Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
File: Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer (raw, json)
Hash identifier: TlbWidKRKBrsGIddYVFDyQcMMwe3/4SvrKayq0V2zYQ=
Subject key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2DDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:21 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131602
IP: 103.252.128.0/22
IP: 114.29.240.0/22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11739 (0x2ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:21 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:2e:50:85:8b:46:38:50:be:c8:14:29:98:
63:3f:08:af:23:45:52:1d:5c:6e:ee:c2:00:14:4b:
06:56:cd:b5:2e:24:7f:bf:eb:4d:62:1a:83:ef:fa:
94:d9:1d:b5:50:1e:4b:9a:a0:96:b0:e1:de:98:88:
a7:7c:31:10:4b:93:87:84:55:8e:55:c9:f0:94:3a:
8b:84:ab:b8:c5:4f:7d:52:87:57:e4:20:a5:c9:6f:
c1:bd:7b:01:d3:7e:24:9b:59:1b:1b:cb:ea:b2:d4:
b2:b2:68:e3:74:da:0d:22:2e:d5:4f:e2:b5:e6:20:
36:5f:75:bc:59:66:94:53:81:0b:b5:f1:ea:fa:0b:
89:8a:69:c8:5a:cc:37:ee:36:3a:bc:0e:fc:5e:fc:
00:ab:82:fb:ed:34:1c:05:19:aa:6e:45:a3:d1:b2:
61:65:1e:8a:dd:91:14:03:10:cf:84:48:f5:9f:89:
78:14:1d:6a:e0:47:84:b4:4a:73:10:c3:37:60:17:
97:df:ba:f8:af:45:44:23:31:af:83:0b:ae:91:d9:
ab:86:97:09:4f:ab:58:55:0c:08:63:9c:86:a9:8d:
99:83:89:1c:2a:c3:fc:9f:ea:c8:f0:97:36:1a:33:
43:51:84:7d:7b:4d:dc:9f:2c:df:5e:48:10:16:ed:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131602
sbgp-ipAddrBlock: critical
IPv4:
103.252.128.0/22
114.29.240.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:c3:97:92:52:f9:46:92:3a:0f:59:72:84:82:67:09:14:c2:
21:73:63:48:2c:f9:2e:b9:a0:fe:dc:15:35:20:a8:a3:90:0f:
41:76:cf:1f:1a:a8:31:de:9d:d5:13:f2:3f:1e:0c:1f:39:0c:
09:d0:16:59:5b:38:c3:64:fa:4d:c0:da:89:ce:5b:a1:c2:db:
0d:3e:b3:be:d2:5d:44:81:4a:59:b0:21:d9:d5:18:26:38:4f:
40:a0:32:05:78:64:f0:95:5a:45:fe:5a:a9:63:45:2d:c0:02:
42:24:e7:fb:c0:bb:f7:72:a0:bf:6a:e8:fc:a9:b6:be:af:d7:
84:f2:f9:1a:90:f3:8d:63:b1:8a:2c:24:cb:2b:17:9a:67:09:
a4:54:e7:ad:c5:64:b5:c8:79:9d:8f:1a:fb:6d:29:33:06:c8:
8d:2b:07:52:10:02:a4:d0:ae:2a:c2:7a:09:d4:cf:2f:ca:9c:
b9:51:70:f2:0f:24:a9:9f:c4:f6:10:67:f4:c7:10:aa:8d:f5:
de:34:9b:81:ba:df:8a:63:47:42:3e:f4:b6:8d:40:da:29:19:
2d:41:59:63:b5:10:50:1d:a1:ba:12:a1:b3:77:f2:3a:a8:21:
c7:b9:9b:af:50:96:e9:3f:33:0b:5b:5a:c9:df:c5:0e:14:0b:
fa:cf:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:29 2024 by rpki-client on console-ams.rpki-client.org