Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer
File: Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer (raw, json)
Hash identifier: zddeh/OmcMPKqZBJIdZJSQs4BIaJ3qMF8uHmVEOgPdU=
Subject key identifier: 1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 34D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:07 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.125.228.0/22
IP: 2403:fb40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13523 (0x34d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:18:97:42:3c:0c:0c:de:17:b2:c3:b3:87:
4b:ef:2d:55:0e:dd:03:9a:38:9c:ce:67:7e:3e:de:
8f:d6:1e:40:49:2a:cf:b8:46:72:32:05:90:52:25:
bd:59:9c:bb:6a:ec:6e:12:f5:10:71:2b:5f:fe:f1:
9d:ba:ce:83:f9:0d:01:e8:46:18:e4:5b:57:fb:d7:
fe:7f:e4:ba:8f:0b:22:e4:4e:50:47:72:72:f1:26:
49:7a:81:d9:7a:8f:37:d6:9e:03:5c:c4:12:53:70:
27:a0:3e:d0:e7:e6:16:0b:1d:68:0b:78:c5:93:03:
c6:27:90:b0:1f:ad:cc:22:f7:9a:27:ad:3c:97:2c:
8c:aa:68:1f:cf:e6:04:1f:48:ae:01:00:36:30:64:
36:0e:58:df:67:a9:52:76:ba:70:ed:8e:96:51:cc:
c8:3b:2f:01:96:16:04:af:13:fa:04:f1:4a:ff:a0:
51:ba:12:59:b9:28:98:55:98:77:31:27:c1:66:4e:
f5:0a:32:9f:2a:eb:8f:0a:c5:9d:da:88:f6:15:de:
b7:de:f3:a2:20:aa:1e:ba:28:da:ab:03:2f:9b:ff:
b9:b4:da:7c:d3:b6:0b:6f:3f:39:7e:8c:ab:5c:b6:
60:2a:00:4e:dc:6b:00:78:f2:fd:83:27:42:08:3f:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.228.0/22
IPv6:
2403:fb40::/32
Signature Algorithm: sha256WithRSAEncryption
91:59:af:af:57:46:86:db:4a:76:12:a1:a0:a0:27:29:e4:9b:
db:ca:cf:04:9d:3e:fb:4e:d3:82:66:09:06:05:8d:a5:b6:df:
63:cc:15:42:e1:61:26:a4:ce:22:96:f8:58:f6:c5:9e:e8:06:
c9:6f:c3:69:8e:b4:3c:1a:e1:85:57:ad:82:6e:ed:07:8b:05:
cd:1a:44:fa:8b:e2:86:51:0a:a6:34:d0:b9:8d:05:20:09:21:
fa:cb:8b:ce:e2:7d:ab:cd:67:f2:e6:d0:9b:71:8f:ac:16:82:
67:7d:25:df:1d:12:e7:66:5d:42:55:58:18:21:a5:c7:90:e7:
23:cf:f4:f8:91:38:ff:fa:49:37:3c:ef:72:6e:cc:c2:59:6d:
a3:c2:a9:69:3e:6f:98:37:60:16:be:a0:4b:6a:cf:59:ee:3a:
ac:f7:f5:36:45:02:0a:f8:8c:8f:d3:06:3f:c2:95:64:88:68:
1a:cc:39:3d:26:30:37:c4:6c:13:6d:80:a2:32:7b:4b:57:cf:
bb:84:8a:8f:a8:dc:15:91:27:d7:6e:c7:17:a8:85:0c:01:22:
0d:93:2a:be:e6:e9:5c:22:0d:90:53:44:70:cc:9b:e5:78:36:
b1:8c:de:e2:32:e2:e8:f8:ae:cc:9b:b8:97:61:5c:88:01:6c:
5b:a0:c7:12
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwN1oXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoMUFBREVCNEQ0NUQ3OTQxRDlCNTNFRjRDMkNDNjFCOTYwMjQ3NkZD
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOuGJdCPAwM3heyw7OH
S+8tVQ7dA5o4nM5nfj7ej9YeQEkqz7hGcjIFkFIlvVmcu2rsbhL1EHErX/7xnbrO
g/kNAehGGORbV/vX/n/kuo8LIuROUEdycvEmSXqB2XqPN9aeA1zEElNwJ6A+0Ofm
FgsdaAt4xZMDxieQsB+tzCL3mietPJcsjKpoH8/mBB9IrgEANjBkNg5Y32epUna6
cO2OllHMyDsvAZYWBK8T+gTxSv+gUboSWbkomFWYdzEnwWZO9QoynyrrjwrFndqI
9hXet97zoiCqHroo2qsDL5v/ubTafNO2C28/OX6Mq1y2YCoATtxrAHjy/YMnQgg/
TY0CAwEAAaOCAl0wggJZMB0GA1UdDgQWBBQaretNRdeUHZtT70wsxhuWAkdvyjAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQk9PS1MvMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
Qk9PS1MvR3EzclRVWFhsQjJiVS05TUxNWWJsZ0pIYjhvLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEAmd95DANBAIAAjAHAwUAJAP7QDANBgkqhkiG
9w0BAQsFAAOCAQEAkVmvr1dGhttKdhKhoKAnKeSb28rPBJ0++07TgmYJBgWNpbbf
Y8wVQuFhJqTOIpb4WPbFnugGyW/DaY60PBrhhVetgm7tB4sFzRpE+ovihlEKpjTQ
uY0FIAkh+suLzuJ9q81n8ubQm3GPrBaCZ30l3x0S52ZdQlVYGCGlx5DnI8/0+JE4
//pJNzzvcm7Mwllto8KpaT5vmDdgFr6gS2rPWe46rPf1NkUCCviMj9MGP8KVZIho
Gsw5PSYwN8RsE22AojJ7S1fPu4SKj6jcFZEn127HF6iFDAEiDZMqvubpXCINkFNE
cMyb5Xg2sYze4jLi6PiuzJu4l2FciAFsW6DHEg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:58:11 2025 by rpki-client