Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer (raw, json)
Hash identifier: uhoLwBYMTvF8IGzumQJ6wivcaqeZvzxNvgD7VPWSAx0=
Subject key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4906
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Wed 13 Nov 2024 22:22:54 +0000
Certificate not after: Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources: IP: 2.58.240.0/22
IP: 2001:7fa:1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18694 (0x4906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Nov 13 22:22:54 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:2d:6c:a6:63:34:42:4a:08:60:2c:3e:bf:
15:b8:8e:13:65:ca:b0:aa:4c:99:3c:d5:f8:49:6e:
ea:d2:42:e0:48:c8:2a:c4:81:4b:f3:50:2d:36:4a:
14:e6:b7:5e:1e:fa:05:f0:8f:fe:0a:a9:e6:63:f8:
fd:60:7d:b8:ed:09:a8:51:f7:27:e2:fa:cd:28:63:
ec:c3:6a:a2:ab:6b:77:39:74:16:1a:0c:28:3c:09:
08:be:a0:94:51:d9:c1:3e:a9:67:ba:92:95:68:ca:
d0:a7:a2:10:5b:cb:e6:5a:8c:e2:01:c1:8d:94:22:
4c:41:f6:69:ae:35:51:da:a0:23:56:d8:64:ed:ce:
90:75:ba:fd:85:28:22:85:38:e9:14:25:1b:2a:cd:
40:56:66:5b:ad:0e:b7:eb:8c:61:a5:3b:90:43:09:
74:14:4b:21:73:a9:84:dd:43:dd:c1:bf:25:24:72:
8b:01:84:0f:62:56:f7:31:93:89:83:26:17:49:e5:
ce:84:71:a2:7c:2e:26:5b:56:a9:4d:17:28:39:76:
d1:2c:ca:53:5d:f0:80:c1:d4:34:68:87:f1:4a:fb:
b3:ca:21:6b:14:5b:fd:4e:db:cc:90:b6:65:a4:48:
e3:e5:8d:e5:f9:00:3c:c4:dd:44:f3:f8:ef:1b:09:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/22
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:02:a3:eb:23:c0:fa:20:fe:18:71:50:5b:34:fe:ef:d3:9f:
8b:b2:17:95:ee:03:4a:f3:ca:8e:17:7c:24:69:9b:fc:11:33:
f3:0d:97:d8:23:f2:e3:89:86:30:fb:09:88:95:89:0f:7a:27:
b9:f0:e9:cb:e6:4b:fb:df:23:28:c5:94:79:57:46:aa:25:29:
74:96:35:91:a8:81:97:61:3c:67:01:c9:92:45:b1:d7:08:52:
df:92:36:41:0f:ec:3b:e9:2d:65:d6:1c:81:fe:25:14:74:d5:
73:03:1f:7d:e8:00:9f:33:23:69:08:56:36:5a:c1:44:50:ba:
d7:4e:b2:c7:ab:28:27:e5:79:20:d5:87:92:af:d6:91:41:86:
74:7d:ae:9d:93:0f:b0:2d:38:8a:1c:e5:81:73:47:c1:6c:84:
65:34:6d:b0:b0:db:44:c2:be:7a:77:28:a2:a1:60:ff:58:ec:
8b:7f:71:53:98:88:75:0a:ff:f4:27:10:81:69:73:28:8b:e9:
43:2a:5b:3d:d1:99:57:40:6b:6c:34:f9:ab:2b:d9:0c:05:1f:
82:7c:a8:06:59:c0:b4:3e:f1:54:b7:08:49:5f:5a:cc:fa:ba:
53:bc:07:5e:55:fb:7d:83:b8:7d:a6:5d:42:16:87:82:46:d8:
4a:fc:74:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:41 2024 by rpki-client on console-ams.rpki-client.org