Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
File: GKZmPW6fgL1M58it_rOHg8PhpGQ.cer (raw, json)
Hash identifier: XqR8YV3vskG/mRs1TbnPN79d+WR2yqhFpLrcbZTEEJk=
Subject key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2774
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:06 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 4636
AS: 4747
AS: 7541
AS: 9921
AS: 9924
IP: 43.240.24.0/22
IP: 49.214.0.0 -- 49.219.255.255
IP: 60.198.0.0/15
IP: 61.30.0.0/15
IP: 61.57.0.0/19
IP: 103.224.132.0/22
IP: 124.8.0.0 -- 124.12.255.255
IP: 124.108.128.0/18
IP: 175.96.0.0/14
IP: 202.132.0.0/16
IP: 202.145.32.0 -- 202.145.255.255
IP: 203.65.160.0/19
IP: 203.77.0.0/17
IP: 203.105.224.0/19
IP: 203.211.0.0/19
IP: 210.17.0.0/17
IP: 210.62.0.0/18
IP: 210.62.192.0/19
IP: 210.63.128.0/18
IP: 210.67.144.0 -- 210.67.223.255
IP: 210.192.0.0/18
IP: 210.192.128.0/17
IP: 210.208.96.0/19
IP: 210.208.192.0/18
IP: 210.243.64.0/18
IP: 211.78.208.0/20
IP: 211.79.0.0/19
IP: 219.80.0.0/15
IP: 219.86.0.0/15
IP: 2001:c50::/32
IP: 2001:4540::/27
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 19:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10100 (0x2774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:28:92:2b:b3:9d:95:7a:e9:53:0c:d3:fb:
d0:68:49:44:1d:ff:05:69:ed:c8:90:74:c1:72:80:
24:0b:5e:5d:4b:3c:10:d0:dc:fd:34:9a:ea:37:e8:
f9:b5:b7:b2:c5:a9:11:f9:ea:8c:6c:8f:86:74:48:
bf:29:cc:7b:6f:0b:b3:4e:2c:5d:14:d8:26:6c:44:
6c:11:c4:1f:b6:6a:e2:a7:1f:d5:f1:5a:dc:92:26:
32:fe:5e:bf:6e:bc:9d:64:ae:21:ed:ef:39:ee:2b:
76:d1:20:33:70:f0:3b:6c:4f:12:11:61:bc:ee:22:
66:55:b6:5a:0e:74:e6:a8:3d:a6:8d:df:a0:ba:06:
33:78:17:cf:d2:61:08:ae:91:33:e8:ad:b6:dd:97:
53:ef:b8:91:e4:1a:21:8b:aa:42:8d:44:2d:09:90:
a7:8f:72:c9:c5:5e:3f:14:2a:3b:15:13:8c:2a:e1:
e1:fe:e6:8c:24:7f:ec:39:a3:fc:99:7f:7f:a4:6d:
b1:c5:69:5a:8b:a6:31:24:02:53:f7:44:b5:7b:21:
fc:bf:ad:bb:79:24:51:1c:46:8f:30:ef:ff:02:42:
11:bd:df:26:e5:9a:55:3b:07:f3:10:ca:3d:37:26:
a3:69:b6:d7:cd:7f:fe:ea:c9:7a:2c:a1:0a:bc:18:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4636
4747
7541
9921
9924
sbgp-ipAddrBlock: critical
IPv4:
43.240.24.0/22
49.214.0.0-49.219.255.255
60.198.0.0/15
61.30.0.0/15
61.57.0.0/19
103.224.132.0/22
124.8.0.0-124.12.255.255
124.108.128.0/18
175.96.0.0/14
202.132.0.0/16
202.145.32.0-202.145.255.255
203.65.160.0/19
203.77.0.0/17
203.105.224.0/19
203.211.0.0/19
210.17.0.0/17
210.62.0.0/18
210.62.192.0/19
210.63.128.0/18
210.67.144.0-210.67.223.255
210.192.0.0/18
210.192.128.0/17
210.208.96.0/19
210.208.192.0/18
210.243.64.0/18
211.78.208.0/20
211.79.0.0/19
219.80.0.0/15
219.86.0.0/15
IPv6:
2001:c50::/32
2001:4540::/27
Signature Algorithm: sha256WithRSAEncryption
41:02:a4:c5:e5:80:35:dd:1f:0c:0a:d3:e8:b6:29:54:c3:11:
cc:d0:ac:c0:62:e9:9a:33:3e:b5:bf:55:46:42:07:d8:fd:bd:
ea:6c:03:6d:33:45:0a:37:b5:0a:16:98:49:5c:f5:ce:bb:08:
a7:a8:1f:cd:53:f7:34:ed:81:e1:09:f1:43:5e:21:87:f4:db:
bd:5f:c7:13:d9:aa:49:d4:37:21:66:51:28:ef:5d:8c:a0:2c:
1b:70:5b:7b:8c:70:38:72:b3:54:bf:dc:2c:cc:39:21:89:0e:
0c:b4:0a:ea:99:34:62:8e:8e:3d:cf:4b:de:c4:f7:58:f4:de:
2a:ab:ac:64:c9:87:91:96:c3:4d:e5:29:53:f4:73:13:e8:54:
d2:50:91:94:f1:b0:c7:bf:85:02:95:ac:98:12:a7:0c:23:35:
f5:8f:b8:b1:b7:e3:5b:48:b0:56:31:b0:86:6e:08:48:88:e6:
26:6d:c7:87:ae:19:04:7a:07:0c:12:4d:6b:58:89:3a:2a:8f:
2b:f6:92:49:19:8f:a1:f3:d3:ba:cf:5e:10:8d:2c:b9:53:1b:
a0:9c:ab:a4:6c:89:0e:12:53:47:49:75:22:52:3a:0b:ef:57:
0e:b5:34:d3:33:7c:ea:cc:f9:c6:59:fe:58:24:d9:dd:24:37:
8f:c7:a0:76
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgICJ3QwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEwNloXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoMThBNjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJpPKJIrs52VeulTDNP7
0GhJRB3/BWntyJB0wXKAJAteXUs8ENDc/TSa6jfo+bW3ssWpEfnqjGyPhnRIvynM
e28Ls04sXRTYJmxEbBHEH7Zq4qcf1fFa3JImMv5ev268nWSuIe3vOe4rdtEgM3Dw
O2xPEhFhvO4iZlW2Wg505qg9po3foLoGM3gXz9JhCK6RM+ittt2XU++4keQaIYuq
Qo1ELQmQp49yycVePxQqOxUTjCrh4f7mjCR/7Dmj/Jl/f6RtscVpWoumMSQCU/dE
tXsh/L+tu3kkURxGjzDv/wJCEb3fJuWaVTsH8xDKPTcmo2m2181//urJeiyhCrwY
xk0CAwEAAaOCA1UwggNRMB0GA1UdDgQWBBQYpmY9bp+AvUznyK3+s4eDw+GkZDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF
hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9ORC8w
WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9QUk9GT05EL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwKQYI
KwYBBQUHAQgBAf8EGjAYoBYwFAICEhwCAhKLAgIddQICJsECAibEMIH2BggrBgEF
BQcBBwEB/wSB5jCB4zCBygQCAAEwgcMDBAIr8BgwCgMDATHWAwMCMdgDAwE8xgMD
AT0eAwQFPTkAAwQCZ+CEMAoDAwN8CAMDAHwMAwQGfGyAAwMCr2ADAwDKhDALAwQF
ypEgAwMBypADBAXLQaADBAfLTQADBAXLaeADBAXL0wADBAfSEQADBAbSPgADBAXS
PsADBAbSP4AwDAMEBNJDkAMEBdJDwAMEBtLAAAMEB9LAgAMEBdLQYAMEBtLQwAME
BtLzQAMEBNNO0AMEBdNPAAMDAdtQAwMB21YwFAQCAAIwDgMFACABDFADBQUgAUVA
MA0GCSqGSIb3DQEBCwUAA4IBAQBBAqTF5YA13R8MCtPotilUwxHM0KzAYumaMz61
v1VGQgfY/b3qbANtM0UKN7UKFphJXPXOuwinqB/NU/c07YHhCfFDXiGH9Nu9X8cT
2apJ1DchZlEo712MoCwbcFt7jHA4crNUv9wszDkhiQ4MtArqmTRijo49z0vexPdY
9N4qq6xkyYeRlsNN5SlT9HMT6FTSUJGU8bDHv4UClayYEqcMIzX1j7ixt+NbSLBW
MbCGbghIiOYmbceHrhkEegcMEk1rWIk6Ko8r9pJJGY+h89O6z14QjSy5UxugnKuk
bIkOElNHSXUiUjoL71cOtTTTM3zqzPnGWf5YJNndJDePx6B2
-----END CERTIFICATE-----
Generated at Tue May 21 21:12:20 2024 by rpki-client on console-fra.rpki-client.org