Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Eurf6Ui9LT-a_URWja0CEKGTGgg.cer
File: Eurf6Ui9LT-a_URWja0CEKGTGgg.cer (raw, json)
Hash identifier: 0cGjCuJuXadiiUsux8kd9hUViGJyt3DHL7eFdMbXoXs=
Subject key identifier: 12:EA:DF:E9:48:BD:2D:3F:9A:FD:44:56:8D:AD:02:10:A1:93:1A:08
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2800
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOX/Eurf6Ui9LT-a_URWja0CEKGTGgg.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOX/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:14 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: IP: 103.247.112.0/22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10240 (0x2800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=12EADFE948BD2D3F9AFD44568DAD0210A1931A08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:75:6a:91:d9:4a:23:a0:95:5f:af:cc:36:
1f:e4:30:09:76:8f:22:04:7c:cb:4b:0f:b2:a8:5c:
97:3b:b6:b3:bf:03:ef:7a:b1:e3:66:42:94:28:cd:
99:35:45:b7:c6:fe:19:47:07:7c:5c:dc:9c:e4:07:
14:b7:60:c9:38:fa:9e:5c:11:46:8c:07:09:94:23:
e1:02:72:d3:10:76:fd:f0:d8:80:24:b1:9a:c5:fc:
83:5f:d3:20:9a:7c:e5:82:ad:84:88:7e:31:96:2d:
1f:1e:26:34:44:a2:72:00:e6:da:f2:9f:0b:13:ab:
8d:12:75:71:6d:db:1f:ad:36:d1:20:68:b6:98:7d:
ae:3c:ef:20:7e:da:50:66:e0:d3:84:10:2a:19:e5:
81:de:bc:08:66:49:e2:d9:c7:12:44:0b:4e:0e:fb:
f7:24:35:1b:8d:5f:5f:1a:ee:da:f4:84:e7:16:a9:
10:61:b1:f3:0a:b7:85:ac:32:7d:0e:8c:ef:d2:cc:
1a:ff:61:71:6a:08:2a:2c:8d:05:0f:93:0f:bc:c4:
0e:86:b5:fc:ed:79:8a:39:7e:c8:64:b1:90:4d:cb:
c2:c6:9b:6c:e5:24:62:2d:9e:c7:9d:11:0c:8e:06:
28:04:fe:38:1a:d3:74:4b:5f:b9:2d:18:e5:47:1c:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:DF:E9:48:BD:2D:3F:9A:FD:44:56:8D:AD:02:10:A1:93:1A:08
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOX/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKBOX/Eurf6Ui9LT-a_URWja0CEKGTGgg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.112.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b2:fe:9b:35:9d:af:3d:00:e6:b3:1f:a0:e7:60:6c:db:54:
6d:38:69:00:72:70:ad:7d:b9:d8:d1:43:f3:02:a1:ba:2f:63:
09:de:a5:01:29:d5:26:40:52:5c:ff:0f:9e:bf:7f:d3:8b:2d:
ae:db:61:10:fd:02:a8:46:de:45:2f:47:13:db:cc:9a:0c:af:
56:ae:43:84:24:5f:99:aa:08:a0:f2:c0:2d:f9:e6:ad:9c:43:
be:97:82:2e:ad:b8:4a:d4:65:03:e4:bf:44:05:bd:4c:e0:a8:
1c:3b:5e:81:3f:75:e6:a0:e0:c4:ca:55:bb:5f:52:a5:1d:75:
81:79:6d:fa:eb:b9:7d:6d:f5:ab:ff:32:9a:ff:98:94:87:c1:
61:8f:0c:67:2c:3a:e7:12:86:3c:7b:dc:d0:d0:56:1e:aa:0f:
c1:2d:c9:43:22:f4:54:33:8e:0d:84:17:eb:9f:59:31:88:dd:
99:51:4f:cc:c8:cf:35:36:65:52:fe:8a:3f:12:04:ce:8f:d1:
00:29:29:b8:94:51:6e:22:b7:4f:d7:59:48:20:16:fc:cf:02:
16:aa:20:67:99:19:de:23:b5:97:f4:fe:4c:a9:11:dc:89:3a:
6e:90:26:20:f9:65:26:13:d3:af:22:f2:c0:a4:8c:d5:b9:ca:
ef:38:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 05:11:07 2024 by rpki-client on console-fra.rpki-client.org