Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
File: KRuvagwXbOCjJCNma854-dkYJMs.cer (raw, json)
Hash identifier: am7cz/ERWsMYZVjbLaJN59cbKc9R1ZZ/JB1qCUVXifU=
Subject key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3529
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:10 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 18041
AS: 38855
AS: 131668
IP: 103.147.22.0/23
IP: 2405:a640::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13609 (0x3529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Feb 10 14:29:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:eb:38:de:b3:82:73:18:da:43:dc:60:5d:
98:df:ac:3d:4b:ec:3e:1e:15:f3:99:dd:86:f3:48:
5e:41:bc:56:f5:ed:03:ef:e1:96:98:43:1a:b7:58:
0c:5b:88:50:02:9e:38:92:bf:53:d7:ee:85:37:97:
83:31:ae:3d:e7:24:32:d2:51:b4:29:0a:0b:58:72:
02:35:b3:33:3d:3a:04:e0:61:8e:c4:51:5a:87:7c:
37:1b:1d:4e:c2:e7:65:8d:23:73:55:69:ae:4a:25:
92:6d:2c:f7:82:48:01:9d:3a:3a:c7:d2:3a:43:d4:
30:c0:4a:f4:be:33:9b:28:98:a7:35:09:aa:86:36:
03:48:46:b2:00:99:66:45:74:f6:07:9e:8a:6a:0e:
a0:7e:91:b7:eb:be:4b:7b:fc:2f:c7:80:2c:b8:b3:
b5:d7:f3:11:a8:c7:57:42:19:92:af:fd:d3:4a:fd:
d6:d8:aa:14:89:83:84:da:e0:7e:f6:cb:3a:a7:16:
35:f1:4b:28:f7:6c:38:4c:66:70:38:0f:01:86:7f:
c0:30:5a:36:35:8e:b3:3f:72:d4:3d:15:ba:53:4d:
4f:01:c3:bf:b4:7c:ce:5a:5e:7d:14:44:09:0c:af:
79:2c:96:63:16:02:79:cc:de:51:af:5e:45:6d:49:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18041
38855
131668
sbgp-ipAddrBlock: critical
IPv4:
103.147.22.0/23
IPv6:
2405:a640::/32
Signature Algorithm: sha256WithRSAEncryption
47:90:ac:75:c2:fe:9d:19:e2:cb:56:50:61:41:30:82:3d:fe:
93:2d:55:ab:0b:7f:ff:e8:a7:b4:80:88:97:52:a9:a5:a4:0d:
9b:20:d3:54:7e:c9:41:91:25:19:c4:1b:22:b2:76:f5:71:a5:
01:08:05:02:79:86:92:17:e2:79:f1:45:af:05:1f:c0:b0:a9:
cc:07:85:17:39:58:c5:0d:00:8c:b3:c5:b3:0c:66:12:b6:45:
19:55:4c:61:42:1e:1e:07:be:6c:4a:1a:18:3f:7e:8d:90:fa:
78:c7:96:21:e5:a6:66:a3:73:0b:e0:2c:fe:87:f0:3c:71:4b:
2b:5d:c8:fd:76:18:ee:21:a5:4a:49:4d:b9:b1:11:dd:2f:57:
44:f7:11:9f:14:2c:e8:80:93:cc:c4:fc:41:c6:c2:83:53:10:
71:a9:06:20:52:40:74:5c:0d:4f:ca:4d:e0:a9:b9:43:96:d2:
98:1e:f6:a5:fc:4a:c6:75:52:44:54:0e:3b:f4:e2:db:a6:d1:
f4:16:b1:3e:20:1e:98:66:ca:08:97:90:32:3a:93:24:9d:69:
ea:fc:7a:71:4e:93:2b:33:59:66:e2:d4:40:c7:34:10:fc:91:
0d:9e:b0:b1:cc:2c:a8:13:c4:dc:3a:24:d6:38:a6:db:fd:42:
b0:bb:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:23:28 2025 by rpki-client