Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
File: zjfXyZGFo9msYRcY2nhVm26Zoxs.cer (raw, json)
Hash identifier: pZhuFaqaAzgH0ToooEORJvep9GjvDOHxA9FNvNsLwjM=
Subject key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3415
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:28:59 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.141.80.0/23
IP: 2405:14c0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13333 (0x3415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Feb 10 14:28:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:a2:64:8d:77:b3:0e:2a:16:b9:7d:a5:de:
8a:12:4e:67:f7:b8:bb:26:2d:06:4a:ab:ec:40:96:
2a:27:b0:39:7f:ad:63:32:1a:2e:4e:2a:2a:a8:59:
53:f8:65:65:bb:29:60:8d:ff:da:ef:3b:aa:90:5d:
ec:a3:ae:ee:56:9b:91:9f:d2:de:3f:e4:b2:de:10:
93:b5:fe:06:c7:7c:19:d3:23:5e:cf:3d:d4:4c:bd:
7f:61:2a:11:67:94:3f:91:95:f0:27:9f:65:32:68:
b1:fa:85:01:0d:6c:ac:22:59:9f:89:60:98:fd:f7:
66:35:6d:7a:dd:cb:e4:c3:31:42:bc:f0:70:25:63:
ca:b8:77:80:bf:57:cf:fc:c5:2c:39:c6:dd:2b:d3:
bc:16:60:66:f8:75:d7:4a:09:0b:cd:31:34:c0:f6:
8b:a8:cd:e2:8b:b1:42:9b:48:14:69:70:0d:cf:8f:
6e:5c:3e:4f:2a:b4:84:64:e4:62:4a:db:d1:2c:33:
0b:f1:f9:87:17:9f:d8:d3:2e:cb:82:60:1f:08:1e:
08:97:e1:89:67:ff:4d:21:86:41:fd:15:d8:f1:16:
f4:1a:a5:37:ec:48:85:88:f4:a2:b5:f7:1d:08:89:
7c:de:88:3a:9b:86:57:4f:3f:99:92:55:b7:f6:a1:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.80.0/23
IPv6:
2405:14c0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:94:13:bd:60:9a:41:6f:23:fc:fb:d3:a2:0d:13:7c:af:2c:
da:7d:63:ae:75:d8:a8:d1:01:75:4f:ff:0f:50:05:12:e8:58:
ff:ba:8f:db:40:fa:03:6f:35:cb:a3:fb:eb:a5:1f:e1:3a:ae:
4e:a4:11:ad:e1:7b:37:a5:d0:15:72:76:92:46:7e:a1:19:f2:
b7:68:42:32:bc:b9:41:d6:c0:7c:76:a6:de:fe:de:1a:57:c3:
bb:6e:fb:a2:b5:2a:b4:77:8a:79:91:dc:5c:34:d2:c3:a6:1e:
e0:e9:6a:aa:74:80:4b:bc:b0:7b:e5:e5:90:59:19:ff:f3:82:
3e:85:50:34:53:ed:26:2b:5b:4d:66:7a:96:86:b0:22:25:3f:
83:52:8f:1c:66:66:5c:0a:5a:5b:c7:4d:90:4e:ba:97:68:3d:
b6:6a:f1:97:d3:c0:20:16:5f:07:26:b8:c1:d3:e8:aa:69:00:
7a:6b:41:09:89:3c:42:e2:a1:11:e0:2c:14:d4:06:bc:4e:f5:
6b:f0:f8:2c:e6:a6:43:60:ca:76:be:46:cc:a9:1b:34:a3:95:
85:8d:6c:16:eb:8d:df:e6:18:bb:14:8f:7b:6a:ad:ae:bd:41:
45:71:80:e6:7c:a5:fe:b6:b7:f0:73:27:4c:4f:a5:5b:a4:19:
bd:26:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:31:58 2025 by rpki-client