Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
File: HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer (raw, json)
Hash identifier: F0VMhQhLACSdc1Iees/meYvHWoXrDujUeFaZiEi9Yt0=
Subject key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2A8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Thu 16 Nov 2023 06:33:06 +0000
Certificate not after: Sat 09 Nov 2024 15:30:21 +0000
Subordinate resources: AS: 150755
IP: 203.175.104.0/23
IP: 2401:4e60::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 May 2024 07:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10894 (0x2a8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Nov 16 06:33:06 2023 GMT
Not After : Nov 9 15:30:21 2024 GMT
Subject: CN=1C7073A6066C765842FDF07169E43518A0BB0235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:c6:f7:bb:53:e0:0e:f2:e3:6e:2d:0c:30:
65:41:74:4e:26:80:89:44:2f:2b:2e:cd:6e:68:7f:
bc:47:53:fa:f7:60:be:0e:d4:34:59:35:e5:ae:1b:
d0:2e:85:b3:66:cb:e4:23:0b:9a:92:29:03:32:61:
2c:70:79:a4:20:5b:8d:96:c4:f7:1b:63:70:dd:2d:
6b:2e:41:f9:79:6c:06:c0:c9:b7:48:1b:fa:a6:eb:
72:80:01:b1:90:6c:82:35:6c:6e:4e:af:8f:24:73:
94:44:d4:38:e8:3e:69:0c:9d:ff:70:f6:14:87:36:
4d:a9:31:48:42:db:29:93:ca:eb:6a:af:e2:d4:e9:
19:b7:d4:1d:80:90:7a:01:2c:21:37:fd:f8:b3:89:
9f:41:10:95:29:e9:64:49:8e:50:c7:1d:56:43:18:
4a:11:77:61:60:3b:a0:48:0c:ad:7d:c1:49:51:6b:
a0:2c:80:ce:50:6d:e2:35:34:aa:b6:c1:db:a6:f2:
d8:de:9b:3b:84:42:76:d0:e9:bd:4f:a3:76:39:51:
f5:96:59:e2:32:3a:88:23:1a:b2:64:0c:4e:7e:06:
3b:d5:7f:d9:c0:01:bb:8d:4d:fa:93:20:a5:cb:2a:
42:95:bd:86:1b:0d:59:e3:38:b8:df:c5:8d:e4:af:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150755
sbgp-ipAddrBlock: critical
IPv4:
203.175.104.0/23
IPv6:
2401:4e60::/32
Signature Algorithm: sha256WithRSAEncryption
86:1b:1b:ae:a5:82:2d:a6:1c:23:6b:4b:5c:fb:6d:35:05:30:
5e:37:f2:e5:ff:41:7b:6b:3d:0d:25:1d:8a:97:18:11:c1:34:
7a:cc:11:6c:8a:04:b8:c1:8d:48:69:63:57:e3:d9:9d:29:f0:
bf:76:94:11:79:90:3f:37:da:df:9c:19:00:4b:44:e9:48:d9:
d7:e0:b3:81:6d:30:37:0e:3e:89:83:42:56:c9:55:53:2a:32:
7f:69:16:3c:ed:24:d1:45:a9:a7:d3:df:39:03:b2:3d:2a:5d:
43:d6:aa:bb:ab:f1:1c:10:d3:66:08:86:ea:9d:14:36:28:3f:
c6:9d:61:a9:bf:11:e8:1b:3c:7a:18:80:a8:4c:9a:0b:dd:df:
4e:fe:6c:16:a3:56:b8:d7:8c:70:0d:09:af:93:61:4a:c1:3b:
5a:5a:7b:52:ed:16:1e:ab:c8:04:b8:92:df:9a:88:52:ca:41:
84:fe:5b:bf:a2:f5:7a:38:41:ad:37:7a:23:19:91:97:41:3e:
55:31:1c:51:1b:3c:74:22:f6:11:d9:9c:5a:08:98:3a:4f:62:
cf:15:b8:48:eb:3c:26:b9:6b:d1:3c:f8:b2:0f:67:d3:9d:a7:
d1:fd:ea:85:fb:56:03:15:5a:58:12:dd:18:0b:6b:95:42:fb:
83:18:1c:24
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgICKo4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMTExNjA2MzMwNloXDTI0MTEwOTE1MzAyMVowMzEx
MC8GA1UEAxMoMUM3MDczQTYwNjZDNzY1ODQyRkRGMDcxNjlFNDM1MThBMEJCMDIz
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOMfxve7U+AO8uNuLQww
ZUF0TiaAiUQvKy7Nbmh/vEdT+vdgvg7UNFk15a4b0C6Fs2bL5CMLmpIpAzJhLHB5
pCBbjZbE9xtjcN0tay5B+XlsBsDJt0gb+qbrcoABsZBsgjVsbk6vjyRzlETUOOg+
aQyd/3D2FIc2TakxSELbKZPK62qv4tTpGbfUHYCQegEsITf9+LOJn0EQlSnpZEmO
UMcdVkMYShF3YWA7oEgMrX3BSVFroCyAzlBt4jU0qrbB26by2N6bO4RCdtDpvU+j
djlR9ZZZ4jI6iCMasmQMTn4GO9V/2cABu41N+pMgpcsqQpW9hhsNWeM4uN/FjeSv
ptkCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBQccHOmBmx2WEL98HFp5DUYoLsCNTAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF
hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlVOTElORS8w
WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9OVU5MSU5FL0hIQnpwZ1pzZGxoQ19mQnhhZVExR0tDN0FqVS5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAkzjMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA
ATAGAwQBy69oMA0EAgACMAcDBQAkAU5gMA0GCSqGSIb3DQEBCwUAA4IBAQCGGxuu
pYItphwja0tc+201BTBeN/Ll/0F7az0NJR2KlxgRwTR6zBFsigS4wY1IaWNX49md
KfC/dpQReZA/N9rfnBkAS0TpSNnX4LOBbTA3Dj6Jg0JWyVVTKjJ/aRY87STRRamn
0985A7I9Kl1D1qq7q/EcENNmCIbqnRQ2KD/GnWGpvxHoGzx6GICoTJoL3d9O/mwW
o1a414xwDQmvk2FKwTtaWntS7RYeq8gEuJLfmohSykGE/lu/ovV6OEGtN3ojGZGX
QT5VMRxRGzx0IvYR2ZxaCJg6T2LPFbhI6zwmuWvRPPiyD2fTnafR/eqF+1YDFVpY
Et0YC2uVQvuDGBwk
-----END CERTIFICATE-----
Generated at Tue May 21 06:28:41 2024 by rpki-client on console-ams.rpki-client.org