Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer
File:                     fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer (raw, json)
Hash identifier:          ZEiFG0C+uGAlIfk9B84Dzh6iaLoxLVvlKTR9/1roa6g=
Subject key identifier:   7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       27CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 01 Sep 2023 03:11:11 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 131678
                          IP: 103.149.66.0/23
                          IP: 2405:e540::/32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 07:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10188 (0x27cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  1 03:11:11 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:5b:4a:0c:b5:56:51:61:e8:7d:73:5b:83:
                    60:7d:bb:18:55:bd:c8:ef:42:d8:d6:c1:0d:5e:af:
                    5f:4e:ab:f2:67:79:8b:08:ed:6b:52:69:ea:01:09:
                    a4:f4:90:84:ed:91:54:de:b3:55:af:ff:6f:3d:d5:
                    39:4e:54:b8:78:fb:ad:9d:a5:6c:8f:c2:b7:99:2c:
                    55:ea:26:57:79:f7:e8:d1:da:fe:e5:e3:5f:b6:c0:
                    90:56:55:7d:97:29:93:23:58:6d:2a:eb:fa:98:a4:
                    35:5a:4e:8d:4c:4f:8d:d7:d4:8b:0c:1a:8f:6b:50:
                    33:f6:00:6f:06:85:1a:82:43:9a:46:28:7e:12:d0:
                    c3:c7:a4:80:11:b2:d8:f4:98:4c:7e:58:ac:c4:a1:
                    cf:34:81:53:e6:76:20:5e:57:39:21:a2:54:0d:a4:
                    98:b9:ad:76:1c:f5:cb:1b:e4:3f:af:14:ac:99:45:
                    5c:33:87:b7:50:24:e4:1d:63:3a:ac:61:19:42:24:
                    e8:02:9a:db:11:05:80:32:6e:36:c4:8d:a2:5b:f0:
                    17:a6:f0:33:fe:04:c2:03:e3:c7:e8:ff:30:66:6a:
                    fe:84:0c:2a:84:79:1f:03:99:c5:28:89:59:5b:2e:
                    7d:d5:56:4c:3a:b2:70:07:86:d8:20:7c:ce:1c:59:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131678

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.66.0/23
                IPv6:
                  2405:e540::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:89:0b:d3:23:28:58:61:47:54:59:be:2b:75:62:f0:8a:b0:
         cc:10:48:06:2e:31:85:06:40:f8:5c:e3:39:67:c2:de:69:ab:
         20:77:9a:6a:b2:75:7b:c5:cf:dc:83:44:69:91:cf:d7:de:2f:
         eb:bd:72:10:f1:36:bf:e5:a4:70:1e:3a:f0:9f:84:be:71:d3:
         88:4e:42:94:39:ec:0b:b6:5f:be:dc:2c:09:ee:15:3c:ac:3a:
         e9:57:5f:26:8a:b7:45:da:1c:69:e8:5a:b5:51:7a:b0:2d:db:
         04:55:9b:cc:cc:61:6d:cf:96:5e:78:fa:f5:bc:b1:f0:73:45:
         2f:bd:6c:50:37:cb:cd:2d:e7:06:d8:82:78:9b:6a:29:31:be:
         7d:d4:cc:81:f1:04:fd:ad:3d:83:47:97:b0:86:1e:7b:b5:5b:
         83:b1:91:b0:6e:6b:9b:2d:86:c7:9e:96:45:00:f4:a7:91:fb:
         6f:bf:9e:dd:fd:bd:e4:c7:12:ed:db:dc:ff:d2:cc:0e:a0:5d:
         90:a2:60:4c:00:79:fa:f0:dd:46:2f:cf:33:5b:a0:c3:b1:a6:
         8b:45:cc:c7:8e:eb:92:2c:bd:bd:9d:54:4f:85:78:d6:57:35:
         56:57:00:aa:99:aa:1e:2e:12:af:e9:82:5a:33:c3:7a:f4:20:
         54:3b:24:9b
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICJ8wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExMVoXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoN0NCQTM3NEY0RjdBMEQxRTZDQjU5RjhBN0I1NjQwNjZDNjdERDE5
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANvsW0oMtVZRYeh9c1uD
YH27GFW9yO9C2NbBDV6vX06r8md5iwjta1Jp6gEJpPSQhO2RVN6zVa//bz3VOU5U
uHj7rZ2lbI/Ct5ksVeomV3n36NHa/uXjX7bAkFZVfZcpkyNYbSrr+pikNVpOjUxP
jdfUiwwaj2tQM/YAbwaFGoJDmkYofhLQw8ekgBGy2PSYTH5YrMShzzSBU+Z2IF5X
OSGiVA2kmLmtdhz1yxvkP68UrJlFXDOHt1Ak5B1jOqxhGUIk6AKa2xEFgDJuNsSN
olvwF6bwM/4EwgPjx+j/MGZq/oQMKoR5HwOZxSiJWVsufdVWTDqycAeG2CB8zhxZ
J30CAwEAAaOCAncwggJzMB0GA1UdDgQWBBR8ujdPT3oNHmy1n4p7VkBmxn3RnTAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF
hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFFXTC8wVQYI
KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9E
UVdML2ZMbzNUMDk2RFI1c3RaLUtlMVpBWnNaOTBaMC5tZnQwMQYIKwYBBQUHMA2G
JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAgJeMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQB
Z5VCMA0EAgACMAcDBQAkBeVAMA0GCSqGSIb3DQEBCwUAA4IBAQBmiQvTIyhYYUdU
Wb4rdWLwirDMEEgGLjGFBkD4XOM5Z8Leaasgd5pqsnV7xc/cg0Rpkc/X3i/rvXIQ
8Ta/5aRwHjrwn4S+cdOITkKUOewLtl++3CwJ7hU8rDrpV18mirdF2hxp6Fq1UXqw
LdsEVZvMzGFtz5ZeePr1vLHwc0UvvWxQN8vNLecG2IJ4m2opMb591MyB8QT9rT2D
R5ewhh57tVuDsZGwbmubLYbHnpZFAPSnkftvv57d/b3kxxLt29z/0swOoF2QomBM
AHn68N1GL88zW6DDsaaLRczHjuuSLL29nVRPhXjWVzVWVwCqmaoeLhKv6YJaM8N6
9CBUOySb
-----END CERTIFICATE-----
Generated at Fri May 17 22:07:56 2024 by rpki-client on console-ams.rpki-client.org