Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
File: KkeBVTgnMeXA9oId1TifnlLh5NY.cer (raw, json)
Hash identifier: ZuxAs2c9C2CRSXmRG/3jc1sB9SbyB3gRkfRvh17gYUY=
Subject key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 363F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:22 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 17809
AS: 131145
IP: 27.96.224.0/19
IP: 111.67.48.0/20
IP: 113.61.128.0/17
IP: 119.15.192.0/18
IP: 121.254.64.0/18
IP: 182.155.0.0/16
IP: 203.217.96.0/19
IP: 203.222.0.0/19
IP: 210.209.128.0/17
IP: 211.79.112.0/20
IP: 2401:ab00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Apr 2025 21:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13887 (0x363f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:f3:6e:9a:bf:d3:ae:8b:cf:2d:7c:cf:26:
a4:01:c1:0e:8f:56:d9:a0:4a:1b:86:a2:40:89:24:
3a:c7:65:fd:26:90:72:de:40:88:8a:37:ef:3c:a2:
b1:a9:76:80:21:0c:d3:ef:38:9e:65:a1:97:1b:77:
17:c7:19:a1:10:1b:69:79:48:d9:c4:1a:44:08:9e:
11:7c:6e:5b:b0:68:3a:73:7d:9d:c1:c9:6a:49:ca:
d6:94:d8:96:26:0f:83:c4:ca:f7:84:a8:31:1c:5c:
5c:9b:89:74:88:6d:42:fd:7d:7a:0d:f1:1a:e9:60:
0d:62:19:13:1f:d8:b0:88:da:0d:56:83:58:29:c4:
02:59:eb:be:44:9e:ed:1a:2c:31:79:08:60:2e:9c:
10:73:29:b6:63:b8:8d:29:cd:8e:33:43:bf:cd:cf:
62:19:b7:2f:91:66:be:a7:a7:2d:90:5b:76:a6:59:
a8:3b:77:aa:f2:fc:2b:d1:28:02:c9:ed:3c:2f:b5:
4d:98:63:d8:94:7f:cb:74:c5:4e:9c:1e:84:4a:d9:
98:ed:e1:bb:1a:12:aa:55:b6:33:52:43:bc:bd:91:
ea:6d:b8:69:d6:11:34:f6:5b:64:b6:4e:60:5f:8c:
d1:8e:7c:a9:d1:2f:fe:bb:c1:a7:da:ff:17:fc:5f:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17809
131145
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
111.67.48.0/20
113.61.128.0/17
119.15.192.0/18
121.254.64.0/18
182.155.0.0/16
203.217.96.0/19
203.222.0.0/19
210.209.128.0/17
211.79.112.0/20
IPv6:
2401:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
7a:b0:a8:90:30:2c:3b:7f:3f:95:32:09:22:eb:96:a8:71:1a:
44:ad:96:7b:62:6a:10:8f:fb:55:a6:da:37:59:98:5b:ef:06:
c2:3f:36:98:8a:6f:f0:16:4f:22:7a:ff:53:1f:df:04:07:2b:
b5:41:31:a4:ab:13:8d:a4:83:16:74:c0:fe:5d:4e:ca:ec:de:
15:12:42:8a:7c:94:3a:e4:bd:fd:c6:4a:8c:f7:63:7c:16:38:
db:86:e2:4b:8f:87:c6:44:9a:7b:95:20:06:51:72:5d:9d:00:
b5:27:82:c0:bc:cf:83:81:b9:b3:86:52:db:22:04:dd:5e:e1:
d1:e6:76:a1:9f:21:dc:13:e6:7e:df:18:4c:c5:86:b4:8f:23:
36:0e:c2:c9:f8:47:b9:7b:14:a3:cb:d4:c6:3a:8a:e2:ce:65:
05:2f:f6:f1:45:3e:a5:bd:f9:cc:06:f9:06:77:73:b4:d7:4e:
54:26:a6:54:ce:a3:f5:26:f2:e1:3d:69:33:12:81:f4:49:fa:
72:ba:3c:53:07:45:d0:cf:0e:b3:92:bf:3d:b3:bf:9b:c4:70:
9e:d4:38:67:1b:a3:ba:03:30:54:46:1e:42:e4:90:e8:87:bb:
e9:f4:30:74:66:1c:23:bb:71:90:b5:ea:1d:a8:46:5c:86:d7:
b3:7d:46:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:08:54 2025 by rpki-client