Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
File: Uptgbbhig71KCK9-sz7ziiVmMbs.cer (raw, json)
Hash identifier: Cj9JS97jjL6gvpzjtij7tcnmEvGUgOqsUQUqwjMvseQ=
Subject key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 28A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:23 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 4781
IP: 203.65.192.0/19
IP: 210.63.64.0/18
IP: 210.67.64.0/19
IP: 210.241.128.0/19
IP: 211.73.192.0/18
IP: 2403:9f00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 07:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10404 (0x28a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:1a:68:8c:5d:e5:5b:3f:5e:60:61:ac:22:
cc:78:25:76:d7:a7:00:2a:e4:75:10:ae:bc:09:82:
51:78:02:a9:88:32:98:7a:d6:c1:12:61:39:ff:bc:
2a:9f:78:de:a5:21:1c:7e:f6:c6:ec:9d:ac:0b:08:
ba:fd:6c:4f:e9:50:39:85:7a:77:cb:8f:4c:a8:bc:
68:c7:7d:89:28:a6:e9:83:9a:34:ab:c7:41:2e:b3:
a5:c0:77:3d:01:87:ed:56:8f:27:89:56:88:ce:72:
d5:d0:87:d0:48:7e:8f:ff:67:d5:05:19:f1:96:0d:
9c:f9:46:13:58:48:98:d7:9c:c9:75:42:36:17:31:
19:99:a7:dd:5d:5b:6b:eb:2d:4f:b2:1c:a5:5a:1c:
e6:ca:72:c3:13:04:4b:2d:90:79:81:25:fa:02:7b:
0e:57:65:24:35:d2:5a:30:f7:eb:58:e9:40:63:d6:
e8:e4:a6:2b:87:1b:cc:11:e0:d7:22:78:53:7d:5a:
4b:cc:26:f9:57:26:42:05:46:ab:38:5f:64:eb:8a:
44:bc:b7:21:b6:21:a2:9f:ff:60:94:fa:72:05:b4:
69:f2:39:b3:8e:f9:86:7c:a2:15:63:b9:b1:77:97:
5c:b5:af:6d:cf:8f:bb:91:29:55:5f:eb:d0:5c:88:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4781
sbgp-ipAddrBlock: critical
IPv4:
203.65.192.0/19
210.63.64.0/18
210.67.64.0/19
210.241.128.0/19
211.73.192.0/18
IPv6:
2403:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
28:43:51:92:0d:36:21:6c:2e:fc:ed:39:d0:6e:c1:2d:f1:3a:
62:a8:ca:0d:2e:77:95:98:1f:7c:f6:f6:a0:a8:15:31:22:83:
6a:d9:ee:de:6f:5d:6e:90:4b:41:ec:18:f8:47:4b:57:86:d6:
5c:11:26:1e:15:e0:c6:2e:da:9f:b8:3e:86:fe:0d:56:14:67:
28:0a:15:db:18:f7:b2:23:84:24:82:0c:63:b1:59:05:b3:5a:
fc:35:69:12:79:4f:2a:85:ca:53:86:72:e1:99:22:91:97:ac:
a8:fd:87:76:b8:72:40:58:45:63:30:f3:ed:e1:72:a1:7a:f9:
7f:81:71:ac:5f:df:b2:3e:56:2d:9f:eb:f9:0a:88:b3:fd:6e:
08:8e:cc:1a:12:66:29:8c:33:0b:a1:15:51:c2:6f:1a:91:07:
da:80:de:0a:f6:51:ae:c7:02:5b:1c:5c:3b:80:66:1d:4b:65:
28:1e:43:1a:f1:32:85:26:55:14:38:bd:f8:bf:ae:37:61:12:
1a:a7:bc:74:bd:e6:c0:27:29:bf:53:ac:00:89:c7:2d:70:90:
4d:fd:63:10:12:39:ff:85:80:d2:b4:e2:e5:d7:b5:1c:1a:97:
8e:2a:6f:26:e4:1e:13:74:f0:ea:f5:df:b0:ae:08:7a:88:b7:
3b:57:32:51
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICKKQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyM1oXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoNTI5QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFC
QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDeGmiMXeVbP15gYawi
zHgldtenACrkdRCuvAmCUXgCqYgymHrWwRJhOf+8Kp943qUhHH72xuydrAsIuv1s
T+lQOYV6d8uPTKi8aMd9iSim6YOaNKvHQS6zpcB3PQGH7VaPJ4lWiM5y1dCH0Eh+
j/9n1QUZ8ZYNnPlGE1hImNecyXVCNhcxGZmn3V1ba+stT7IcpVoc5spywxMESy2Q
eYEl+gJ7DldlJDXSWjD361jpQGPW6OSmK4cbzBHg1yJ4U31aS8wm+VcmQgVGqzhf
ZOuKRLy3IbYhop//YJT6cgW0afI5s475hnyiFWO5sXeXXLWvbc+Pu5EpVV/r0FyI
6H8CAwEAAaOCApAwggKMMB0GA1UdDgQWBBRSm2BtuGKDvUoIr36zPvOKJWYxuzAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMvMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UEFHSUMvVXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgISrTBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgME
BctBwAMEBtI/QAMEBdJDQAMEBdLxgAMEBtNJwDANBAIAAjAHAwUAJAOfADANBgkq
hkiG9w0BAQsFAAOCAQEAKENRkg02IWwu/O050G7BLfE6YqjKDS53lZgffPb2oKgV
MSKDatnu3m9dbpBLQewY+EdLV4bWXBEmHhXgxi7an7g+hv4NVhRnKAoV2xj3siOE
JIIMY7FZBbNa/DVpEnlPKoXKU4Zy4ZkikZesqP2HdrhyQFhFYzDz7eFyoXr5f4Fx
rF/fsj5WLZ/r+QqIs/1uCI7MGhJmKYwzC6EVUcJvGpEH2oDeCvZRrscCWxxcO4Bm
HUtlKB5DGvEyhSZVFDi9+L+uN2ESGqe8dL3mwCcpv1OsAInHLXCQTf1jEBI5/4WA
0rTi5de1HBqXjipvJuQeE3Tw6vXfsK4Ieoi3O1cyUQ==
-----END CERTIFICATE-----
Generated at Fri May 17 09:34:34 2024 by rpki-client on console-fra.rpki-client.org