$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer File: Z3gr2kgldGOtzabXLy7kG1_ZShE.cer (raw, json) Hash identifier: wq3WLsmOjZ1Xoe88GkA17qSsaPIVEVuXxHLaeoVdLHA= Subject key identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Certificate serial: 341F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 10 Feb 2025 14:28:59 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 2404:a3c0::/32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13343 (0x341f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E Validity Not Before: Feb 10 14:28:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:8e:93:25:fe:d6:3d:b4:77:b0:8d:40:a1: 4d:ec:05:52:a0:ce:be:7f:94:75:ad:8d:88:ef:49: 9b:dc:e1:cf:7e:89:06:e0:6f:db:14:b2:87:ff:fd: a0:2f:fb:8c:a5:f5:19:9d:2b:89:27:1a:d6:c3:39: c1:e1:46:78:dd:a6:82:c8:8f:69:c2:c2:85:25:88: 5e:78:7b:22:55:04:bb:44:70:86:50:07:51:62:81: d8:33:35:aa:50:17:2c:4b:85:f1:4f:09:3f:49:a4: 62:36:cd:a8:dc:c6:0b:5d:8b:7c:d4:c9:06:3a:85: c7:a4:da:3b:c3:29:57:e3:39:37:d2:0a:94:61:5e: 28:34:f3:ac:97:7e:43:72:dc:8c:e0:38:2b:4f:34: ad:6a:ab:cc:fe:df:0d:b9:ac:1d:14:1a:f6:8f:98: 9f:a9:1c:5a:f4:77:65:51:7b:bb:d2:89:dd:c0:c6: 21:7e:a2:56:22:06:35:a2:63:87:0e:d7:08:79:d8: 6d:22:37:7b:72:7f:cf:1e:d3:8e:be:01:17:61:22: 91:fa:99:bb:02:e2:f2:29:33:60:80:18:47:03:6f: 46:9b:1c:f3:e0:d9:08:8d:a7:a6:6e:6e:70:71:98: 2e:ad:67:43:e9:83:e9:9f:65:80:18:c6:09:6c:a7: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 X509v3 Authority Key Identifier: keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:a3c0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:d5:bf:fa:37:bc:33:7b:14:71:45:71:a0:91:e4:b8:da:67: c2:42:c4:90:53:5c:7a:7a:48:ac:ac:ac:fa:3e:06:ac:87:11: b7:03:5a:de:97:1e:39:f3:15:4b:69:99:18:6e:0c:41:a7:79: 66:17:31:ee:67:7b:f3:cb:dc:2d:7a:2e:c9:88:c6:21:b3:c0: 5a:67:02:5d:1e:85:fa:5d:e6:47:cf:9e:4b:79:fd:4f:75:a5: a8:0b:f5:da:23:bd:26:2e:e3:74:0c:57:1c:1c:e5:31:1f:96: 15:52:e8:5d:8e:38:09:1e:ed:7b:e6:29:a9:f4:09:7c:55:6c: ff:d5:17:0d:f6:26:c3:6a:53:05:f7:70:0d:f6:06:01:52:b3: ef:27:b2:39:18:45:2e:5d:35:6b:8f:e9:11:f6:f5:52:e1:63: fb:85:af:34:f8:97:6b:9c:93:dd:61:6f:54:e4:1d:0f:70:1c: a3:c1:0e:0b:a0:e3:50:7c:e0:a7:54:ed:bd:91:a2:f4:d7:e0: 13:16:a4:69:9b:05:89:07:b7:e1:52:4a:ef:f3:0e:40:58:22: 71:8b:37:03:2b:4e:06:a7:2b:73:c2:d5:8e:27:ec:37:e2:f7: b4:e8:57:4b:bb:2a:aa:bb:13:40:f9:46:46:cd:aa:7e:6d:4c: 20:00:1d:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0Mjg1OVoXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoNjc3ODJCREE0ODI1NzQ2M0FEQ0RBNkQ3MkYyRUU0MUI1RkQ5NEEx MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBhjpMl/tY9tHewjUCh TewFUqDOvn+Uda2NiO9Jm9zhz36JBuBv2xSyh//9oC/7jKX1GZ0riSca1sM5weFG eN2mgsiPacLChSWIXnh7IlUEu0RwhlAHUWKB2DM1qlAXLEuF8U8JP0mkYjbNqNzG C12LfNTJBjqFx6TaO8MpV+M5N9IKlGFeKDTzrJd+Q3LcjOA4K080rWqrzP7fDbms HRQa9o+Yn6kcWvR3ZVF7u9KJ3cDGIX6iViIGNaJjhw7XCHnYbSI3e3J/zx7Tjr4B F2EikfqZuwLi8ikzYIAYRwNvRpsc8+DZCI2npm5ucHGYLq1nQ+mD6Z9lgBjGCWyn mEkCAwEAAaOCAlMwggJPMB0GA1UdDgQWBBRneCvaSCV0Y63NptcvLuQbX9lKETAf BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9VRC8w WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9JTUNMT1VEL1ozZ3Iya2dsZEdPdHphYlhMeTdrRzFfWlNoRS5tZnQwMQYIKwYB BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYI KwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBKPAMA0GCSqGSIb3DQEBCwUAA4IB AQCP1b/6N7wzexRxRXGgkeS42mfCQsSQU1x6ekisrKz6PgashxG3A1relx458xVL aZkYbgxBp3lmFzHuZ3vzy9wtei7JiMYhs8BaZwJdHoX6XeZHz55Lef1PdaWoC/Xa I70mLuN0DFccHOUxH5YVUuhdjjgJHu175imp9Al8VWz/1RcN9ibDalMF93AN9gYB UrPvJ7I5GEUuXTVrj+kR9vVS4WP7ha80+JdrnJPdYW9U5B0PcByjwQ4LoONQfOCn VO29kaL01+ATFqRpmwWJB7fhUkrv8w5AWCJxizcDK04GpytzwtWOJ+w34ve06FdL uyqquxNA+UZGzap+bUwgAB0W -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net