Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
File: GKZmPW6fgL1M58it_rOHg8PhpGQ.cer (raw, json)
Hash identifier: YO9XhZMqdlx2qNoIsy40j1DH5kxxbit9mp9z2b4DHnc=
Subject key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2DB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:19 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 4636
AS: 4747
AS: 7541
AS: 9921
AS: 9924
IP: 43.240.24.0/22
IP: 49.214.0.0 -- 49.219.255.255
IP: 60.198.0.0/15
IP: 61.30.0.0/15
IP: 61.57.0.0/19
IP: 103.224.132.0/22
IP: 124.8.0.0 -- 124.12.255.255
IP: 124.108.128.0/18
IP: 175.96.0.0/14
IP: 202.132.0.0/16
IP: 202.145.32.0 -- 202.145.255.255
IP: 203.65.160.0/19
IP: 203.77.0.0/17
IP: 203.105.224.0/19
IP: 203.211.0.0/19
IP: 210.17.0.0/17
IP: 210.62.0.0/18
IP: 210.62.192.0/19
IP: 210.63.128.0/18
IP: 210.67.144.0 -- 210.67.223.255
IP: 210.192.0.0/18
IP: 210.192.128.0/17
IP: 210.208.96.0/19
IP: 210.208.192.0/18
IP: 210.243.64.0/18
IP: 211.78.208.0/20
IP: 211.79.0.0/19
IP: 219.80.0.0/15
IP: 219.86.0.0/15
IP: 2001:c50::/32
IP: 2001:4540::/27
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11697 (0x2db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:28:92:2b:b3:9d:95:7a:e9:53:0c:d3:fb:
d0:68:49:44:1d:ff:05:69:ed:c8:90:74:c1:72:80:
24:0b:5e:5d:4b:3c:10:d0:dc:fd:34:9a:ea:37:e8:
f9:b5:b7:b2:c5:a9:11:f9:ea:8c:6c:8f:86:74:48:
bf:29:cc:7b:6f:0b:b3:4e:2c:5d:14:d8:26:6c:44:
6c:11:c4:1f:b6:6a:e2:a7:1f:d5:f1:5a:dc:92:26:
32:fe:5e:bf:6e:bc:9d:64:ae:21:ed:ef:39:ee:2b:
76:d1:20:33:70:f0:3b:6c:4f:12:11:61:bc:ee:22:
66:55:b6:5a:0e:74:e6:a8:3d:a6:8d:df:a0:ba:06:
33:78:17:cf:d2:61:08:ae:91:33:e8:ad:b6:dd:97:
53:ef:b8:91:e4:1a:21:8b:aa:42:8d:44:2d:09:90:
a7:8f:72:c9:c5:5e:3f:14:2a:3b:15:13:8c:2a:e1:
e1:fe:e6:8c:24:7f:ec:39:a3:fc:99:7f:7f:a4:6d:
b1:c5:69:5a:8b:a6:31:24:02:53:f7:44:b5:7b:21:
fc:bf:ad:bb:79:24:51:1c:46:8f:30:ef:ff:02:42:
11:bd:df:26:e5:9a:55:3b:07:f3:10:ca:3d:37:26:
a3:69:b6:d7:cd:7f:fe:ea:c9:7a:2c:a1:0a:bc:18:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4636
4747
7541
9921
9924
sbgp-ipAddrBlock: critical
IPv4:
43.240.24.0/22
49.214.0.0-49.219.255.255
60.198.0.0/15
61.30.0.0/15
61.57.0.0/19
103.224.132.0/22
124.8.0.0-124.12.255.255
124.108.128.0/18
175.96.0.0/14
202.132.0.0/16
202.145.32.0-202.145.255.255
203.65.160.0/19
203.77.0.0/17
203.105.224.0/19
203.211.0.0/19
210.17.0.0/17
210.62.0.0/18
210.62.192.0/19
210.63.128.0/18
210.67.144.0-210.67.223.255
210.192.0.0/18
210.192.128.0/17
210.208.96.0/19
210.208.192.0/18
210.243.64.0/18
211.78.208.0/20
211.79.0.0/19
219.80.0.0/15
219.86.0.0/15
IPv6:
2001:c50::/32
2001:4540::/27
Signature Algorithm: sha256WithRSAEncryption
46:60:21:6e:ee:69:52:24:e1:ed:1c:32:99:92:39:4e:5f:ff:
ae:5b:73:7a:23:b7:60:d5:32:52:51:2a:ed:46:b9:ab:a7:5f:
60:69:42:0f:29:32:e6:2c:cc:28:ad:83:15:a4:47:e9:e6:d0:
a6:6a:46:48:82:a7:09:9f:50:6d:c1:55:8f:bb:05:81:15:23:
19:09:83:fc:b9:76:50:c4:dd:53:61:42:33:3c:ea:ba:96:a4:
74:45:cb:7a:0c:b7:f6:da:b8:fc:2f:11:ac:8f:8e:7d:6a:24:
33:02:21:80:ae:f6:e0:14:05:10:df:df:31:14:12:72:0d:d8:
91:16:c5:a3:d4:24:ab:b8:5b:b4:c4:75:1d:63:a1:60:2b:7a:
40:41:0e:80:88:19:fe:0a:57:bd:7e:2d:ae:f5:af:ad:ea:d7:
65:f3:85:0f:6e:8d:02:f4:00:13:da:fd:ae:ab:7d:6c:40:07:
de:3c:15:af:8c:c5:f1:c1:4f:f0:6b:dd:08:7f:db:ee:59:82:
fe:73:82:e9:28:a6:07:df:b9:21:e6:11:3c:95:2a:48:f5:e4:
82:e3:ee:ed:07:1b:90:5b:16:0e:d6:43:e4:f2:d6:84:9b:f7:
c3:c1:7e:4f:be:1d:15:97:df:98:c1:cd:d9:ee:b5:40:04:6c:
21:01:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:26 2024 by rpki-client on console-fra.rpki-client.org