Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
File: 4CWCsCflcDjqAKPoSE1V3uouGio.cer (raw, json)
Hash identifier: 3Sfeu1krLa0iqAdK+b4oqK0TXV8IOCWeemW9Ln6qe6M=
Subject key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2E81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:28 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 18049
IP: 27.100.64.0/18
IP: 49.213.128.0/17
IP: 58.99.0.0/17
IP: 61.58.128.0/19
IP: 61.60.224.0/20
IP: 61.67.16.0 -- 61.67.47.255
IP: 103.180.22.0/23
IP: 116.118.128.0/18
IP: 211.73.160.0/19
IP: 2403:5200::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11905 (0x2e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:4e:e9:62:a3:df:ce:68:1a:41:39:fc:d2:
dc:ce:19:e9:52:dd:86:ca:85:f9:9b:84:f7:54:59:
2e:fe:8f:e9:b7:8b:f4:ed:d6:cb:56:68:cd:36:d4:
55:f3:0c:f7:88:07:3d:c7:d9:f5:4b:41:be:2c:54:
cc:98:45:5e:b5:a4:b7:5c:2b:2f:45:9a:2d:c4:67:
51:c1:a1:f3:33:46:d4:a4:db:7c:2e:61:33:e0:30:
10:c0:9d:e1:ce:d7:72:6c:22:cf:b8:f7:35:1f:22:
46:25:bc:ec:11:f5:33:a2:c3:78:ca:50:e9:26:b9:
79:21:89:0a:32:42:a7:a5:0d:95:7a:ab:85:3b:80:
3e:62:44:97:4f:6b:11:a5:09:eb:b5:62:0d:54:b1:
6e:a3:b9:c9:90:14:02:6c:05:7f:e6:4e:72:2d:db:
01:dd:1c:96:b1:dc:b2:6c:ee:ec:a5:34:28:03:f2:
51:e4:2d:0f:88:36:b9:8d:a6:86:ba:df:f1:45:29:
8e:f1:df:c5:87:5a:97:70:32:9d:07:df:ac:47:73:
e5:79:f8:0e:aa:cb:05:d0:a6:74:d9:12:e4:f5:15:
d5:a2:43:61:77:cd:e7:02:d9:15:16:ee:da:4c:a6:
46:ad:3c:fb:9a:84:da:7b:61:d8:97:bc:ce:e0:1a:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18049
sbgp-ipAddrBlock: critical
IPv4:
27.100.64.0/18
49.213.128.0/17
58.99.0.0/17
61.58.128.0/19
61.60.224.0/20
61.67.16.0-61.67.47.255
103.180.22.0/23
116.118.128.0/18
211.73.160.0/19
IPv6:
2403:5200::/32
Signature Algorithm: sha256WithRSAEncryption
66:50:08:d7:f4:ce:ea:c9:ec:4f:0c:bd:70:05:2d:eb:5b:8d:
da:2a:6b:d1:8d:54:5d:d6:80:b2:06:9b:5a:c1:75:5d:a8:7a:
eb:03:10:07:a5:d6:3b:49:eb:fb:4d:f6:ba:61:22:a8:78:66:
53:7e:b0:ff:66:71:8e:a4:d0:70:dc:ef:d1:1a:5b:20:85:7b:
06:38:ad:e5:45:27:a8:8d:84:71:02:4e:d3:aa:15:ef:dd:6c:
9b:7e:b3:c8:74:da:5d:0f:e8:b6:2e:9e:13:fc:4d:d7:a4:75:
b1:58:7e:96:25:6b:35:59:f5:6e:a2:75:12:05:c8:d3:25:5a:
f3:b8:47:f0:1d:03:ce:2d:f8:15:68:39:67:18:e6:f1:da:2a:
1f:34:ff:4b:18:66:d6:0f:a2:58:4b:3d:bd:f2:91:58:89:d2:
d8:b6:a5:af:57:e5:b7:1e:3e:82:f4:41:4a:84:2d:c4:a0:a9:
ae:a9:21:93:e9:23:4b:d6:0e:e6:37:0a:03:21:d2:46:59:8d:
b1:99:75:c8:13:22:36:30:39:48:2c:f1:ba:cf:5e:a3:2e:a0:
5c:5a:5c:51:e4:78:ca:da:7f:88:a8:b2:2b:ba:9f:8e:b5:e6:
a5:2a:19:1a:d4:82:0e:e8:32:78:44:6d:db:d0:42:ab:e7:25:
ef:2b:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org