Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
File: df5TxhG0_Vaz9oMZ7spiifPw8qk.cer (raw, json)
Hash identifier: jVueyraKnuptOGp+O/JfYQdsc00RKBdF/GRBLMJoFEI=
Subject key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 341B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:28:59 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 4782
IP: 61.56.0.0/20
IP: 61.57.32.0/19
IP: 61.60.0.0/17
IP: 61.67.64.0/19
IP: 117.56.0.0/16
IP: 124.199.64.0 -- 124.199.111.255
IP: 163.29.0.0/16
IP: 210.69.0.0/16
IP: 210.241.0.0/17
IP: 211.79.128.0/18
IP: 223.200.0.0/16
IP: 2001:4420::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13339 (0x341b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:28:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:2c:bb:26:c9:8c:69:f1:36:ae:8f:3e:70:
f3:bd:d9:a6:7b:bd:38:f3:59:81:fc:9b:0d:9c:f3:
3b:45:ad:0f:c7:86:b1:dc:69:1b:0f:fb:f7:be:82:
24:af:6e:d8:ef:9c:b2:81:4d:63:ff:b2:27:13:27:
75:3b:c8:a1:fe:a4:ed:26:0f:d1:1f:a3:33:9d:2a:
31:a0:84:4a:03:2e:50:21:53:16:79:0f:8d:16:b4:
72:b2:61:77:e5:7e:8b:78:a2:88:ae:ae:59:a0:03:
c5:48:21:1a:ee:af:57:3d:d5:7d:8d:50:d6:20:dc:
a3:f2:34:a2:b4:72:41:25:ae:7e:b2:f2:f9:81:14:
5b:46:9e:9e:d8:ae:d4:79:29:2c:1e:15:25:ed:58:
ce:a2:b3:2d:be:16:49:73:37:0b:31:e7:d7:7c:88:
77:1e:17:48:80:81:f2:26:e4:28:62:c3:df:2b:70:
7b:e2:49:4b:91:b2:0a:72:54:80:a9:b1:46:f6:ea:
8d:47:e0:53:7c:44:9d:cb:1a:3a:04:94:3b:a2:ee:
c9:39:bc:6b:25:ed:75:8e:a6:58:07:7d:2a:0f:a3:
35:3a:af:e2:75:6e:4a:4a:45:aa:c5:3b:08:16:d8:
c2:c1:1c:7e:3e:c8:88:88:a5:44:b6:b5:b3:61:1b:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4782
sbgp-ipAddrBlock: critical
IPv4:
61.56.0.0/20
61.57.32.0/19
61.60.0.0/17
61.67.64.0/19
117.56.0.0/16
124.199.64.0-124.199.111.255
163.29.0.0/16
210.69.0.0/16
210.241.0.0/17
211.79.128.0/18
223.200.0.0/16
IPv6:
2001:4420::/32
Signature Algorithm: sha256WithRSAEncryption
92:c1:9a:0d:22:3d:c5:b3:9d:ad:3c:41:d1:3e:b7:c4:5d:17:
b3:27:00:2f:51:cf:3d:94:69:ec:7c:ac:6f:83:54:77:dd:3b:
09:67:cf:60:2f:c0:d5:89:57:39:57:15:6f:70:28:57:1f:01:
dd:a6:40:7f:fe:52:22:38:cd:ef:1d:c5:ef:6f:d3:80:39:d0:
66:8e:43:92:32:75:aa:80:0d:87:83:ad:46:c6:0b:a5:e5:cf:
91:d4:20:ce:12:23:c5:98:03:89:29:d0:c1:4f:b8:91:18:fc:
0d:64:02:57:58:c5:82:5a:1b:bf:c9:47:ee:3c:75:43:28:4f:
fa:38:e2:48:7b:eb:24:83:8c:1a:54:d9:b2:50:9e:cb:ef:49:
fa:14:af:0b:30:7b:8a:1b:fc:ef:d3:f5:48:dc:9e:4a:5f:46:
f1:a0:ec:d9:dc:68:53:1c:c1:dd:10:ae:41:6b:28:e3:ed:57:
dd:d4:8d:59:f5:a1:3f:97:f2:3c:a5:d7:e8:1d:13:88:80:8b:
17:fe:22:b2:f0:53:6e:70:74:1e:97:4a:d4:80:f7:92:e8:b1:
d3:45:9f:8a:2e:39:0e:eb:ea:6d:ba:43:e9:be:2b:35:34:b4:
10:c1:e2:8e:43:00:92:d1:0e:1d:59:a4:58:8a:ac:9a:33:58:
6b:c6:d5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:46 2025 by rpki-client