Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer
File:                     pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer (raw, json)
Hash identifier:          u20ao4toEKXOxriHvL++zyqxUP+lUHGI/PhJNhbP9bY=
Subject key identifier:   A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 01 Sep 2023 03:11:15 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 131607
                          IP: 27.0.152.0/22
                          IP: 103.207.252.0/22

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 07:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10260 (0x2814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  1 03:11:15 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:01:b2:11:d4:00:b6:70:39:d0:ae:3e:fd:
                    d8:0e:fd:3e:f1:5b:19:1b:f1:79:49:0d:b0:a4:0b:
                    56:a7:c0:79:7c:56:a0:e0:d7:4d:c2:17:16:ff:fd:
                    84:0b:68:9b:15:7c:87:b2:11:24:95:68:37:dc:6b:
                    7b:48:34:12:a4:ee:2a:fc:7c:1a:9f:a4:8f:29:d4:
                    ec:b3:4d:d4:03:27:31:71:01:a2:ba:bd:b5:14:be:
                    6c:5e:b6:50:07:90:ff:87:bf:4c:9e:0f:fe:f3:1e:
                    40:e1:b3:ba:93:73:98:22:d3:33:c9:19:2a:25:a9:
                    12:71:0a:96:1b:1b:15:14:0a:00:38:5a:58:b9:7d:
                    d6:13:c2:8f:23:73:46:77:67:c6:36:5e:75:19:6b:
                    f5:7f:c2:00:5a:40:8c:17:8c:ce:b7:bb:73:e0:f9:
                    f0:22:e2:73:0c:26:fb:41:45:fb:2a:b3:78:2d:98:
                    72:97:b3:18:cb:c9:1c:1b:b4:50:56:ad:2b:55:4d:
                    83:7d:06:64:f0:14:06:ce:ee:05:fa:d4:69:67:e9:
                    c8:57:69:85:83:d8:cd:f9:fe:ce:c9:37:a1:5c:c7:
                    0d:c8:df:81:16:ac:74:c6:db:c0:08:b2:09:b2:70:
                    65:1a:dd:54:fd:e9:c9:f1:6f:94:9a:a0:45:b6:4b:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131607

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.152.0/22
                  103.207.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:4f:42:c4:1a:c5:a3:0a:3f:be:9a:a4:b2:c5:8c:15:7a:
         f2:bf:25:ca:e0:8f:57:b5:12:a5:30:79:ad:20:f1:ea:77:3e:
         06:85:8f:ff:8f:52:ac:9a:5b:ac:d3:a1:8c:b4:fb:c1:83:0f:
         fd:83:98:7d:b9:47:9c:54:f5:b2:5a:80:c8:32:22:fe:4c:54:
         0c:f6:e5:ca:63:14:33:a2:c3:17:64:b2:b7:66:e0:a6:44:3d:
         1a:f0:7b:38:23:c1:3f:63:19:f6:14:6f:86:af:7f:a8:7e:e6:
         43:a8:82:af:e6:8b:b1:4c:81:fc:71:ae:0c:19:f9:be:6b:be:
         e2:3a:f4:27:0b:ca:8a:d4:23:fd:14:a3:f2:f0:e1:5e:44:be:
         c1:37:c2:90:66:7d:ee:29:e1:e0:4e:b6:7a:35:86:63:c4:d2:
         73:c0:31:3f:79:ff:ac:93:4f:c7:19:13:d1:08:50:53:da:b1:
         da:4d:9a:5e:ce:96:47:ff:a5:55:f9:97:78:3d:d3:d4:3b:18:
         97:78:38:52:b6:51:35:40:3a:59:1e:37:60:d9:73:ea:6f:2f:
         b7:13:5f:aa:95:b9:f6:5f:7a:30:63:fd:55:97:61:e6:37:d6:
         87:9f:fe:55:8a:fa:e1:79:fe:28:0b:35:d8:ae:87:ec:23:30:
         80:cb:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:34:35 2024 by rpki-client on console-fra.rpki-client.org