Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
File: govRnvqOvlnvQHu3-raJj3VMfsE.cer (raw, json)
Hash identifier: gFf23EG8cARElb+Oio9M4bAOiuvV7tTYtXjCbdplyGU=
Subject key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 353F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:11 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131645
IP: 103.134.120.0/22
IP: 2404:63c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Apr 2025 17:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13631 (0x353f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Feb 10 14:29:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:e2:dc:90:fc:37:ea:0b:23:17:89:ba:83:
99:b1:fb:31:c4:a7:1e:d6:10:3a:3b:2f:1c:d9:ab:
4d:9d:07:04:e5:b9:ae:a5:44:56:af:da:2a:8f:15:
38:40:54:9b:a3:79:23:c6:4b:06:cc:39:e7:61:94:
d5:f6:f7:2d:ca:b9:ef:6d:e5:2d:b8:76:e0:d4:99:
4c:9a:5c:61:d7:66:3e:c5:3c:57:ce:3f:fe:cd:be:
e7:44:d9:58:a5:57:84:37:e7:42:ee:1b:16:bf:33:
28:fb:19:0b:5c:e1:58:06:68:c6:9d:3b:e0:10:29:
34:7a:f3:b5:79:1c:6d:df:9f:09:36:3e:17:f0:10:
c2:d4:39:40:b8:d0:e3:4d:5a:1a:d1:b4:fb:ca:a5:
e9:7c:21:ef:e4:72:ee:11:ab:0b:58:c7:da:ab:55:
a1:4b:84:2a:ea:32:97:17:67:a6:1a:00:fc:da:8e:
9a:71:8b:22:f5:59:ec:d6:c7:25:f5:e5:64:8d:39:
b7:43:89:0f:53:25:a0:e6:8d:6a:78:d9:7f:d9:90:
7d:e3:0c:63:8a:64:05:17:1d:05:1c:f6:63:74:33:
57:14:80:a7:5f:5d:8c:f8:b4:4c:3c:1a:38:5f:13:
97:4d:c3:e8:ab:85:f6:64:ec:41:a2:e9:93:62:56:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131645
sbgp-ipAddrBlock: critical
IPv4:
103.134.120.0/22
IPv6:
2404:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
39:88:b9:cc:e0:d6:85:12:44:5e:6f:df:5f:53:1d:e6:07:4f:
10:13:7a:cc:3d:4a:fc:71:53:b7:08:35:a7:5a:3a:cf:e6:10:
ca:e1:e3:9b:5d:33:b3:a2:a0:9b:72:87:23:30:d4:0a:83:da:
7b:56:4d:a5:64:32:ab:b5:9c:b6:34:c3:db:22:de:eb:c7:cd:
a5:2e:da:a6:4f:6d:01:92:2c:4b:91:ea:4b:85:06:22:8b:2e:
16:8f:bd:40:20:be:0d:ba:45:fb:3b:ed:41:a3:10:7b:03:04:
56:81:f7:17:75:33:16:4a:a5:b4:ea:05:93:00:7d:7b:b9:36:
24:7e:be:6c:e6:66:cd:88:03:c4:5c:b8:aa:27:b1:6a:65:12:
20:51:6d:7d:a8:1b:70:07:3f:20:dd:ac:31:e9:f4:f8:60:e8:
a9:b3:b1:a4:06:88:53:e0:65:b6:19:4d:f4:b4:db:98:ed:aa:
e9:59:94:80:52:8d:e4:51:3b:7f:8e:a5:0d:80:a1:2c:6a:d7:
b7:8d:c6:b5:93:ab:5a:f1:97:18:44:35:04:9b:ca:7c:ef:2e:
91:3a:7e:c5:46:12:86:5f:81:52:3e:01:69:1c:a0:aa:e7:15:
5b:06:8a:65:83:ab:11:9a:e3:33:2d:a7:cd:73:22:3c:bf:d7:
b5:f0:03:96
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICNT8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkxMVoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoODI4QkQxOUVGQThFQkU1OUVGNDA3QkI3RkFCNjg5OEY3NTRDN0VD
MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMv44tyQ/DfqCyMXibqD
mbH7McSnHtYQOjsvHNmrTZ0HBOW5rqVEVq/aKo8VOEBUm6N5I8ZLBsw552GU1fb3
Lcq5723lLbh24NSZTJpcYddmPsU8V84//s2+50TZWKVXhDfnQu4bFr8zKPsZC1zh
WAZoxp074BApNHrztXkcbd+fCTY+F/AQwtQ5QLjQ401aGtG0+8ql6Xwh7+Ry7hGr
C1jH2qtVoUuEKuoylxdnphoA/NqOmnGLIvVZ7NbHJfXlZI05t0OJD1MloOaNanjZ
f9mQfeMMY4pkBRcdBRz2Y3QzVxSAp19djPi0TDwaOF8Tl03D6KuF9mTsQaLpk2JW
MMMCAwEAAaOCAncwggJzMB0GA1UdDgQWBBSCi9Ge+o6+We9Ae7f6tomPdUx+wTAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF
hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tDTy8wVQYI
KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9L
S0NPL2dvdlJudnFPdmxudlFIdTMtcmFKajNWTWZzRS5tZnQwMQYIKwYBBQUHMA2G
JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAgI9MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC
Z4Z4MA0EAgACMAcDBQAkBGPAMA0GCSqGSIb3DQEBCwUAA4IBAQA5iLnM4NaFEkRe
b99fUx3mB08QE3rMPUr8cVO3CDWnWjrP5hDK4eObXTOzoqCbcocjMNQKg9p7Vk2l
ZDKrtZy2NMPbIt7rx82lLtqmT20BkixLkepLhQYiiy4Wj71AIL4NukX7O+1BoxB7
AwRWgfcXdTMWSqW06gWTAH17uTYkfr5s5mbNiAPEXLiqJ7FqZRIgUW19qBtwBz8g
3awx6fT4YOips7GkBohT4GW2GU30tNuY7arpWZSAUo3kUTt/jqUNgKEsate3jca1
k6ta8ZcYRDUEm8p87y6ROn7FRhKGX4FSPgFpHKCq5xVbBoplg6sRmuMzLafNcyI8
v9e18AOW
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:29:27 2025 by rpki-client