Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer
File:                     GrLnpA7IH96KYX6fq15hgkeczCs.cer (raw, json)
Hash identifier:          UpzUVO+BEymNjqY/ntGdjSV+swiB2JcZRfhDP7bTi7I=
Subject key identifier:   1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2E4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:26 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 18421
                          IP: 202.6.104.0/23

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11853 (0x2e4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:26 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:2b:46:2f:8a:6b:1d:c6:f9:6a:d6:0a:9f:
                    07:f2:8b:ed:12:3e:09:ff:94:ff:ad:4d:6a:f8:3f:
                    c0:9d:d2:8c:b0:98:56:62:72:43:09:7d:91:48:df:
                    fd:08:50:ce:11:b4:56:55:c7:2d:ee:72:1d:9f:5c:
                    ab:74:fc:87:a3:c1:ca:ae:a5:0a:db:dc:64:27:4f:
                    ff:8a:3e:c7:77:d6:9d:97:a6:ef:ac:7c:12:9c:cc:
                    93:96:2d:96:9b:e5:e5:2d:7d:4c:60:bc:e2:f9:3e:
                    45:6b:bd:01:bd:06:eb:90:b8:71:12:b7:7c:8c:c1:
                    16:12:cb:12:96:33:51:20:6b:c4:3d:1d:de:b9:03:
                    7c:c0:42:ab:ac:cd:06:2a:5b:33:93:f2:53:cd:45:
                    5e:93:92:5b:e3:07:d9:07:8e:b9:bb:7c:6e:59:9f:
                    3b:a9:44:6e:03:ff:77:24:7f:e3:11:2a:40:28:ea:
                    f9:d2:84:a8:ff:83:6e:46:13:43:d1:2c:09:1b:80:
                    6c:61:b5:34:5a:48:12:2b:f8:10:ea:7f:ed:58:8d:
                    52:0a:8d:79:c1:53:1c:e7:36:82:ee:7d:4c:59:20:
                    6f:6a:a9:2c:45:2e:ce:f3:e6:15:02:0b:04:d3:4c:
                    d2:21:7c:ce:5b:30:40:7b:2b:01:95:e4:e6:3f:73:
                    5a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18421

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:35:ce:c1:9f:55:49:54:39:f7:d9:5a:b9:b9:6e:86:19:43:
         2d:2a:2a:00:2b:e1:77:b3:a8:69:e4:d1:27:95:db:bc:84:ab:
         ba:c1:0f:a7:9a:d6:a2:c9:08:23:b7:74:37:56:4f:80:4c:d6:
         d0:35:12:15:ab:06:29:11:b2:e4:4e:e5:6c:a6:0f:59:c5:a8:
         9b:e7:da:07:8b:3e:e9:1e:c4:bc:90:fd:e4:cf:d1:55:dc:86:
         a2:78:06:d3:34:6f:b6:4c:64:3e:b7:c7:28:b1:57:3f:43:ed:
         a7:74:d6:0f:f6:f1:c9:89:72:e4:4d:93:90:65:29:f4:61:d7:
         3d:99:fb:9c:78:7b:d9:e0:9f:cc:48:1e:62:04:f9:46:71:2f:
         bb:95:0e:78:99:3e:ac:80:71:f3:e4:cb:f1:dc:d4:94:58:7b:
         70:b3:54:77:60:ad:3e:bf:46:c1:4b:21:eb:e7:ab:c3:86:44:
         c9:be:2d:47:2e:3b:80:c2:b2:d7:69:90:47:0f:84:f7:93:a0:
         7b:5f:a9:05:e8:21:a6:4c:5f:5a:5e:db:ab:17:3b:cd:29:46:
         df:3d:a9:c0:34:0f:a3:10:34:b2:bc:f9:15:ef:bf:2e:90:75:
         f6:e8:83:8d:b1:9b:d0:d3:4e:e0:c9:78:52:91:8a:a1:8f:cc:
         52:33:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:32 2024 by rpki-client on console-ams.rpki-client.org