Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
File:                     b96jRwcVIpDB0mBv-_xpuSfUCls.cer (raw, json)
Hash identifier:          b7p0R2SK+tRGO8F3Oa9xnHCkuurJiQ33q9e5vHhygDY=
Subject key identifier:   6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2A59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 31 Oct 2023 07:26:03 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    IP: 61.56.96.0/20
                          IP: 61.57.208.0/20
                          IP: 61.58.16.0/20
                          IP: 61.58.48.0/20
                          IP: 61.60.240.0/20
                          IP: 103.117.112.0/22
                          IP: 103.130.20.0 -- 103.130.27.255
                          IP: 103.130.32.0/20
                          IP: 180.92.0.0/20

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 07:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10841 (0x2a59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Oct 31 07:26:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:b7:71:7e:5f:8a:0b:cf:8d:78:4a:60:3b:
                    65:3f:06:fd:b1:14:2b:9a:91:45:c3:cc:c3:41:d0:
                    bb:cd:21:96:91:39:0e:9a:c0:eb:5e:19:2f:2c:e5:
                    c9:17:9f:66:6b:87:28:b4:9d:11:91:6d:a0:36:a1:
                    aa:e0:3a:b0:d8:fc:ae:e6:a6:51:66:b4:a1:13:1f:
                    6e:2c:ac:bd:56:92:be:04:27:c3:2c:85:dd:5c:2c:
                    87:58:38:b4:ae:08:85:8e:3c:9c:dc:07:b0:7c:e6:
                    ea:99:cf:96:f8:70:b8:93:c8:97:c4:f3:cc:72:df:
                    45:e4:ae:5a:8e:2c:44:0b:28:d6:7e:16:1f:06:d1:
                    57:4c:f3:dd:25:bb:6f:02:4e:14:aa:18:e7:b8:fe:
                    43:27:a2:5d:0a:56:d4:4c:0c:73:0f:47:ed:ac:93:
                    a7:e4:2c:8a:f5:3a:99:77:0f:8b:3f:e8:a1:0a:31:
                    63:70:ee:81:b6:f3:55:47:51:96:a0:7d:8c:3b:b8:
                    21:60:a6:04:e9:f2:b7:bb:df:dd:f5:c8:da:6e:72:
                    ae:71:16:1d:90:0a:76:ee:fe:e3:f3:00:e0:3a:9e:
                    d7:f9:b1:88:c8:9b:4a:fb:2f:b5:5e:5d:6a:89:48:
                    03:d7:08:41:3b:0f:42:2d:45:3b:08:7c:1a:28:cc:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.96.0/20
                  61.57.208.0/20
                  61.58.16.0/20
                  61.58.48.0/20
                  61.60.240.0/20
                  103.117.112.0/22
                  103.130.20.0-103.130.27.255
                  103.130.32.0/20
                  180.92.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:73:34:e9:f4:55:79:60:41:1b:34:7f:60:19:d5:5c:e0:58:
         20:b6:09:03:a6:6e:b4:0d:11:0d:ea:9c:36:b1:07:42:34:18:
         8b:24:39:0e:a9:0d:0d:3b:9b:c8:4a:2a:86:53:e6:99:1b:46:
         1b:69:b2:13:6a:6e:db:e6:d7:65:7b:03:c4:f0:40:51:a6:cb:
         62:88:99:b9:81:ab:89:02:5d:9d:76:71:2d:52:a9:a3:4e:68:
         10:5e:34:8d:7b:4b:45:28:6a:76:29:86:69:68:e0:7e:e4:c7:
         71:59:5d:17:d8:83:42:61:fc:fc:dc:9a:9f:70:65:90:f3:ee:
         94:61:9a:ac:5d:c5:29:8b:37:52:44:70:28:84:a7:18:1e:9a:
         2b:f9:02:21:60:54:6f:d2:84:48:92:66:f6:35:22:56:5b:fc:
         fd:96:3f:2b:5a:06:10:58:b3:6c:e3:ec:1b:12:c3:c7:08:62:
         15:41:28:25:a0:82:be:e6:6a:9a:de:9b:7d:4c:aa:d1:42:98:
         ca:10:42:4e:7f:6a:6c:00:96:5b:40:ad:5e:18:50:48:7b:6e:
         c1:f7:7d:ea:b2:9f:23:14:35:1f:1c:bd:eb:25:cc:89:9f:1e:
         1a:01:74:7f:50:4e:30:bc:ed:ff:1e:e5:8f:97:aa:af:dc:ed:
         a1:c2:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:34:35 2024 by rpki-client on console-fra.rpki-client.org