Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
File: OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer (raw, json)
Hash identifier: ixT3SWwhnODQyoHwK65XZ9bO6XTUYOc/yMoRu85U3A8=
Subject key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 355D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:12 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131657
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:78:c5:3a:86:ee:9d:71:44:24:07:91:ce:
3b:3d:6c:9f:86:26:66:b9:98:8f:7e:1b:5e:ba:4c:
9f:62:8c:20:82:d1:01:44:79:f3:56:b8:55:11:80:
de:b0:70:ba:f5:51:17:19:2c:f5:82:96:35:86:b5:
9d:04:3c:9a:77:f0:49:99:b9:20:a6:f0:33:c9:69:
8b:c6:75:10:9b:43:70:59:c4:57:92:3a:46:2b:c0:
aa:fb:37:6c:ae:2a:b3:49:f0:06:02:de:b0:21:b2:
f6:91:b5:96:3e:0b:8c:f2:3a:7f:1f:42:7b:0c:fe:
1d:1b:4d:99:61:da:ea:5e:94:6e:1a:33:b4:52:90:
8b:e9:40:f5:ee:82:95:cc:95:15:55:db:56:42:16:
fa:2b:63:16:71:4e:94:5c:98:ac:53:fa:e3:d9:b2:
d7:8a:d8:db:d9:92:8d:5b:db:f1:b2:c5:15:ed:08:
bc:9d:de:25:a7:cb:b1:62:d3:df:4f:df:ef:68:87:
7c:a0:a2:b7:85:97:97:52:e2:14:27:f9:66:99:87:
03:ac:a8:68:15:d4:e3:6c:55:19:b8:0a:39:d8:e8:
63:c0:ab:67:ca:2a:61:15:9a:95:9f:6f:f0:4b:a8:
5d:16:06:0e:bf:99:51:95:35:b1:3b:0b:01:af:bf:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131657
Signature Algorithm: sha256WithRSAEncryption
6e:b2:a1:d6:bf:e3:94:b2:c2:86:a2:47:7e:2b:00:95:06:cb:
18:37:6b:f2:bb:70:95:de:1b:8a:c3:b1:00:9c:ec:58:13:e9:
b1:45:bf:79:0a:72:cc:46:5f:a9:7b:9d:56:6b:e8:9e:d0:e3:
2f:28:a2:f4:aa:00:55:ac:b4:d1:b6:fd:91:c5:fe:dc:36:9c:
db:fa:29:76:65:c7:fc:43:7f:0d:6d:80:05:2f:ce:9d:bd:41:
fe:70:c4:7f:8e:35:7c:77:5f:3b:5c:03:98:72:da:2e:52:70:
f1:2b:21:25:8d:6f:d1:60:df:b4:46:d3:43:5a:1f:ed:2e:45:
87:eb:b1:80:3c:1f:0c:50:88:8f:08:ab:cc:97:29:9d:4f:e0:
3b:21:d6:e5:bb:71:82:7e:5e:90:80:3a:9f:b3:a5:19:1f:cd:
9d:ec:3d:6e:ea:3b:6c:60:70:f4:56:0d:66:95:56:b7:d4:41:
28:8a:d5:0a:7f:f7:15:43:45:a9:ea:e0:35:b0:fc:03:17:f2:
47:41:4d:b6:31:84:58:6d:45:d4:63:9b:a5:7f:d5:e2:73:e0:
f8:f0:42:c3:6a:ff:ab:04:7a:c4:6a:ee:21:e4:26:d9:20:ec:
da:b8:bd:a0:f0:72:5c:85:2b:52:1a:67:ba:7c:22:ec:76:da:
5d:d1:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:45:13 2025 by rpki-client