Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer
File: 8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer (raw, json)
Hash identifier: VZro4K214hgZ1VmSc2q0nUk96RaSFm6NriNr4dVVgU4=
Subject key identifier: F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2AB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 08 Dec 2023 08:50:09 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: IP: 2403:acc0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10929 (0x2ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Dec 8 08:50:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F221632D310D085A9390799E5A49FFF18EBDFDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:bd:25:f7:62:09:1e:1b:e4:39:6c:63:25:
74:89:cd:32:70:3b:da:d0:a9:14:9c:df:90:aa:cc:
61:21:af:4a:bb:c0:85:e1:ab:10:dc:8b:df:d4:31:
2e:8d:57:00:cd:5c:d4:d6:2a:35:8e:91:ec:21:55:
83:ec:be:89:75:d5:2c:8e:b4:ae:cb:9d:c2:b0:bb:
b8:27:53:0e:98:dd:43:42:9c:7a:7a:cc:fe:25:af:
68:2f:9f:47:f8:3b:e0:b3:84:fd:76:f8:91:c6:e0:
fe:53:ae:eb:68:f7:fa:08:fa:37:aa:e1:9d:ae:ec:
60:bd:83:83:91:2b:32:5d:5f:35:cc:61:38:92:e7:
cc:ce:08:3b:49:f8:96:5a:d9:7b:a5:47:26:8d:4b:
d5:3b:11:77:1d:8f:7f:d8:80:8d:ac:46:40:55:da:
0b:1e:c1:ac:0a:93:7e:a4:64:fe:af:46:ec:ae:f8:
88:6e:8c:ae:13:b2:de:f0:ec:8b:a7:5b:60:c5:5c:
84:ad:6f:fe:08:5e:8a:3f:1a:fb:44:53:e3:06:54:
6a:b5:07:3b:65:b9:03:89:1a:f7:8b:ab:0c:2b:34:
f3:5d:94:f7:ae:f4:fa:7d:f3:7c:92:d8:54:eb:af:
13:8f:8b:83:71:71:d3:6e:9b:47:c4:c5:3d:8f:0b:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:b0:60:27:97:43:69:7a:d7:eb:a3:60:08:a3:fd:b5:bc:f9:
51:22:73:01:52:ea:cc:52:f7:88:0e:ea:6c:91:b5:ce:21:8f:
6b:ac:85:ec:d8:55:6c:4e:03:4e:e6:12:21:75:0e:1a:38:84:
e4:b9:37:98:7c:2c:06:b2:18:e6:23:0c:cc:c3:b1:c9:a3:c6:
4f:8a:d0:d8:9c:d6:8d:28:2d:e2:dd:88:b5:d7:93:04:bf:a6:
52:48:2e:88:2c:01:be:06:54:ea:bb:04:df:6a:39:5c:05:31:
a5:ca:3f:7d:22:32:c5:fd:c3:2a:fb:33:9f:ec:55:8e:c4:bf:
ed:e4:d4:b6:ce:7f:ac:2f:ea:07:13:2a:bb:b5:52:d9:84:45:
3d:24:c8:80:de:42:3b:9b:f8:43:c3:44:4f:71:61:66:87:c4:
0e:e4:4c:2d:71:5d:c8:4e:34:ac:0d:b9:b4:53:58:49:03:0f:
dd:76:bb:b5:4f:91:fd:ae:ed:fe:7f:49:7e:d1:ad:18:56:eb:
87:f6:ed:14:3b:58:4a:de:38:68:f2:b6:d7:9d:42:09:d6:35:
c1:8d:86:f0:62:fc:de:5e:28:c1:83:ed:e2:8a:3e:78:ae:93:
e5:64:52:c2:c8:3b:61:41:d2:d7:70:b0:dd:a8:bc:f8:da:dd:
8b:c4:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org