Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer
File: 3qCUi7d5HEcQmTqPH8zpZ62gnAA.cer (raw, json)
Hash identifier: Wsc1IQ0seFPXOmUdub+YKBZ+8jFxBCTqsn2DVxL2mPg=
Subject key identifier: DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 288E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:21 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 131659
IP: 103.131.252.0/22
IP: 2403:d5c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 May 2024 07:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10382 (0x288e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DEA0948BB7791C4710993A8F1FCCE967ADA09C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:3c:2f:77:d4:42:60:6c:b9:21:33:ba:52:
f0:89:6a:45:4e:44:b6:11:2c:be:ca:17:f1:b5:dd:
c4:a0:62:3f:b7:53:90:77:10:20:b3:61:25:cd:bc:
e5:b3:a0:4c:4d:54:f5:3a:8e:f8:32:83:ed:5f:2f:
37:81:20:e9:ce:37:fe:a0:1f:58:b5:da:28:63:c7:
66:9e:40:e8:d8:61:e8:16:76:d7:43:c1:4e:5b:1a:
ca:cb:ec:04:f9:29:0c:11:d2:82:01:fa:b4:22:f2:
25:f7:0e:a3:66:6f:c6:19:8e:fd:e3:6d:d5:dd:3d:
f5:cc:ec:65:e3:9a:0d:af:88:60:8d:b8:ce:59:67:
05:cb:85:b8:ca:b5:97:df:6b:9a:b1:0e:09:f9:c1:
65:a2:63:b8:c0:9e:3b:e5:d1:f0:13:49:16:70:d9:
98:ee:2d:be:22:a7:68:63:b3:6f:2f:26:f4:09:7a:
86:0b:cf:78:26:c6:56:28:fd:89:1b:92:e6:83:e5:
60:05:f2:aa:7e:32:e3:d0:88:ba:38:fc:f5:ac:5d:
3a:83:a9:bc:49:b0:fa:08:1e:c8:8f:a2:2b:5d:08:
0e:d4:1d:d3:a4:f1:07:78:a4:3e:3e:f7:58:6c:16:
88:ad:4e:f7:e6:39:e6:b0:40:fe:c8:58:88:ae:54:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:94:8B:B7:79:1C:47:10:99:3A:8F:1F:CC:E9:67:AD:A0:9C:00
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETEASE/3qCUi7d5HEcQmTqPH8zpZ62gnAA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131659
sbgp-ipAddrBlock: critical
IPv4:
103.131.252.0/22
IPv6:
2403:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:8b:9e:2a:38:10:3a:d8:cd:87:35:a3:2a:4b:33:41:b5:cc:
65:c2:4d:1e:c2:33:39:d5:2b:29:97:f8:06:5d:fd:4c:ec:30:
58:dc:0b:87:7b:23:f1:18:15:fa:93:ae:0b:3b:f4:a6:b9:08:
6e:16:3f:db:f3:15:a8:ac:4e:2c:93:a2:f1:1d:95:95:d2:54:
68:9e:1c:b8:12:76:73:61:4e:7b:fb:5b:fd:ec:a5:40:b7:62:
fc:4f:c1:8c:da:14:90:6c:9e:8f:25:56:8d:3f:84:04:16:85:
f4:23:68:51:59:e6:fb:79:9d:a5:a2:77:0f:32:a8:ba:2c:d1:
59:47:8c:bf:32:c1:c6:bd:2d:84:40:23:13:9f:50:16:ee:43:
4e:a9:d4:c4:f9:07:3a:9b:35:cb:fc:e3:cb:2f:cb:a6:b9:05:
06:e8:83:93:d5:4f:b0:0d:2f:6b:89:8a:a3:ba:90:0b:ca:68:
42:11:32:70:bb:01:62:3d:c1:5d:d4:1f:a8:90:1f:43:2a:11:
b9:13:90:de:72:23:37:a9:15:8c:24:1f:2a:43:8f:c1:1c:4d:
eb:33:e6:b3:ea:e9:a3:aa:fe:e7:e3:bb:d4:c4:e3:87:ec:cb:
19:cc:0d:38:67:e3:f7:f6:5a:54:34:24:7a:d4:69:9d:54:ff:
a5:1e:33:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:31 2024 by rpki-client on console-fra.rpki-client.org