Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
File: 4CWCsCflcDjqAKPoSE1V3uouGio.cer (raw, json)
Hash identifier: TBCb0eE3Sf9kUj1xFarsGvWx5xlNOaM1U31QfR2uNs0=
Subject key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3617
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:20 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 18049
IP: 27.100.64.0/18
IP: 49.213.128.0/17
IP: 58.99.0.0/17
IP: 61.58.128.0/19
IP: 61.60.224.0/20
IP: 61.67.16.0 -- 61.67.47.255
IP: 103.180.22.0/23
IP: 116.118.128.0/18
IP: 211.73.160.0/19
IP: 2403:5200::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Apr 2025 22:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13847 (0x3617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:4e:e9:62:a3:df:ce:68:1a:41:39:fc:d2:
dc:ce:19:e9:52:dd:86:ca:85:f9:9b:84:f7:54:59:
2e:fe:8f:e9:b7:8b:f4:ed:d6:cb:56:68:cd:36:d4:
55:f3:0c:f7:88:07:3d:c7:d9:f5:4b:41:be:2c:54:
cc:98:45:5e:b5:a4:b7:5c:2b:2f:45:9a:2d:c4:67:
51:c1:a1:f3:33:46:d4:a4:db:7c:2e:61:33:e0:30:
10:c0:9d:e1:ce:d7:72:6c:22:cf:b8:f7:35:1f:22:
46:25:bc:ec:11:f5:33:a2:c3:78:ca:50:e9:26:b9:
79:21:89:0a:32:42:a7:a5:0d:95:7a:ab:85:3b:80:
3e:62:44:97:4f:6b:11:a5:09:eb:b5:62:0d:54:b1:
6e:a3:b9:c9:90:14:02:6c:05:7f:e6:4e:72:2d:db:
01:dd:1c:96:b1:dc:b2:6c:ee:ec:a5:34:28:03:f2:
51:e4:2d:0f:88:36:b9:8d:a6:86:ba:df:f1:45:29:
8e:f1:df:c5:87:5a:97:70:32:9d:07:df:ac:47:73:
e5:79:f8:0e:aa:cb:05:d0:a6:74:d9:12:e4:f5:15:
d5:a2:43:61:77:cd:e7:02:d9:15:16:ee:da:4c:a6:
46:ad:3c:fb:9a:84:da:7b:61:d8:97:bc:ce:e0:1a:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18049
sbgp-ipAddrBlock: critical
IPv4:
27.100.64.0/18
49.213.128.0/17
58.99.0.0/17
61.58.128.0/19
61.60.224.0/20
61.67.16.0-61.67.47.255
103.180.22.0/23
116.118.128.0/18
211.73.160.0/19
IPv6:
2403:5200::/32
Signature Algorithm: sha256WithRSAEncryption
63:08:8b:a4:8b:7d:95:a9:41:bc:fa:06:e0:ca:60:10:a0:b0:
e8:d3:fb:17:5f:e8:fb:7a:b0:55:57:85:96:cb:54:67:a2:2b:
7f:d8:60:c3:8f:57:f4:8f:23:11:ca:05:23:4f:45:5a:d5:7b:
d4:8e:1e:8f:4c:f6:41:70:68:ce:45:3a:db:ca:c3:e8:94:55:
23:0e:32:2f:1d:78:d2:df:52:5b:d4:c0:d7:fc:b9:65:2f:75:
d8:a7:a8:02:dd:5d:55:42:a7:46:db:4b:d9:f3:17:05:ff:fd:
46:7b:c4:41:6c:f6:26:d6:ed:54:48:3d:e5:bc:c6:25:0d:5f:
83:b1:af:ed:28:6b:b4:f5:10:f3:e9:b6:2e:c7:93:ab:fe:de:
06:d8:0b:64:58:02:e0:5e:44:40:16:4d:9d:62:0f:be:9c:fd:
7a:68:1d:10:a0:52:87:9d:e6:a2:d3:ab:d8:83:21:86:7d:30:
0b:e8:77:c6:83:c1:fa:b1:a8:9c:ca:35:eb:a6:92:c5:29:91:
61:27:42:05:38:20:b2:83:e4:60:05:f5:cf:85:33:05:13:35:
84:19:de:cf:a6:4b:fc:a5:46:33:58:ff:91:8c:b8:57:ef:f8:
2e:64:6c:66:7b:9b:2e:15:78:23:24:ab:a6:ac:74:a9:24:ec:
72:0b:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:26 2025 by rpki-client