$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer File: ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer (raw, json) Hash identifier: Rcj2GOR/sGA2gvfIE7u7nBA9TmT5Qir18TDNPvSbH3s= Subject key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:05 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.150.36.0/23 IP: 2405:fbc0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10080 (0x2760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:05 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:7a:e5:70:55:f5:d3:06:95:92:d1:b1:10: 7f:07:c9:4a:d0:c0:67:5f:bc:73:ed:83:46:17:f1: 29:31:27:53:0c:94:6f:d4:6d:3b:31:f7:b2:54:b0: ea:aa:5f:7c:32:44:48:df:da:da:f4:c3:f9:22:b9: cd:b0:a1:9c:7a:6c:98:66:89:95:29:1d:4d:45:ad: 45:25:cc:6e:58:7d:ee:f6:8c:81:a3:4a:c8:be:3a: 3c:93:f9:97:1a:40:68:35:15:2a:43:97:26:83:e9: 2a:59:4b:73:50:17:39:5a:57:31:87:dd:b6:d9:c6: 9e:e7:ba:43:65:4e:3f:48:63:1d:63:46:d0:e4:49: 64:b7:3d:2c:d3:f4:b5:d1:d5:f2:ea:74:86:92:80: b6:fb:bc:70:1e:75:58:11:b1:80:a6:a8:80:93:97: 38:c6:d6:16:e0:49:96:a8:bd:73:ef:1f:62:64:a6: c2:f1:5b:46:10:13:70:8c:c5:a3:dc:1e:8b:93:a2: d0:0c:90:9a:0e:1a:7c:d3:31:b3:24:cf:05:6c:b5: b6:22:61:4e:38:14:50:a3:27:af:fd:d1:90:0e:a6: 0e:a3:b4:2a:a6:71:30:b8:0f:dd:dc:e6:a7:86:f7: 85:4c:66:fd:cc:01:15:8f:83:ab:a1:c5:27:03:ca: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.150.36.0/23 IPv6: 2405:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 60:81:e9:22:9c:b0:aa:d8:5f:83:2b:18:c4:e5:15:74:3c:6e: 00:73:ce:2e:df:dd:76:52:65:09:29:72:2d:00:e5:6d:bc:5b: e8:82:34:98:62:bc:12:eb:9e:85:d4:76:83:3e:b9:42:0b:d8: f5:95:d4:95:0d:3d:ce:45:ef:05:a0:99:11:c5:1d:77:a5:f3: 07:55:1f:e5:48:b4:88:1c:00:eb:e1:dd:20:10:f9:0e:b6:58: 98:fd:bd:81:ae:6b:c3:66:7f:78:69:15:52:81:ff:48:5d:9a: 56:0c:a9:61:4a:52:86:c0:3c:18:b0:4e:81:43:f8:fd:6e:ec: 10:47:ce:89:54:d9:3c:41:41:0a:e3:87:79:1a:99:31:6a:79: 36:be:c1:2d:6a:9d:5d:e1:e6:98:53:2f:0c:da:bb:0b:aa:2c: b9:5d:fe:4e:98:3f:9b:dd:35:d4:9f:78:9d:e6:fe:9e:c9:91: b6:3f:90:b2:c5:9e:ab:5a:50:5d:da:bd:8c:9a:4a:1f:23:af: ac:b7:a4:d5:34:03:96:bc:0b:2f:8e:1f:c7:54:0b:d8:65:38: 89:5b:91:c2:f3:c8:c8:de:66:76:ad:22:a5:39:d1:ed:86:36: e2:a2:19:f3:49:67:b7:23:88:8f:ab:fe:a9:97:19:71:dc:92: 62:2a:ce:51 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICJ2AwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEwNVoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoQ0FENTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRB QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMlCeuVwVfXTBpWS0bEQ fwfJStDAZ1+8c+2DRhfxKTEnUwyUb9RtOzH3slSw6qpffDJESN/a2vTD+SK5zbCh nHpsmGaJlSkdTUWtRSXMblh97vaMgaNKyL46PJP5lxpAaDUVKkOXJoPpKllLc1AX OVpXMYfdttnGnue6Q2VOP0hjHWNG0ORJZLc9LNP0tdHV8up0hpKAtvu8cB51WBGx gKaogJOXOMbWFuBJlqi9c+8fYmSmwvFbRhATcIzFo9wei5Oi0AyQmg4afNMxsyTP BWy1tiJhTjgUUKMnr/3RkA6mDqO0KqZxMLgP3dzmp4b3hUxm/cwBFY+Dq6HFJwPK eFMCAwEAAaOCAmcwggJjMB0GA1UdDgQWBBTK1ScCLIzQdWjsn8gqHODd5bLErDAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNUV0FS RS8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9UV0JFU1RXQVJFL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5tZnQw MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnliQwDQQCAAIwBwMFACQF +8AwDQYJKoZIhvcNAQELBQADggEBAGCB6SKcsKrYX4MrGMTlFXQ8bgBzzi7f3XZS ZQkpci0A5W28W+iCNJhivBLrnoXUdoM+uUIL2PWV1JUNPc5F7wWgmRHFHXel8wdV H+VItIgcAOvh3SAQ+Q62WJj9vYGua8Nmf3hpFVKB/0hdmlYMqWFKUobAPBiwToFD +P1u7BBHzolU2TxBQQrjh3kamTFqeTa+wS1qnV3h5phTLwzauwuqLLld/k6YP5vd NdSfeJ3m/p7JkbY/kLLFnqtaUF3avYyaSh8jr6y3pNU0A5a8Cy+OH8dUC9hlOIlb kcLzyMjeZnatIqU50e2GNuKiGfNJZ7cjiI+r/qmXGXHckmIqzlE= -----END CERTIFICATE-----Generated at Tue May 21 06:28:53 2024 by rpki-client on console-ams.rpki-client.org