Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer
File: 3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer (raw, json)
Hash identifier: 0c/nFQ0dC7sHhTcQtiY4Dv61Kkv4pCr/CaeRrPzKgIw=
Subject key identifier: DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2E9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:29 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131659
IP: 103.131.252.0/22
IP: 2403:d5c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11931 (0x2e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DEA0948BB7791C4710993A8F1FCCE967ADA09C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:3c:2f:77:d4:42:60:6c:b9:21:33:ba:52:
f0:89:6a:45:4e:44:b6:11:2c:be:ca:17:f1:b5:dd:
c4:a0:62:3f:b7:53:90:77:10:20:b3:61:25:cd:bc:
e5:b3:a0:4c:4d:54:f5:3a:8e:f8:32:83:ed:5f:2f:
37:81:20:e9:ce:37:fe:a0:1f:58:b5:da:28:63:c7:
66:9e:40:e8:d8:61:e8:16:76:d7:43:c1:4e:5b:1a:
ca:cb:ec:04:f9:29:0c:11:d2:82:01:fa:b4:22:f2:
25:f7:0e:a3:66:6f:c6:19:8e:fd:e3:6d:d5:dd:3d:
f5:cc:ec:65:e3:9a:0d:af:88:60:8d:b8:ce:59:67:
05:cb:85:b8:ca:b5:97:df:6b:9a:b1:0e:09:f9:c1:
65:a2:63:b8:c0:9e:3b:e5:d1:f0:13:49:16:70:d9:
98:ee:2d:be:22:a7:68:63:b3:6f:2f:26:f4:09:7a:
86:0b:cf:78:26:c6:56:28:fd:89:1b:92:e6:83:e5:
60:05:f2:aa:7e:32:e3:d0:88:ba:38:fc:f5:ac:5d:
3a:83:a9:bc:49:b0:fa:08:1e:c8:8f:a2:2b:5d:08:
0e:d4:1d:d3:a4:f1:07:78:a4:3e:3e:f7:58:6c:16:
88:ad:4e:f7:e6:39:e6:b0:40:fe:c8:58:88:ae:54:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131659
sbgp-ipAddrBlock: critical
IPv4:
103.131.252.0/22
IPv6:
2403:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:d5:00:66:3a:48:49:2e:1e:d9:11:70:8a:e8:a4:b8:f4:cc:
54:46:e8:1d:fd:9c:6c:29:02:43:75:d1:21:3b:de:b2:34:81:
f6:20:f6:1a:60:0c:7b:6c:4f:f6:6a:d8:67:37:ef:5c:a6:c5:
c9:f5:05:3f:19:67:30:af:d1:24:50:83:1d:c7:97:92:08:92:
69:d7:5f:e2:6c:10:95:d0:d4:d4:6c:ed:fe:d1:de:d2:cb:cd:
a0:20:df:0d:98:ee:7b:ef:d7:79:e3:02:22:c5:c7:bc:52:38:
b6:91:8e:7f:7d:1b:20:01:a5:78:fc:e8:ac:bd:e0:9c:9a:99:
ff:15:99:4a:12:6e:f6:e6:a8:25:dd:04:8a:55:d2:68:cf:a5:
b4:4a:30:99:da:32:3a:e7:6a:b1:40:01:86:64:bb:72:11:a8:
55:b6:52:e8:31:83:11:20:b1:6f:64:55:e5:59:f5:37:91:30:
ef:c9:ba:df:fb:b7:28:6b:e2:7d:38:eb:34:a6:5c:05:28:f9:
ac:09:0c:6f:75:fb:39:0a:ea:26:c1:ad:c9:7c:45:e7:78:09:
72:65:3f:9f:e9:9c:c0:d7:05:d4:e5:8e:7e:7a:fc:12:28:de:
ea:e5:d6:3e:b4:03:66:f7:fa:49:63:9e:6b:48:ce:b7:d7:b2:
76:95:8d:72
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgICLpswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcyOVoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoREVBMDk0OEJCNzc5MUM0NzEwOTkzQThGMUZDQ0U5NjdBREEwOUMw
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbZPC931EJgbLkhM7pS
8IlqRU5EthEsvsoX8bXdxKBiP7dTkHcQILNhJc285bOgTE1U9TqO+DKD7V8vN4Eg
6c43/qAfWLXaKGPHZp5A6Nhh6BZ210PBTlsaysvsBPkpDBHSggH6tCLyJfcOo2Zv
xhmO/eNt1d099czsZeOaDa+IYI24zllnBcuFuMq1l99rmrEOCfnBZaJjuMCeO+XR
8BNJFnDZmO4tviKnaGOzby8m9Al6hgvPeCbGVij9iRuS5oPlYAXyqn4y49CIujj8
9axdOoOpvEmw+ggeyI+iK10IDtQd06TxB3ikPj73WGwWiK1O9+Y55rBA/shYiK5U
Jh8CAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBTeoJSLt3kcRxCZOo8fzOlnraCcADAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF
hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkVURUFTRS8w
WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ORVRFQVNFLzNxQ1VpN2Q1SEVjUW1UcVBIOHpwWjYyZ25BQS5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgJLMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA
ATAGAwQCZ4P8MA0EAgACMAcDBQAkA9XAMA0GCSqGSIb3DQEBCwUAA4IBAQAD1QBm
OkhJLh7ZEXCK6KS49MxURugd/ZxsKQJDddEhO96yNIH2IPYaYAx7bE/2athnN+9c
psXJ9QU/GWcwr9EkUIMdx5eSCJJp11/ibBCV0NTUbO3+0d7Sy82gIN8NmO5779d5
4wIixce8Uji2kY5/fRsgAaV4/OisveCcmpn/FZlKEm725qgl3QSKVdJoz6W0SjCZ
2jI652qxQAGGZLtyEahVtlLoMYMRILFvZFXlWfU3kTDvybrf+7coa+J9OOs0plwF
KPmsCQxvdfs5Cuomwa3JfEXneAlyZT+f6ZzA1wXU5Y5+evwSKN7q5dY+tANm9/pJ
Y55rSM6317J2lY1y
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org