Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/4PkrwcUj2DOzyCt7IGonr4HGCa8.cer
File: 4PkrwcUj2DOzyCt7IGonr4HGCa8.cer (raw, json)
Hash identifier: LswoBfjLABHV4nKEkn3PTpiL3/hnUvFCwQanHg9G/Gk=
Subject key identifier: E0:F9:2B:C1:C5:23:D8:33:B3:C8:2B:7B:20:6A:27:AF:81:C6:09:AF
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 19C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUFENG/4PkrwcUj2DOzyCt7IGonr4HGCa8.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUFENG/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 29 Sep 2020 09:53:34 +0000
Certificate not after: Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources: AS: 131625
IP: 103.118.148.0/22
IP: 2403:3ac0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6600 (0x19c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 29 09:53:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E0F92BC1C523D833B3C82B7B206A27AF81C609AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:0f:52:03:23:b4:f2:c3:a5:79:bd:6d:30:
d2:5e:5d:c9:f8:d0:af:a3:e9:40:d9:90:07:2e:cb:
a8:13:f4:3f:c2:43:8a:3b:09:c8:e4:00:5f:06:9a:
a2:bc:e3:04:9c:67:b6:70:72:c7:94:3b:e0:c7:cd:
5b:03:a8:e9:49:53:0b:33:16:72:5e:0d:d6:82:2d:
90:9d:e0:91:b4:0a:ec:35:fa:f7:fb:b0:a8:d3:99:
c4:a8:cf:2e:31:2a:be:ab:7c:fb:da:8f:0e:a3:18:
ff:e4:bc:21:dc:fd:0b:16:4a:72:b7:09:8e:11:61:
9b:2f:4a:16:b8:ab:28:8d:9b:e0:c7:fa:9e:d5:ef:
92:b5:02:9b:d4:c3:6a:d0:04:1d:0b:f1:8a:68:e4:
33:a6:0e:8e:f0:fc:a7:77:5d:bf:2e:c2:98:7c:dd:
9b:c1:7e:2e:28:b9:c3:94:29:0a:2f:72:28:4a:da:
bc:4a:b3:f9:96:62:04:e3:e6:07:0d:0a:09:76:ce:
98:df:00:92:9c:47:71:4e:7d:d5:8d:10:3a:82:8b:
68:c4:88:a4:bd:02:13:b2:8d:36:ca:f2:4a:c0:38:
74:eb:4b:5f:89:94:95:1d:aa:f4:90:50:08:45:2d:
7b:73:8b:e2:7d:89:3e:4e:08:2b:29:1f:f6:ae:98:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:2B:C1:C5:23:D8:33:B3:C8:2B:7B:20:6A:27:AF:81:C6:09:AF
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUFENG/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUFENG/4PkrwcUj2DOzyCt7IGonr4HGCa8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131625
sbgp-ipAddrBlock: critical
IPv4:
103.118.148.0/22
IPv6:
2403:3ac0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b8:53:73:5a:11:ad:65:74:8e:13:5c:f9:6b:f5:61:97:16:
0d:d5:a7:d1:a3:80:89:4c:bd:b4:75:96:ba:10:07:bd:a8:fc:
eb:90:60:e6:04:b1:25:52:d6:dc:67:65:a1:63:3e:0d:53:d8:
41:21:f9:14:fa:e5:5a:f6:a4:9f:f0:1f:b3:11:dc:ac:71:ba:
62:fa:ee:4c:b0:7b:3b:99:bc:bc:af:23:a8:c2:3a:94:ed:eb:
f9:c7:8e:a1:f5:0f:2d:86:b7:bd:e7:9b:76:d3:af:68:ef:26:
7d:ee:3e:b6:1e:8e:62:16:cd:30:a3:7b:c3:40:ec:6c:1a:73:
d5:e6:28:f3:97:50:7f:c7:5a:65:21:cb:ca:07:d8:ad:65:d5:
45:50:06:ed:0c:b3:09:ee:dd:38:18:90:95:09:61:da:1f:85:
38:8a:cc:0b:ea:2c:0e:f2:cd:8c:07:13:76:5b:17:1c:88:7c:
28:85:77:97:69:18:f5:a4:68:eb:29:c1:8b:f5:6f:13:d6:d2:
e3:b9:db:e7:d1:83:ce:8b:1a:49:69:88:05:6f:ea:fe:83:70:
3b:5b:9d:e8:08:89:ca:14:4f:f8:34:44:f8:90:ad:fe:1d:ca:
96:fa:35:92:ec:c9:1c:4c:09:a1:72:e6:eb:c2:de:64:9d:0a:
aa:49:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org