$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer File: zjfXyZGFo9msYRcY2nhVm26Zoxs.cer (raw, json) Hash identifier: 9/tmORY8QdcaA3QWukdc66f31vcu45BOXpsPyE3XxgA= Subject key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 27FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 01 Sep 2023 03:11:14 +0000 Certificate not after: Sat 31 Aug 2024 03:10:53 +0000 Subordinate resources: IP: 103.141.80.0/23 IP: 2405:14c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10236 (0x27fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Sep 1 03:11:14 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:a2:64:8d:77:b3:0e:2a:16:b9:7d:a5:de: 8a:12:4e:67:f7:b8:bb:26:2d:06:4a:ab:ec:40:96: 2a:27:b0:39:7f:ad:63:32:1a:2e:4e:2a:2a:a8:59: 53:f8:65:65:bb:29:60:8d:ff:da:ef:3b:aa:90:5d: ec:a3:ae:ee:56:9b:91:9f:d2:de:3f:e4:b2:de:10: 93:b5:fe:06:c7:7c:19:d3:23:5e:cf:3d:d4:4c:bd: 7f:61:2a:11:67:94:3f:91:95:f0:27:9f:65:32:68: b1:fa:85:01:0d:6c:ac:22:59:9f:89:60:98:fd:f7: 66:35:6d:7a:dd:cb:e4:c3:31:42:bc:f0:70:25:63: ca:b8:77:80:bf:57:cf:fc:c5:2c:39:c6:dd:2b:d3: bc:16:60:66:f8:75:d7:4a:09:0b:cd:31:34:c0:f6: 8b:a8:cd:e2:8b:b1:42:9b:48:14:69:70:0d:cf:8f: 6e:5c:3e:4f:2a:b4:84:64:e4:62:4a:db:d1:2c:33: 0b:f1:f9:87:17:9f:d8:d3:2e:cb:82:60:1f:08:1e: 08:97:e1:89:67:ff:4d:21:86:41:fd:15:d8:f1:16: f4:1a:a5:37:ec:48:85:88:f4:a2:b5:f7:1d:08:89: 7c:de:88:3a:9b:86:57:4f:3f:99:92:55:b7:f6:a1: 3a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.141.80.0/23 IPv6: 2405:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:3d:d4:be:69:25:ce:44:a8:47:ad:e6:07:a3:40:39:17:f4: b3:a3:1f:3e:9d:d6:42:8f:21:92:c4:60:01:ff:f9:73:7f:71: 8f:b3:ef:08:ef:96:0c:8c:d2:7a:0b:a4:3c:fa:f7:01:00:c5: fd:ba:2e:9e:8c:ab:a1:10:75:24:43:54:ea:1a:32:ef:86:72: 98:6c:a8:35:ae:e4:73:5a:01:42:b2:8e:ba:69:7f:59:f2:f0: 03:2e:10:da:fc:a7:eb:ac:fb:8c:ac:c9:5c:7f:e0:42:01:74: 01:a7:5f:eb:ba:8e:5a:83:0f:00:62:c5:11:b6:31:2f:8e:e4: 6c:f9:49:b7:03:3a:9f:13:9b:c0:79:c1:83:c1:b9:df:2b:88: dc:66:29:e4:8e:d7:3a:46:45:11:09:59:b4:28:ca:2c:06:49: e9:42:19:d4:49:d9:a6:0e:28:77:b3:10:fc:34:85:41:ec:b2: b2:ae:e9:9c:04:79:7d:04:9e:32:dd:2d:c7:49:0f:96:3a:fb: 35:53:4d:76:ad:d2:e9:27:54:63:eb:00:29:c2:e2:a8:85:79: 2d:c6:c5:9c:8b:90:7c:ff:a7:c4:c8:03:8c:9c:5d:de:51:5d: 8c:b7:98:c7:e2:31:ab:97:9a:d5:d6:a1:21:bb:70:e8:7d:62: e3:b9:ee:23 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICJ/wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExNFoXDTI0MDgzMTAzMTA1M1owMzEx MC8GA1UEAxMoQ0UzN0Q3Qzk5MTg1QTNEOUFDNjExNzE4REE3ODU1OUI2RTk5QTMx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDVomSNd7MOKha5faXe ihJOZ/e4uyYtBkqr7ECWKiewOX+tYzIaLk4qKqhZU/hlZbspYI3/2u87qpBd7KOu 7labkZ/S3j/kst4Qk7X+Bsd8GdMjXs891Ey9f2EqEWeUP5GV8CefZTJosfqFAQ1s rCJZn4lgmP33ZjVtet3L5MMxQrzwcCVjyrh3gL9Xz/zFLDnG3SvTvBZgZvh110oJ C80xNMD2i6jN4ouxQptIFGlwDc+Pblw+Tyq0hGTkYkrb0SwzC/H5hxef2NMuy4Jg HwgeCJfhiWf/TSGGQf0V2PEW9BqlN+xIhYj0orX3HQiJfN6IOpuGV08/mZJVt/ah OuMCAwEAAaOCAlswggJXMB0GA1UdDgQWBBTON9fJkYWj2axhFxjaeFWbbpmjGzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tQQy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9L S1BDL3pqZlh5WkdGbzltc1lSY1kybmhWbTI2Wm94cy5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnjVAwDQQCAAIwBwMFACQFFMAwDQYJKoZIhvcN AQELBQADggEBAC891L5pJc5EqEet5gejQDkX9LOjHz6d1kKPIZLEYAH/+XN/cY+z 7wjvlgyM0noLpDz69wEAxf26Lp6Mq6EQdSRDVOoaMu+GcphsqDWu5HNaAUKyjrpp f1ny8AMuENr8p+us+4ysyVx/4EIBdAGnX+u6jlqDDwBixRG2MS+O5Gz5SbcDOp8T m8B5wYPBud8riNxmKeSO1zpGRREJWbQoyiwGSelCGdRJ2aYOKHezEPw0hUHssrKu 6ZwEeX0EnjLdLcdJD5Y6+zVTTXat0uknVGPrACnC4qiFeS3GxZyLkHz/p8TIA4yc Xd5RXYy3mMfiMauXmtXWoSG7cOh9YuO57iM= -----END CERTIFICATE-----Generated at Tue May 21 21:12:31 2024 by rpki-client on console-fra.rpki-client.org