Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer (raw, json)
Hash identifier: fzxcEIeoVBRsZWfy8rnFS2dslXdF6aFWNB+pctO3Zpg=
Subject key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 41D4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 18 Jul 2023 02:11:50 +0000
Certificate not after: Mon 30 Sep 2024 00:00:00 +0000
Subordinate resources: IP: 2001:7fa:1::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 20:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16852 (0x41d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jul 18 02:11:50 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:2d:6c:a6:63:34:42:4a:08:60:2c:3e:bf:
15:b8:8e:13:65:ca:b0:aa:4c:99:3c:d5:f8:49:6e:
ea:d2:42:e0:48:c8:2a:c4:81:4b:f3:50:2d:36:4a:
14:e6:b7:5e:1e:fa:05:f0:8f:fe:0a:a9:e6:63:f8:
fd:60:7d:b8:ed:09:a8:51:f7:27:e2:fa:cd:28:63:
ec:c3:6a:a2:ab:6b:77:39:74:16:1a:0c:28:3c:09:
08:be:a0:94:51:d9:c1:3e:a9:67:ba:92:95:68:ca:
d0:a7:a2:10:5b:cb:e6:5a:8c:e2:01:c1:8d:94:22:
4c:41:f6:69:ae:35:51:da:a0:23:56:d8:64:ed:ce:
90:75:ba:fd:85:28:22:85:38:e9:14:25:1b:2a:cd:
40:56:66:5b:ad:0e:b7:eb:8c:61:a5:3b:90:43:09:
74:14:4b:21:73:a9:84:dd:43:dd:c1:bf:25:24:72:
8b:01:84:0f:62:56:f7:31:93:89:83:26:17:49:e5:
ce:84:71:a2:7c:2e:26:5b:56:a9:4d:17:28:39:76:
d1:2c:ca:53:5d:f0:80:c1:d4:34:68:87:f1:4a:fb:
b3:ca:21:6b:14:5b:fd:4e:db:cc:90:b6:65:a4:48:
e3:e5:8d:e5:f9:00:3c:c4:dd:44:f3:f8:ef:1b:09:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
38:82:f5:3f:b0:40:e7:09:eb:8f:54:dc:85:8b:a5:c9:c8:f4:
a0:82:f5:25:a8:66:b2:ef:a4:28:c4:53:28:7e:f4:11:da:d6:
d2:f6:a9:48:fc:d0:f5:b3:a5:63:5c:57:bf:ed:02:48:01:58:
13:e1:e0:2a:10:81:65:ed:9c:cc:90:73:3d:8f:5f:6a:d2:fd:
d2:41:2b:ca:24:ae:24:4a:51:f7:7e:37:86:5c:3c:cc:53:b5:
c9:ed:32:b3:e5:40:83:6b:e6:ca:7f:6b:15:c8:d1:45:35:ae:
71:1f:2c:b2:ea:7d:b5:b4:36:d8:b4:4f:1e:c4:46:79:50:de:
1b:8a:f0:f9:e1:07:03:2a:b7:81:02:95:fa:3d:78:c4:71:51:
4d:e2:6b:b7:6b:e0:f6:d9:98:a0:5c:f3:d2:8d:90:41:d3:d5:
a8:34:c1:5a:70:f2:5f:d9:01:0c:45:51:89:02:c1:04:53:88:
76:8a:7b:40:77:94:15:7a:40:10:36:78:d4:72:03:d3:1b:97:
25:7b:12:7c:4d:bc:57:d8:ef:93:3a:9b:d3:04:f7:23:1e:0e:
f9:95:9c:ce:96:48:d8:8f:7d:82:9b:f0:40:9c:d6:37:61:d9:
e1:31:2c:27:27:71:99:f6:3f:03:a8:e8:ca:ce:a4:89:b0:cb:
a3:03:62:96
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgICQdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjMwNzE4MDIxMTUwWhcNMjQwOTMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTFCREIyOTAwMDAxMTAvBgNVBAUTKEQxRDJGNTVDMjZEQjI4NTIwQTc5
OTZGRjcyRUQwMTA0MjAwNzk4QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+Ei1spmM0QkoIYCw+vxW4jhNlyrCqTJk81fhJburSQuBIyCrEgUvzUC02
ShTmt14e+gXwj/4KqeZj+P1gfbjtCahR9yfi+s0oY+zDaqKra3c5dBYaDCg8CQi+
oJRR2cE+qWe6kpVoytCnohBby+ZajOIBwY2UIkxB9mmuNVHaoCNW2GTtzpB1uv2F
KCKFOOkUJRsqzUBWZlutDrfrjGGlO5BDCXQUSyFzqYTdQ93BvyUkcosBhA9iVvcx
k4mDJhdJ5c6EcaJ8LiZbVqlNFyg5dtEsylNd8IDB1DRoh/FK+7PKIWsUW/1O28yQ
tmWkSOPljeX5ADzE3UTz+O8bCdrbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0dL1
XCbbKFIKeZb/cu0BBCAHmKIwHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe
dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0
MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX
ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwgcgGCCsGAQUFBwELBIG7MIG4MDEGCCsGAQUF
BzAFhiVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMFAGCCsG
AQUFBzAKhkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMGRM
MVhDYmJLRklLZVpiX2N1MEJCQ0FIbUtJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6
Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABB/oAATANBgkqhkiG9w0BAQsFAAOCAQEAOIL1P7BA5wnr
j1TchYulycj0oIL1Jahmsu+kKMRTKH70EdrW0vapSPzQ9bOlY1xXv+0CSAFYE+Hg
KhCBZe2czJBzPY9fatL90kEryiSuJEpR9343hlw8zFO1ye0ys+VAg2vmyn9rFcjR
RTWucR8ssup9tbQ22LRPHsRGeVDeG4rw+eEHAyq3gQKV+j14xHFRTeJrt2vg9tmY
oFzz0o2QQdPVqDTBWnDyX9kBDEVRiQLBBFOIdop7QHeUFXpAEDZ41HID0xuXJXsS
fE28V9jvkzqb0wT3Ix4O+ZWczpZI2I99gpvwQJzWN2HZ4TEsJydxmfY/A6joys6k
ibDLowNilg==
-----END CERTIFICATE-----
Generated at Sun May 5 22:04:22 2024 by rpki-client on console-fra.rpki-client.org