Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
File: KY7S_WrVxbVoffYUonXC_ISNTpQ.cer (raw, json)
Hash identifier: OMt1gTSxciBcXqCEq4F8VHVrKBb2SbdSOGnNMgZrH2A=
Subject key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3643
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:22 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.159.206.0/23
IP: 2406:db40::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 18:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13891 (0x3643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Feb 10 14:29:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:d2:2e:0c:54:e7:df:51:36:82:19:89:df:
e1:06:33:ca:4c:e8:ed:76:26:c9:eb:2c:06:17:d0:
05:26:8d:e2:22:3a:94:3b:12:a5:3b:b4:86:d7:ad:
1d:0a:26:22:2c:04:ee:b0:21:b8:b6:97:ca:91:a9:
15:74:6c:1d:d8:c2:65:09:78:83:8d:99:26:6a:2b:
8e:3f:95:37:71:f3:20:f9:9e:73:77:05:2e:d8:f2:
2e:81:91:9f:c1:8a:a5:ad:6c:40:02:3c:a7:18:a1:
13:44:8f:a3:33:e5:ce:aa:ca:6a:02:5d:e4:39:bc:
3a:0f:89:3c:3f:82:2d:85:88:ef:51:9b:b7:2a:a5:
d8:2e:8b:f7:79:49:71:e6:e4:ba:c4:24:1e:ec:ad:
6b:d9:4f:83:34:a4:7a:e7:ce:57:0b:cd:8c:0c:f9:
5e:e4:9f:8d:b4:b2:ad:05:65:c8:34:1e:d7:e8:92:
b9:87:7b:68:07:f0:87:d4:ba:d6:45:91:d1:23:95:
c9:56:c3:75:5e:01:20:f7:a1:8a:b1:15:55:a5:13:
59:35:64:3f:a0:87:56:14:b3:53:3a:c6:cc:12:66:
ab:09:84:42:18:94:55:de:98:4d:4d:bc:25:a4:fb:
a6:25:58:90:65:5b:5f:69:62:8d:bf:11:1c:b8:0e:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.206.0/23
IPv6:
2406:db40::/32
Signature Algorithm: sha256WithRSAEncryption
65:8b:01:d2:ae:7a:b2:8c:05:d1:fa:24:64:cc:87:1e:ff:c7:
fa:1c:ec:ca:c3:7d:e6:ca:63:d2:3b:51:4c:f5:76:11:05:41:
c0:a0:7a:7a:70:2a:d2:be:34:c6:84:f7:ac:a6:a0:cd:58:c7:
65:d2:a7:85:95:8e:a4:1d:c0:f4:54:d9:cb:ad:70:46:c3:74:
54:f6:68:6f:42:25:73:06:13:56:69:0a:f9:4e:ea:7a:ef:76:
c9:a3:a4:93:7a:01:8a:ee:4e:13:42:8c:47:d3:13:19:15:63:
bd:3d:5a:c0:53:00:7d:c4:e9:22:48:6a:d9:bf:9b:89:5f:2d:
4d:e8:f2:52:aa:5d:7d:79:0b:c1:58:fe:66:64:fc:76:bf:5b:
35:56:02:2c:a6:f8:a8:f8:97:a5:03:5a:41:45:21:79:68:24:
f8:d0:cf:03:d1:e5:a9:86:ed:6d:03:bc:d9:f4:99:6f:ab:60:
5f:06:08:2b:65:3e:44:2a:c8:6f:96:e6:35:a8:2b:c3:a0:2d:
04:59:5d:49:f9:1e:90:bd:db:bd:bb:48:8e:d6:e6:6c:85:ee:
00:78:59:1e:90:83:0e:9f:56:60:fd:d5:28:db:ee:37:2c:ad:
71:ff:3d:0b:91:c7:9b:0d:69:cb:3a:a8:52:18:76:4d:c3:10:
c5:c3:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:52:52 2025 by rpki-client