Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/p7aF2RtOmIGWTnfVtOI591VSoYs.cer
File: p7aF2RtOmIGWTnfVtOI591VSoYs.cer (raw, json)
Hash identifier: ZiY6HR6QYtjoMCWGoub7IIxBBbnJtX6o7cTFtyWGqCE=
Subject key identifier: A7:B6:85:D9:1B:4E:98:81:96:4E:77:D5:B4:E2:39:F7:55:52:A1:8B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 357D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:14 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 150769
IP: 2401:7ba0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 18:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13693 (0x357d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Feb 10 14:29:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A7B685D91B4E9881964E77D5B4E239F75552A18B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:44:cb:e6:01:ab:8e:6a:6b:c6:1d:a6:98:
67:7f:c0:26:7b:ef:5f:ed:40:99:e3:f8:fa:f5:bf:
f5:40:e1:55:18:21:fc:6d:bd:30:db:7c:25:41:51:
ba:a5:c2:a6:8d:e0:52:89:8a:d5:14:1b:1c:9b:36:
59:e1:2a:ea:4f:6e:1c:8f:c4:72:57:2c:7f:7e:82:
31:f6:f0:59:97:b4:01:19:b3:a9:84:75:10:ed:83:
36:63:c0:e1:73:e8:d8:26:3f:5e:1e:31:7f:cb:f6:
d2:90:c2:6a:36:36:d9:c3:f1:59:4e:5e:7e:84:4f:
be:c3:06:56:c1:6e:bc:3d:70:bf:e5:6e:c6:c2:b0:
af:32:ab:2b:ed:9d:65:92:8c:2e:1b:e4:99:bc:6c:
07:dd:85:cf:27:4d:1c:c5:8c:c6:22:6c:e0:c6:90:
7a:82:5b:ee:af:f0:f0:3e:bd:a0:ba:95:32:33:94:
76:c3:5d:7a:ba:2b:05:f8:be:d0:89:37:b3:a8:60:
ad:d2:2f:4b:54:41:72:c5:4d:2c:03:ef:72:72:a2:
27:b7:cb:60:85:c5:1a:40:90:1e:3f:0e:e4:ac:d5:
c3:47:33:83:28:78:c4:ae:54:19:f6:1c:59:e2:8c:
1e:ca:65:b2:73:76:e7:45:0b:1c:39:20:0c:c5:ac:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:85:D9:1B:4E:98:81:96:4E:77:D5:B4:E2:39:F7:55:52:A1:8B
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150769
sbgp-ipAddrBlock: critical
IPv6:
2401:7ba0::/32
Signature Algorithm: sha256WithRSAEncryption
61:ac:cd:c7:fb:56:d6:a2:7f:2d:76:3a:64:a0:5b:a1:89:dd:
b5:ad:b9:08:ce:21:bb:61:3f:7a:bf:56:cd:7f:50:de:5d:b3:
ca:aa:3b:95:e9:b7:f8:99:11:22:02:14:ce:a3:51:9f:99:ca:
55:f8:2b:ee:d4:ec:57:c8:34:8c:4a:97:e4:f5:6b:68:b7:53:
60:f4:b7:ae:ce:78:2e:d1:79:5a:82:02:81:dc:e9:c5:49:e6:
ce:07:b6:43:01:1e:b5:50:7c:4c:4b:62:7a:be:17:0f:e3:cc:
dd:69:b2:bf:da:78:8e:b3:d8:8e:38:33:9c:84:5d:e4:ab:bc:
c2:96:e3:e0:7c:33:a2:7f:dc:e7:61:5d:ee:d4:a2:e5:da:7b:
e1:f8:1e:db:3f:87:55:42:fa:61:01:10:8e:69:3f:65:d8:b7:
05:9c:9e:01:2f:c4:d9:b8:a9:af:99:6e:08:74:14:f8:53:fc:
28:26:10:bd:0e:0c:ca:85:cc:7d:88:4c:26:52:7b:57:ca:b7:
55:4e:3f:21:a6:4a:78:5b:fc:fe:ab:ff:95:2c:6e:2e:44:ca:
33:8b:95:21:15:8b:1e:fc:87:da:76:e6:17:52:bb:26:58:a2:
ca:1f:d4:70:26:f1:db:a9:17:2c:15:9e:86:96:c2:3e:6b:79:
79:95:f4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:16:13 2025 by rpki-client