$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer File: zjfXyZGFo9msYRcY2nhVm26Zoxs.cer (raw, json) Hash identifier: DJFnKs07xO41zZZo/kmeEd93g/odmDA9i2AQj59x88E= Subject key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 2E91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 01:57:29 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 103.141.80.0/23 IP: 2405:14c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11921 (0x2e91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Aug 26 01:57:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:a2:64:8d:77:b3:0e:2a:16:b9:7d:a5:de: 8a:12:4e:67:f7:b8:bb:26:2d:06:4a:ab:ec:40:96: 2a:27:b0:39:7f:ad:63:32:1a:2e:4e:2a:2a:a8:59: 53:f8:65:65:bb:29:60:8d:ff:da:ef:3b:aa:90:5d: ec:a3:ae:ee:56:9b:91:9f:d2:de:3f:e4:b2:de:10: 93:b5:fe:06:c7:7c:19:d3:23:5e:cf:3d:d4:4c:bd: 7f:61:2a:11:67:94:3f:91:95:f0:27:9f:65:32:68: b1:fa:85:01:0d:6c:ac:22:59:9f:89:60:98:fd:f7: 66:35:6d:7a:dd:cb:e4:c3:31:42:bc:f0:70:25:63: ca:b8:77:80:bf:57:cf:fc:c5:2c:39:c6:dd:2b:d3: bc:16:60:66:f8:75:d7:4a:09:0b:cd:31:34:c0:f6: 8b:a8:cd:e2:8b:b1:42:9b:48:14:69:70:0d:cf:8f: 6e:5c:3e:4f:2a:b4:84:64:e4:62:4a:db:d1:2c:33: 0b:f1:f9:87:17:9f:d8:d3:2e:cb:82:60:1f:08:1e: 08:97:e1:89:67:ff:4d:21:86:41:fd:15:d8:f1:16: f4:1a:a5:37:ec:48:85:88:f4:a2:b5:f7:1d:08:89: 7c:de:88:3a:9b:86:57:4f:3f:99:92:55:b7:f6:a1: 3a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.141.80.0/23 IPv6: 2405:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 67:5d:f4:ee:9e:86:46:1d:fb:19:11:fb:a7:03:86:2d:7a:6b: 80:5b:81:5c:e0:04:06:04:bb:af:f5:b9:4a:a0:0e:fd:7a:77: 9e:09:ec:33:47:49:ef:30:37:4d:a8:81:37:1a:b6:29:74:5a: d2:ff:86:a2:6e:41:b2:c3:1c:b2:09:95:c1:28:b3:44:7d:c3: 0e:4a:cc:47:c7:a3:a0:8b:3d:d3:b2:ab:2a:d0:c8:04:8d:cb: 85:2f:6c:fa:19:e3:69:68:1a:e8:c5:a0:c5:88:4c:dd:72:70: 1c:8a:9c:ff:e4:72:64:33:ea:37:3c:7e:bb:ed:da:86:27:58: fd:1c:3f:3f:d2:fd:86:70:3c:3f:5e:13:41:b2:ac:f4:0a:d8: 64:46:63:58:28:1a:a8:ee:ad:41:d1:c6:e5:3b:3a:7b:1a:98: 65:4e:25:68:f3:3f:3e:ae:f3:bd:43:82:a8:f6:08:b5:41:09: 8d:4a:59:d3:67:45:d0:be:dd:9d:c8:e8:76:41:ca:f9:74:74: 73:fd:33:21:0c:fc:da:62:b6:a5:be:80:98:06:57:de:53:e1: d4:ec:77:77:bd:0c:c6:48:be:c5:92:e2:17:59:cc:22:82:17: 4d:6c:ff:0f:eb:a8:b4:c2:3f:04:6c:07:3e:4f:8b:9c:37:71: a3:3d:85:f0 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICLpEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcyOVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoQ0UzN0Q3Qzk5MTg1QTNEOUFDNjExNzE4REE3ODU1OUI2RTk5QTMx QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDVomSNd7MOKha5faXe ihJOZ/e4uyYtBkqr7ECWKiewOX+tYzIaLk4qKqhZU/hlZbspYI3/2u87qpBd7KOu 7labkZ/S3j/kst4Qk7X+Bsd8GdMjXs891Ey9f2EqEWeUP5GV8CefZTJosfqFAQ1s rCJZn4lgmP33ZjVtet3L5MMxQrzwcCVjyrh3gL9Xz/zFLDnG3SvTvBZgZvh110oJ C80xNMD2i6jN4ouxQptIFGlwDc+Pblw+Tyq0hGTkYkrb0SwzC/H5hxef2NMuy4Jg HwgeCJfhiWf/TSGGQf0V2PEW9BqlN+xIhYj0orX3HQiJfN6IOpuGV08/mZJVt/ah OuMCAwEAAaOCAlswggJXMB0GA1UdDgQWBBTON9fJkYWj2axhFxjaeFWbbpmjGzAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tQQy8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9L S1BDL3pqZlh5WkdGbzltc1lSY1kybmhWbTI2Wm94cy5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnjVAwDQQCAAIwBwMFACQFFMAwDQYJKoZIhvcN AQELBQADggEBAGdd9O6ehkYd+xkR+6cDhi16a4BbgVzgBAYEu6/1uUqgDv16d54J 7DNHSe8wN02ogTcatil0WtL/hqJuQbLDHLIJlcEos0R9ww5KzEfHo6CLPdOyqyrQ yASNy4UvbPoZ42loGujFoMWITN1ycByKnP/kcmQz6jc8frvt2oYnWP0cPz/S/YZw PD9eE0GyrPQK2GRGY1goGqjurUHRxuU7OnsamGVOJWjzPz6u871Dgqj2CLVBCY1K WdNnRdC+3Z3I6HZByvl0dHP9MyEM/NpitqW+gJgGV95T4dTsd3e9DMZIvsWS4hdZ zCKCF01s/w/rqLTCPwRsBz5Pi5w3caM9hfA= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:50 2024 by rpki-client on console-ams.rpki-client.org