0c:03:52:36:40:03:8e:b0:2f:7b:7c:cd:d5:1b:87:ee: 34:5a:12:2a:b1:09:89:68:b8:bd:e4:d3:22:8b:2e:43:e2:1c: f8:a2:01:8f:85:0e:01:3d:c1:cc:f5:d8:95:c8:3e:49:9e:2b: fe:32:0d:3d:d3:6b:12:20:7c:1c:31:47:2c:b8:3b:78:d7:a9: c9:c3:fc:cb:fd:e5:37:b9:bc:56:10:8c:bb:fe:ef:f8:00:c4: 1c:7f:cc:ac:8b:31:57:ff:08:0d:39:e3:3a:0a:ec:7e:46:20: 02:f4:66:1e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICL38wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAyMjMyNVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQTM5RTRGQzA1NzA0OUUwNTYwRTYxRDM5NjlEMTNBNUUyRjExQUNE MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPKc9GAwR6SoM+WuXBmC K0j9j2h+Ufxqco7Qz1RyAcaYNc7d8/OV6e/TxjoiwM73ss5gQgyjAyyV7T4VL2Hq xTRGy6I5alhezsgfagHv4fJn4B4Qq0c7UWY8VB0PDtUWvvsbeD2ACx32CxBKz0qu t0vV0dlwBVYWpFpPSAGjF/K4O6x/BGibQglm4hUaF+Ayyx8fjLuX8Z8JbxjBEYmM IdIQWPUkX7NoQcU80tgl0jeMT0y4BJVkbYf6GIr4kVa6lcVXQTnWeKtWMGdJJJ3i zKzkegRwm5j4CEyZCWzuGokOn02JPlf0SxHbWO/GNZIJGoA7MPlchuY6FfLH6UUV SLsCAwEAAaOCAmUwggJhMB0GA1UdDgQWBBSjnk/AVwSeBWDmHTlp0TpeLxGs0jAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURXQUxL LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0NMT1VEV0FMSy9vNTVQd0ZjRW5nVmc1aDA1YWRFNlhpOFJyTkkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ3/aMA0EAgACMAcDBQAkATog MA0GCSqGSIb3DQEBCwUAA4IBAQAnPh1NV2BaLNth2GHnFWFD7kyb4fjCHFvh2b8Q 6XUjZNhh++ywBmErHOJaiyOyuJEAOW7D902tQPetNSGC2buGigny5h7bJUCd2/tv UlLi049WySC8r3Yc+lGU3a+nfind19nKnvtt7Uh4K/iNscNs0a28b36bHNliq33U RnDHwanbuSx8gCm14kwRvxzcZaSCdAwDUjZAA46wL3t8zdUbh+40WhIqsQmJaLi9 5NMiiy5D4hz4ogGPhQ4BPcHM9diVyD5Jniv+Mg0902sSIHwcMUcsuDt416nJw/zL /eU3ubxWEIy7/u/4AMQcf8ysizFX/wgNOeM6Cux+RiAC9GYe -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:50 2024 by rpki-client on console-ams.rpki-client.org