Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
File: Uptgbbhig71KCK9-sz7ziiVmMbs.cer (raw, json)
Hash identifier: euBW0KPJx0YGQxxU00cNhaZbM5e5B4Pf8ngqxlUfIRo=
Subject key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 34E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:07 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 4781
IP: 203.65.192.0/19
IP: 210.63.64.0/18
IP: 210.67.64.0/19
IP: 210.241.128.0/19
IP: 211.73.192.0/18
IP: 2403:9f00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13541 (0x34e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:1a:68:8c:5d:e5:5b:3f:5e:60:61:ac:22:
cc:78:25:76:d7:a7:00:2a:e4:75:10:ae:bc:09:82:
51:78:02:a9:88:32:98:7a:d6:c1:12:61:39:ff:bc:
2a:9f:78:de:a5:21:1c:7e:f6:c6:ec:9d:ac:0b:08:
ba:fd:6c:4f:e9:50:39:85:7a:77:cb:8f:4c:a8:bc:
68:c7:7d:89:28:a6:e9:83:9a:34:ab:c7:41:2e:b3:
a5:c0:77:3d:01:87:ed:56:8f:27:89:56:88:ce:72:
d5:d0:87:d0:48:7e:8f:ff:67:d5:05:19:f1:96:0d:
9c:f9:46:13:58:48:98:d7:9c:c9:75:42:36:17:31:
19:99:a7:dd:5d:5b:6b:eb:2d:4f:b2:1c:a5:5a:1c:
e6:ca:72:c3:13:04:4b:2d:90:79:81:25:fa:02:7b:
0e:57:65:24:35:d2:5a:30:f7:eb:58:e9:40:63:d6:
e8:e4:a6:2b:87:1b:cc:11:e0:d7:22:78:53:7d:5a:
4b:cc:26:f9:57:26:42:05:46:ab:38:5f:64:eb:8a:
44:bc:b7:21:b6:21:a2:9f:ff:60:94:fa:72:05:b4:
69:f2:39:b3:8e:f9:86:7c:a2:15:63:b9:b1:77:97:
5c:b5:af:6d:cf:8f:bb:91:29:55:5f:eb:d0:5c:88:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4781
sbgp-ipAddrBlock: critical
IPv4:
203.65.192.0/19
210.63.64.0/18
210.67.64.0/19
210.241.128.0/19
211.73.192.0/18
IPv6:
2403:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
4d:4b:31:7a:6e:6c:33:19:ab:43:c9:33:4e:9c:78:40:2d:76:
fc:d6:7a:e7:d7:cb:fe:ea:a0:04:c4:38:e2:b2:43:e5:46:c6:
e6:8a:f7:65:98:0a:cc:71:95:fe:ee:05:4d:a6:8f:04:3f:b7:
6c:11:79:75:7b:af:5d:cc:5d:a6:34:27:ea:6e:f6:82:03:42:
78:4f:62:9e:61:5e:dd:ef:ec:4e:a6:2b:57:e9:7e:1e:ca:c0:
b2:cf:9e:c5:f1:e7:fa:c8:ea:9f:09:50:29:32:f2:84:75:74:
9c:5f:75:cb:a2:ce:a9:4e:cf:e7:a0:68:10:f0:69:a0:8c:64:
63:64:e6:f8:e5:67:31:43:b6:a7:03:3d:cd:df:5a:63:f8:1c:
ad:a2:f0:5d:a7:b1:64:9d:14:78:33:f7:87:b9:9a:18:a3:a1:
56:2b:2a:25:25:53:85:4a:3f:e3:33:2f:ef:bb:a0:18:ca:46:
c7:88:7c:d8:33:6d:4e:3b:f6:ce:0b:2e:df:cc:b0:e7:e0:20:
11:7b:92:c0:c4:1f:8c:c8:fe:a4:20:a0:f0:d1:96:5f:a1:46:
f3:f6:79:8b:0e:e5:bb:cf:fe:1b:4f:6d:af:e9:bf:91:44:c1:
97:98:ba:d7:81:76:7c:52:66:87:57:61:3f:13:e0:cb:10:7d:
aa:20:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:47:47 2025 by rpki-client