Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer
File:                     ftgwlnECe35vya4nucaMnE4pxXU.cer (raw, json)
Hash identifier:          v5aBHR9/Z8sIZj9FQBwI4FWoDOpi6rjPGOD1EYVOOGY=
Subject key identifier:   7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       1CAA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Wed 09 Jul 2025 07:33:01 +0000
Certificate not after:    Wed 08 Jul 2026 15:30:21 +0000
Subordinate resources:    IP: 165.101.152.0/23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 03:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7338 (0x1caa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Validity
            Not Before: Jul  9 07:33:01 2025 GMT
            Not After : Jul  8 15:30:21 2026 GMT
        Subject: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:ba:3f:1a:36:90:ec:65:58:1c:de:45:9f:
                    51:cb:ff:57:93:c9:84:35:3f:00:82:85:32:84:c1:
                    b9:e3:eb:78:11:cf:87:f6:54:f1:a7:1f:52:9e:7f:
                    39:fc:5e:a7:36:4f:65:92:cb:92:2c:15:c1:36:4c:
                    64:e5:60:70:4e:db:31:63:33:96:03:d7:3d:a4:f3:
                    5f:60:fa:95:c7:be:5d:37:68:f9:81:ba:cb:83:5a:
                    a6:01:f4:b6:83:8f:ce:cc:28:24:35:f6:bf:27:da:
                    d2:0f:a9:e3:f7:30:c3:a3:06:7b:d9:29:03:1d:90:
                    4d:93:b7:5a:59:40:be:de:ac:17:63:35:1c:09:6b:
                    19:b5:99:d0:b1:2e:d9:03:bb:88:3d:16:77:f3:4f:
                    3b:b7:b8:fa:06:30:9b:be:67:1b:40:26:28:9f:eb:
                    21:6c:96:35:ac:05:40:2f:30:9c:25:d1:8e:cd:ff:
                    92:43:4f:aa:14:ab:55:b2:12:09:8d:0e:a6:bf:bd:
                    0a:b6:70:11:25:24:f3:91:5b:8d:89:8a:7f:c3:e1:
                    92:d7:64:73:69:93:f3:4d:d1:4e:38:5d:49:34:7c:
                    5b:61:22:dc:f4:d5:05:28:dc:89:30:fd:41:4a:64:
                    44:85:1a:d0:c8:95:ac:db:67:93:bc:7b:ce:06:67:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:5b:32:32:33:39:39:8e:b8:6c:b0:d0:59:d3:db:e2:a8:ca:
         71:22:9f:fd:5a:71:5a:97:25:c7:a0:97:ce:bf:be:18:51:17:
         5e:07:06:69:2d:8a:70:5a:e6:fc:69:3f:ef:b1:d4:85:e1:30:
         3f:a9:86:9f:27:48:86:7d:a7:a1:5c:da:e3:f0:da:f7:1b:6b:
         a6:92:c1:bf:4e:a8:25:53:61:26:4c:82:de:9a:c6:d7:2e:f2:
         af:6c:d5:c4:99:f9:8a:cb:a1:ac:b0:79:ab:48:97:12:03:76:
         dd:e7:37:87:e1:d8:9d:ec:94:01:dd:37:34:7b:0d:1e:dd:d6:
         a6:be:9a:36:1e:56:1c:89:8f:72:61:21:eb:97:c0:d1:2a:2b:
         0c:e2:09:84:49:2e:ca:34:b3:7c:c0:52:01:3b:8a:53:40:16:
         cf:da:96:12:45:62:f2:89:2d:5d:c6:49:b8:16:d3:77:b2:ea:
         db:48:42:c8:1c:26:b1:88:1c:a6:0a:85:42:f7:b7:9e:e3:05:
         f7:d7:f6:b9:13:b6:51:12:19:0e:59:9c:66:94:b6:7c:ee:24:
         cc:3f:19:2e:9a:9b:32:5d:3c:1b:ff:fd:95:d9:f1:71:39:e6:
         5e:f1:33:0d:5e:f9:97:c4:b9:e6:c5:23:da:53:4a:6b:74:83:
         8e:a0:ea:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:47:30 2025 by rpki-client