Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/uU530OicbkiYh7m6MhYTTB-VamQ.cer
File: uU530OicbkiYh7m6MhYTTB-VamQ.cer (raw, json)
Hash identifier: blR5NAoC6ITh6GGQ8z2eqHbU12/vH17ZycYNIbFnzYw=
Subject key identifier: B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 291A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:29 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 38850
IP: 43.246.188.0/22
IP: 103.8.104.0/22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 May 2024 07:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10522 (0x291a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B94E77D0E89C6E489887B9BA3216134C1F956A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:64:2c:72:d3:7f:ea:a9:a1:76:64:82:2e:
0b:6f:f1:25:c8:2d:7d:a9:ca:5f:6e:f2:e2:e7:9a:
78:bf:63:ba:bb:a9:df:c6:dc:82:73:2e:61:e4:45:
e9:89:33:14:87:a5:fa:d8:69:ab:41:90:72:d2:61:
d6:77:d6:83:9f:e4:68:ef:11:7c:68:62:2b:0f:91:
68:66:d3:df:d8:bb:0d:81:3a:cc:af:21:23:67:0f:
76:0b:32:63:86:76:b2:d3:0d:d4:20:79:fc:06:2a:
71:08:13:38:dd:b2:12:2d:88:88:0f:85:7d:5d:23:
4d:a5:89:1d:e2:42:d1:7c:57:cb:a8:de:50:3b:bb:
c7:14:4f:d2:50:97:63:f8:4a:2b:18:27:3f:b6:58:
86:bf:cb:45:bf:74:63:7d:08:56:bc:27:c6:da:40:
b2:34:7e:ac:9d:6f:a6:cb:16:a9:3e:04:af:06:21:
04:b3:48:89:d4:f9:03:23:11:4a:b0:47:9d:4a:03:
f6:7f:82:3a:7b:be:02:a2:b4:5a:d2:fa:47:98:cb:
3d:56:0b:59:33:ac:b6:85:b4:b6:3e:ad:a7:68:87:
dc:d7:4c:d6:7d:51:3c:ff:0e:ba:74:81:83:55:f1:
36:b0:e6:59:0c:f6:e5:ce:4b:5f:c4:03:fd:cb:72:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38850
sbgp-ipAddrBlock: critical
IPv4:
43.246.188.0/22
103.8.104.0/22
Signature Algorithm: sha256WithRSAEncryption
88:a6:78:3d:1b:5f:15:82:36:06:d9:d0:56:64:11:ee:0f:d2:
ba:58:68:04:d8:f8:f4:38:40:9d:7d:fb:d2:d3:63:4e:8f:63:
23:36:f1:90:eb:3a:f1:1e:cf:e4:07:cd:6d:41:ea:13:80:07:
3a:5d:3c:5e:a9:51:f1:5d:92:44:8f:e7:59:4d:97:eb:ee:d0:
26:4b:35:09:93:96:fa:91:c0:9a:5c:19:4c:17:77:83:14:b8:
a4:4d:c2:21:d3:82:39:0d:06:b6:f5:c8:b9:66:a7:53:99:7b:
53:28:14:0c:cb:38:d3:1a:b1:c9:36:52:bd:77:58:8f:e7:9d:
7e:ef:82:b9:71:2f:63:af:47:bc:ab:47:39:45:83:b3:81:9b:
0f:a4:18:c8:74:42:bd:c2:ea:60:b5:ac:fa:c4:e3:21:c2:6a:
4c:54:ec:53:34:ee:82:3a:a9:a6:da:a7:0c:b3:b3:d8:0e:65:
de:bd:3d:f4:f6:84:00:b1:99:02:da:1f:c4:5b:48:a0:20:f7:
1b:68:02:f0:1c:71:f2:91:68:61:45:20:a1:c3:9c:b0:78:b2:
b0:e8:24:39:d4:46:ba:a4:80:53:c9:f2:4d:b6:72:49:65:78:
4e:6c:bd:89:7f:df:31:e3:b4:c9:06:28:10:87:92:3f:66:ec:
64:5f:e7:e6
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgICKRowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEyOVoXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoQjk0RTc3RDBFODlDNkU0ODk4ODdCOUJBMzIxNjEzNEMxRjk1NkE2
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALoQZCxy03/qqaF2ZIIu
C2/xJcgtfanKX27y4ueaeL9jurup38bcgnMuYeRF6YkzFIel+thpq0GQctJh1nfW
g5/kaO8RfGhiKw+RaGbT39i7DYE6zK8hI2cPdgsyY4Z2stMN1CB5/AYqcQgTON2y
Ei2IiA+FfV0jTaWJHeJC0XxXy6jeUDu7xxRP0lCXY/hKKxgnP7ZYhr/LRb90Y30I
VrwnxtpAsjR+rJ1vpssWqT4ErwYhBLNIidT5AyMRSrBHnUoD9n+COnu+AqK0WtL6
R5jLPVYLWTOstoW0tj6tp2iH3NdM1n1RPP8OunSBg1XxNrDmWQz25c5LX8QD/cty
g+MCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBS5TnfQ6JxuSJiHuboyFhNMH5VqZDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF
hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElHQy8wVQYI
KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9U
SUdDL3VVNTMwT2ljYmtpWWg3bTZNaFlUVEItVmFtUS5tZnQwMQYIKwYBBQUHMA2G
JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAJfCMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC
K/a8AwQCZwhoMA0GCSqGSIb3DQEBCwUAA4IBAQCIpng9G18VgjYG2dBWZBHuD9K6
WGgE2Pj0OECdffvS02NOj2MjNvGQ6zrxHs/kB81tQeoTgAc6XTxeqVHxXZJEj+dZ
TZfr7tAmSzUJk5b6kcCaXBlMF3eDFLikTcIh04I5DQa29ci5ZqdTmXtTKBQMyzjT
GrHJNlK9d1iP551+74K5cS9jr0e8q0c5RYOzgZsPpBjIdEK9wupgtaz6xOMhwmpM
VOxTNO6COqmm2qcMs7PYDmXevT309oQAsZkC2h/EW0igIPcbaALwHHHykWhhRSCh
w5yweLKw6CQ51Ea6pIBTyfJNtnJJZXhObL2Jf98x47TJBigQh5I/ZuxkX+fm
-----END CERTIFICATE-----
Generated at Fri May 17 10:15:35 2024 by rpki-client on console-ams.rpki-client.org