Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
File: GKZmPW6fgL1M58it_rOHg8PhpGQ.cer (raw, json)
Hash identifier: 9UPL/lt4rf+iJlp2O11W+rm6JFd5DIUzhwdFcTRa8SI=
Subject key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 35C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:17 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 4636
AS: 4747
AS: 7541
AS: 9921
AS: 9924
IP: 43.240.24.0/22
IP: 49.214.0.0 -- 49.219.255.255
IP: 60.198.0.0/15
IP: 61.30.0.0/15
IP: 61.57.0.0/19
IP: 103.224.132.0/22
IP: 124.8.0.0 -- 124.12.255.255
IP: 124.108.128.0/18
IP: 175.96.0.0/14
IP: 202.132.0.0/16
IP: 202.145.32.0 -- 202.145.255.255
IP: 203.65.160.0/19
IP: 203.77.0.0/17
IP: 203.105.224.0/19
IP: 203.211.0.0/19
IP: 210.17.0.0/17
IP: 210.62.0.0/18
IP: 210.62.192.0/19
IP: 210.63.128.0/18
IP: 210.67.144.0 -- 210.67.223.255
IP: 210.192.0.0/18
IP: 210.192.128.0/17
IP: 210.208.96.0/19
IP: 210.208.192.0/18
IP: 210.243.64.0/18
IP: 211.78.208.0/20
IP: 211.79.0.0/19
IP: 219.80.0.0/15
IP: 219.86.0.0/15
IP: 2001:c50::/32
IP: 2001:4540::/27
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Apr 2025 07:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13761 (0x35c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:28:92:2b:b3:9d:95:7a:e9:53:0c:d3:fb:
d0:68:49:44:1d:ff:05:69:ed:c8:90:74:c1:72:80:
24:0b:5e:5d:4b:3c:10:d0:dc:fd:34:9a:ea:37:e8:
f9:b5:b7:b2:c5:a9:11:f9:ea:8c:6c:8f:86:74:48:
bf:29:cc:7b:6f:0b:b3:4e:2c:5d:14:d8:26:6c:44:
6c:11:c4:1f:b6:6a:e2:a7:1f:d5:f1:5a:dc:92:26:
32:fe:5e:bf:6e:bc:9d:64:ae:21:ed:ef:39:ee:2b:
76:d1:20:33:70:f0:3b:6c:4f:12:11:61:bc:ee:22:
66:55:b6:5a:0e:74:e6:a8:3d:a6:8d:df:a0:ba:06:
33:78:17:cf:d2:61:08:ae:91:33:e8:ad:b6:dd:97:
53:ef:b8:91:e4:1a:21:8b:aa:42:8d:44:2d:09:90:
a7:8f:72:c9:c5:5e:3f:14:2a:3b:15:13:8c:2a:e1:
e1:fe:e6:8c:24:7f:ec:39:a3:fc:99:7f:7f:a4:6d:
b1:c5:69:5a:8b:a6:31:24:02:53:f7:44:b5:7b:21:
fc:bf:ad:bb:79:24:51:1c:46:8f:30:ef:ff:02:42:
11:bd:df:26:e5:9a:55:3b:07:f3:10:ca:3d:37:26:
a3:69:b6:d7:cd:7f:fe:ea:c9:7a:2c:a1:0a:bc:18:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4636
4747
7541
9921
9924
sbgp-ipAddrBlock: critical
IPv4:
43.240.24.0/22
49.214.0.0-49.219.255.255
60.198.0.0/15
61.30.0.0/15
61.57.0.0/19
103.224.132.0/22
124.8.0.0-124.12.255.255
124.108.128.0/18
175.96.0.0/14
202.132.0.0/16
202.145.32.0-202.145.255.255
203.65.160.0/19
203.77.0.0/17
203.105.224.0/19
203.211.0.0/19
210.17.0.0/17
210.62.0.0/18
210.62.192.0/19
210.63.128.0/18
210.67.144.0-210.67.223.255
210.192.0.0/18
210.192.128.0/17
210.208.96.0/19
210.208.192.0/18
210.243.64.0/18
211.78.208.0/20
211.79.0.0/19
219.80.0.0/15
219.86.0.0/15
IPv6:
2001:c50::/32
2001:4540::/27
Signature Algorithm: sha256WithRSAEncryption
58:0e:78:74:82:e4:a4:7e:5a:d5:6e:13:3c:57:f1:54:53:73:
e0:7a:59:5b:f5:95:30:97:57:ec:5b:90:f7:a8:22:da:59:a8:
e7:55:07:35:a6:c6:3d:89:fc:67:82:1e:b3:7c:6e:a0:fb:b1:
ac:7d:20:ad:61:81:63:80:10:f2:a8:7d:50:09:cd:ff:13:6c:
61:af:2a:0e:57:45:fd:b0:00:8f:0e:5d:41:12:00:17:08:f4:
2b:23:09:37:9e:a6:d9:f2:97:50:c2:bb:2e:4d:97:6a:40:65:
f6:ce:47:cc:a0:a8:7b:e4:b9:69:9e:05:22:f1:65:62:f9:7a:
c0:4e:be:d2:4a:c4:61:e5:e9:bc:58:69:7f:85:f1:94:a0:22:
02:e7:f6:39:94:45:97:f3:d5:26:a1:ca:cf:0b:c8:c4:f7:73:
83:af:ce:b6:9f:57:b4:96:44:ea:9f:44:4b:2a:a6:25:dc:ab:
1f:d4:5a:46:95:a0:b0:0a:75:10:21:db:9f:17:da:93:ad:15:
33:1c:5a:97:63:7e:0d:69:26:01:a9:34:63:7e:e8:36:75:da:
3b:9f:10:69:9e:ad:53:e1:40:62:c2:63:6a:a7:c8:48:fb:1e:
96:3c:e7:4e:63:90:0c:d8:1e:92:f2:84:ff:4f:68:9b:ab:17:
9a:5f:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:49 2025 by rpki-client