Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2lEGgh7u-V6PamELPU5WfV4BQeI.cer
File: 2lEGgh7u-V6PamELPU5WfV4BQeI.cer (raw, json)
Hash identifier: EVF4z4FsHJrsVHAnqV0xF+FOY7kPVsK6bFFO636jqBA=
Subject key identifier: DA:51:06:82:1E:EE:F9:5E:8F:6A:61:0B:3D:4E:56:7D:5E:01:41:E2
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 187E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEF/2lEGgh7u-V6PamELPU5WfV4BQeI.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEF/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 29 Sep 2020 09:53:18 +0000
Certificate not after: Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources: IP: 103.137.188.0/23
IP: 2404:b840::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6270 (0x187e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 29 09:53:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DA5106821EEEF95E8F6A610B3D4E567D5E0141E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:1d:12:24:6b:af:54:3b:6a:26:32:ed:04:
83:8b:4c:4d:5d:92:93:b3:20:1d:5c:c5:8c:7c:85:
6e:59:49:3f:c8:34:a6:42:b2:30:a4:ee:67:15:6d:
38:ad:2c:aa:88:2d:b7:b6:65:13:d1:83:fe:66:29:
b8:4b:c7:e5:1d:8b:55:ed:2b:53:86:47:33:c9:4a:
a8:c1:a1:11:d4:4d:05:e7:c4:1b:cb:8e:68:02:8d:
99:c8:9b:61:72:40:11:28:40:02:de:41:b1:6d:5f:
7f:b5:51:58:2c:f3:84:3c:41:67:d7:de:05:70:5d:
76:5c:0a:40:00:df:ed:ed:ee:6e:47:69:f9:36:3f:
6b:87:fc:bb:6c:aa:57:2a:b3:48:bb:ab:e5:b3:f3:
c5:97:3c:a4:a4:38:c8:91:e7:c4:d8:17:dd:57:2a:
cf:66:00:cb:74:fa:68:9e:f1:87:bd:af:e7:c1:8d:
01:28:b4:cc:9f:8e:93:d0:25:3a:99:0a:fb:ff:e3:
1c:4b:55:7f:fe:69:8a:72:68:c3:43:f6:bf:42:e9:
43:04:89:09:fb:f9:5b:14:55:e4:35:f5:af:f6:97:
28:a3:09:21:18:d7:a4:7c:da:70:4c:9c:0b:47:c0:
6e:43:21:0d:45:cf:31:9d:47:9f:ff:b8:bd:9a:ad:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:51:06:82:1E:EE:F9:5E:8F:6A:61:0B:3D:4E:56:7D:5E:01:41:E2
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEF/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEF/2lEGgh7u-V6PamELPU5WfV4BQeI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.188.0/23
IPv6:
2404:b840::/32
Signature Algorithm: sha256WithRSAEncryption
70:92:eb:cd:c6:5a:de:14:ce:bc:2e:a6:c6:c3:57:4a:31:d5:
56:5b:65:bc:8b:d8:b7:7a:90:a6:45:f7:1c:93:5a:35:b3:f3:
92:61:26:9f:32:c6:94:39:e0:a7:e6:eb:9d:81:1c:36:a2:73:
10:7d:2b:87:ee:7c:ee:d8:e2:e3:17:0b:93:fa:6b:18:5c:0c:
0e:d8:e1:63:d5:8a:4c:30:23:5b:8b:d9:22:f9:54:26:11:55:
e0:8b:e3:e5:c2:74:22:a3:9d:a2:92:1e:15:28:87:2d:5f:a5:
1e:ec:fc:49:fa:40:c6:3e:6a:0e:f5:d1:d5:e5:7e:91:fe:7b:
1e:41:a5:80:51:5b:e7:b8:a2:0e:5b:86:ac:ce:e6:d4:81:00:
d7:7c:98:eb:d0:b0:10:03:ee:f8:64:6d:a8:87:fa:8a:c0:ec:
83:75:30:c9:b9:0c:24:c5:23:ad:cf:38:3a:4a:c3:37:6c:b5:
29:9c:70:34:97:ee:8a:7d:59:7b:10:52:01:29:8a:59:17:8f:
9c:44:58:0f:f1:a9:1e:a8:7f:9b:2c:ac:80:9b:8e:48:a6:27:
bc:5a:a6:57:6b:f8:79:ac:d4:05:25:25:12:e3:5b:8f:d7:c0:
a2:43:ef:1f:3e:bf:47:cb:58:2a:4e:9c:b8:f9:2c:83:f4:6e:
bd:17:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org