Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Yt2b1PDUByVbzZL7U4SrazUTeU8.cer
File:                     Yt2b1PDUByVbzZL7U4SrazUTeU8.cer (raw, json)
Hash identifier:          TLtVPXccPKneaXE9cmHQeZwGZXdW39x/cWmsJbdckjk=
Subject key identifier:   62:DD:9B:D4:F0:D4:07:25:5B:CD:92:FB:53:84:AB:6B:35:13:79:4F
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2B40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 29 Jan 2024 05:47:28 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 131637
                          IP: 103.133.44.0/22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 07:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11072 (0x2b40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Jan 29 05:47:28 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=62DD9BD4F0D407255BCD92FB5384AB6B3513794F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:d9:7b:03:f8:1d:57:71:04:d6:2a:ea:e3:
                    47:38:e0:e5:64:a7:ae:bf:dc:77:0c:55:5e:22:85:
                    12:a0:d6:7f:22:ff:56:fb:97:23:d5:39:75:79:e0:
                    5c:af:cd:3d:14:2e:2b:28:ee:57:92:1d:84:dc:3b:
                    57:72:95:27:7e:fb:eb:d2:78:fd:78:ab:16:d2:48:
                    29:79:04:19:ec:bc:14:28:0b:91:28:4e:3d:80:f2:
                    b3:a5:45:11:b2:79:da:6d:56:f8:12:0c:17:e1:e5:
                    77:d9:70:00:e4:6f:d0:69:ff:69:a1:78:02:a7:da:
                    29:e9:bb:7e:91:66:5e:4a:4f:cb:72:6b:35:a0:65:
                    96:6c:ff:a6:45:8e:73:81:42:48:65:5d:0f:2c:b8:
                    04:a3:72:c9:e1:02:74:57:af:05:03:23:f2:0c:21:
                    de:eb:26:83:e4:1a:57:2f:b5:01:e1:5c:5d:d4:d9:
                    3f:0c:21:bf:ba:c8:8c:da:9b:a1:d6:91:84:d2:62:
                    e3:ec:5f:53:1b:b9:2c:0d:fa:2c:6b:5a:22:e9:76:
                    96:5c:c7:e2:68:a2:60:18:3d:9f:cf:80:c1:2f:ad:
                    93:c1:96:13:97:22:f5:07:81:79:9a:27:be:ca:1f:
                    90:79:1a:3a:41:ef:62:e2:dc:9c:3c:ad:06:d5:98:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DD:9B:D4:F0:D4:07:25:5B:CD:92:FB:53:84:AB:6B:35:13:79:4F
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131637

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:ae:20:45:46:87:48:06:5e:49:ae:61:c6:6c:ac:9d:57:
         7f:01:ea:e5:ad:71:32:b9:bd:8c:d1:35:79:cc:41:a9:05:63:
         03:1d:8b:07:8d:f7:55:bc:2f:ad:35:31:dd:98:d3:2d:16:9f:
         b0:61:36:e8:8f:aa:61:85:0c:54:24:2f:ba:0f:33:e5:d7:ae:
         45:d3:33:de:18:8f:35:bc:a2:ec:cb:e7:30:bc:7c:63:0b:a7:
         39:29:9c:27:d4:6a:83:af:53:df:b5:c6:26:3c:64:68:db:54:
         8b:84:f4:17:c8:e4:3b:e0:10:c1:6a:d3:09:78:af:31:6b:a4:
         3f:d6:d2:a7:be:68:3c:c7:06:08:22:8b:18:d3:d2:e5:9e:3b:
         b8:db:69:99:38:8f:8d:d9:b8:80:24:db:38:4a:ce:d1:16:52:
         9e:d3:c2:f3:73:a5:d4:78:eb:10:7f:11:dc:fa:79:9d:df:23:
         70:5f:7b:e1:9f:b7:be:c7:55:e2:fb:50:3f:1c:08:d7:b3:0c:
         20:af:c4:80:be:f0:9f:b1:13:15:90:56:32:61:87:39:d1:31:
         2c:8b:14:a8:71:c6:3c:02:4c:d6:35:e2:0f:dd:52:19:6c:5b:
         ea:3f:fe:0c:25:bb:9b:67:97:19:14:e3:da:7a:53:a3:79:93:
         aa:05:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:34:35 2024 by rpki-client on console-fra.rpki-client.org