Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
File:                     ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer (raw, json)
Hash identifier:          DIbaLyqkNqbdu/hfnNdzsqqgrTGi13Inc7/1RS2EPy8=
Subject key identifier:   00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2F37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:36 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 38852
                          IP: 103.169.212.0/23
                          IP: 2407:a740::/32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12087 (0x2f37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:36 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:7f:e8:6d:ed:77:aa:ac:0b:4a:99:33:60:
                    12:51:02:00:5e:d8:ab:02:68:1e:fe:11:4e:f3:b0:
                    f7:08:78:34:27:af:0c:7e:86:d0:19:9a:56:dd:90:
                    03:77:c5:0a:02:f8:ba:f4:a0:3a:0e:a1:0e:1a:32:
                    4e:2e:d7:1b:a7:90:65:ed:dd:72:45:70:e4:bc:a7:
                    48:48:ef:4f:4c:d3:0d:a4:1a:b4:50:4b:c9:2f:5c:
                    41:5b:3e:e6:a8:b5:fc:3a:be:04:f0:b0:31:d1:44:
                    de:30:5f:af:96:6d:ff:67:48:78:10:39:63:d3:86:
                    c6:59:92:ca:9f:ab:52:28:1c:b7:a4:3d:c4:35:03:
                    33:69:3d:f3:73:37:0e:5c:59:e3:be:82:77:5b:54:
                    a6:1f:29:58:7f:86:d9:a1:e1:ea:2d:3f:6b:f6:e6:
                    0b:24:e0:17:25:5c:c7:e6:66:f1:21:79:3d:b1:48:
                    ef:db:15:7f:d9:9a:31:f7:f8:67:a3:a6:d9:d9:85:
                    02:43:e0:d7:9e:6f:4c:21:88:c2:fa:ad:0e:08:82:
                    c2:ad:1e:8c:34:2b:b7:f1:40:7d:ff:12:e6:4a:a6:
                    63:bf:f4:8b:50:b2:44:79:e2:22:4f:f9:4c:fc:e9:
                    30:ba:41:6e:ae:53:c3:4e:6c:e7:cf:61:f5:13:c6:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38852

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/23
                IPv6:
                  2407:a740::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:b6:b6:d2:40:de:b1:86:79:e7:e9:15:75:22:5e:66:59:1c:
         e1:83:6d:ee:cb:d7:f7:27:cb:98:4b:2b:5c:17:84:38:5d:e6:
         8e:bd:c6:00:d3:8d:c0:28:4e:ee:84:03:2b:40:74:d4:6c:f4:
         7a:0e:2a:a8:af:4b:8f:a8:ef:95:ea:78:bf:1b:a9:15:e9:65:
         70:e0:ac:0e:1a:bf:0c:7d:91:0a:dd:10:7d:9b:21:49:3e:4c:
         60:96:ff:a1:bd:ab:5e:8d:ae:2e:7d:88:9f:1e:08:b0:5d:21:
         62:70:45:f3:26:42:01:f5:39:e0:67:fa:e3:e7:f2:74:93:d2:
         34:e5:fc:50:f1:1c:f3:e4:2e:88:90:36:bc:27:94:33:c0:85:
         42:c7:bf:55:ee:c3:95:e5:c2:63:04:f2:52:ae:0e:27:ac:fb:
         71:b9:98:19:f3:8d:4f:77:17:ae:28:d0:88:dc:e4:8d:8c:aa:
         05:1a:78:72:bd:91:f8:80:bb:30:64:7c:2a:49:ff:f4:c0:52:
         f1:a0:b7:11:a8:f6:71:f9:50:53:72:29:e9:75:eb:12:3c:26:
         dd:2b:2a:33:5c:b1:61:b7:d3:11:23:58:85:dc:72:60:a3:3a:
         e7:e9:92:b5:3f:ce:c5:68:94:04:49:cf:c4:fc:35:64:33:76:
         7d:c9:1f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org