$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer File: synakmj8_VTZ84oB7Qz3CSu2kAw.cer (raw, json) Hash identifier: 34YVQJQ9FXZ1+xoSPkUmfDHkg6DQ77vH8sr1BCo6Y/s= Subject key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2EB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:30 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: AS: 63898 IP: 103.158.78.0/23 IP: 2406:b4c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Sep 2024 02:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11953 (0x2eb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:e5:d4:b2:85:c2:ed:64:6f:04:49:c4:a3: 9f:60:f3:ac:e5:7c:c6:da:16:0a:c9:f0:cf:fe:43: 54:8e:18:4b:23:6c:d0:e0:af:4a:9e:59:d6:5e:79: 42:df:9d:72:19:5b:cb:71:51:63:98:97:15:4f:20: 67:2b:99:88:1f:2f:d6:6a:c9:33:60:03:8e:cb:f5: 42:25:33:62:7c:ef:0f:12:37:a4:59:16:fe:38:10: 0d:67:30:fb:66:00:c8:3d:11:66:e8:ec:52:c2:a1: 5b:98:07:37:fb:82:4c:b5:9f:28:8f:09:b1:73:fb: 64:74:10:06:7b:1b:b2:fe:54:26:d1:c0:09:cd:56: 4f:b3:b0:60:67:2a:c7:c2:d6:b3:67:8f:9f:27:97: c0:00:b2:45:64:b0:2b:80:79:0b:19:49:97:9c:e8: fd:c6:87:a7:01:63:89:9e:6a:93:c9:44:b9:26:b0: ca:8f:1b:71:27:52:af:d1:72:bb:8e:fd:fd:5d:d3: 84:88:40:0e:4f:19:ec:ef:80:52:f2:f5:96:78:08: e3:ac:c7:74:00:4a:92:c0:47:88:bd:b0:31:c2:30: 27:3a:cc:10:88:10:5a:3b:7d:9d:da:7b:d9:60:2f: 9b:88:a1:fc:ef:90:d6:7a:00:ed:b0:e2:6b:67:a3: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63898 sbgp-ipAddrBlock: critical IPv4: 103.158.78.0/23 IPv6: 2406:b4c0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:7d:e1:ab:40:1d:15:58:50:d6:e7:30:63:a0:96:56:4b:30: b4:6b:ae:53:92:d1:a8:10:6a:db:0c:0a:00:1d:ee:a0:e5:a4: 5c:8e:13:ee:27:2c:26:23:d6:5b:c4:d6:30:7c:21:c5:ff:c3: 1b:71:57:e1:e9:ea:39:00:37:94:77:5e:e8:74:f3:ee:45:e5: f7:08:6e:2b:3a:0e:50:22:66:e5:1a:1b:4c:e2:ba:21:45:26: 89:93:f0:1c:f6:af:cd:09:f3:f4:00:2b:3c:ca:cf:27:f5:b6: 18:cd:dc:27:51:d0:fd:30:34:bd:21:76:3d:4c:53:e7:d3:a6: 30:97:fc:b1:36:39:c2:0a:11:19:9f:8f:14:83:d7:80:41:e0: 40:08:dc:de:99:84:fb:4c:ed:bd:9c:bd:ce:23:80:ac:08:97: af:b4:bb:b6:aa:87:4e:ab:0e:51:de:7d:86:86:f7:ae:b4:02: fa:73:a7:1c:b0:63:01:b0:d7:23:fc:8e:74:26:e4:c3:c1:7a: b6:89:03:9d:e4:8b:a7:53:2f:49:a7:da:8d:ae:cb:c6:52:41: 01:46:a9:43:0a:fc:76:21:40:ce:aa:5f:d7:35:d9:64:87:2b: 8a:ec:c3:f7:e1:56:52:fa:7c:fe:29:87:9e:6c:ed:c8:41:14: 47:5f:43:02 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICLrEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczMFoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQjMyOURBOTI2OEZDRkQ1NEQ5RjM4QTAxRUQwQ0Y3MDkyQkI2OTAw QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN345dSyhcLtZG8EScSj n2DzrOV8xtoWCsnwz/5DVI4YSyNs0OCvSp5Z1l55Qt+dchlby3FRY5iXFU8gZyuZ iB8v1mrJM2ADjsv1QiUzYnzvDxI3pFkW/jgQDWcw+2YAyD0RZujsUsKhW5gHN/uC TLWfKI8JsXP7ZHQQBnsbsv5UJtHACc1WT7OwYGcqx8LWs2ePnyeXwACyRWSwK4B5 CxlJl5zo/caHpwFjiZ5qk8lEuSawyo8bcSdSr9Fyu479/V3ThIhADk8Z7O+AUvL1 lngI46zHdABKksBHiL2wMcIwJzrMEIgQWjt9ndp72WAvm4ih/O+Q1noA7bDia2ej Zf0CAwEAAaOCAn8wggJ7MB0GA1UdDgQWBBSzKdqSaPz9VNnzigHtDPcJK7aQDDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTQ1lCRVIv MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvTlNTQ1lCRVIvc3luYWttajhfVlRaODRvQjdRejNDU3Uya0F3Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+ZowLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAFnnk4wDQQCAAIwBwMFACQGtMAwDQYJKoZIhvcNAQELBQADggEBAF19 4atAHRVYUNbnMGOgllZLMLRrrlOS0agQatsMCgAd7qDlpFyOE+4nLCYj1lvE1jB8 IcX/wxtxV+Hp6jkAN5R3Xuh08+5F5fcIbis6DlAiZuUaG0ziuiFFJomT8Bz2r80J 8/QAKzzKzyf1thjN3CdR0P0wNL0hdj1MU+fTpjCX/LE2OcIKERmfjxSD14BB4EAI 3N6ZhPtM7b2cvc4jgKwIl6+0u7aqh06rDlHefYaG9660AvpzpxywYwGw1yP8jnQm 5MPBeraJA53ki6dTL0mn2o2uy8ZSQQFGqUMK/HYhQM6qX9c12WSHK4rsw/fhVlL6 fP4ph55s7chBFEdfQwI= -----END CERTIFICATE-----Generated at Sat Sep 7 22:50:17 2024 by rpki-client on console-ams.rpki-client.org