Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
File:                     KkeBVTgnMeXA9oId1TifnlLh5NY.cer (raw, json)
Hash identifier:          JC1rMkymO/qdGwvhEYZ5reVWkTbNbMUOeiUua4Yvjj0=
Subject key identifier:   2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       27D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 01 Sep 2023 03:11:12 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 17809
                          AS: 131145
                          IP: 27.96.224.0/19
                          IP: 111.67.48.0/20
                          IP: 113.61.128.0/17
                          IP: 119.15.192.0/18
                          IP: 121.254.64.0/18
                          IP: 182.155.0.0/16
                          IP: 203.217.96.0/19
                          IP: 203.222.0.0/19
                          IP: 210.209.128.0/17
                          IP: 211.79.112.0/20
                          IP: 2401:ab00::/32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10198 (0x27d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  1 03:11:12 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:f3:6e:9a:bf:d3:ae:8b:cf:2d:7c:cf:26:
                    a4:01:c1:0e:8f:56:d9:a0:4a:1b:86:a2:40:89:24:
                    3a:c7:65:fd:26:90:72:de:40:88:8a:37:ef:3c:a2:
                    b1:a9:76:80:21:0c:d3:ef:38:9e:65:a1:97:1b:77:
                    17:c7:19:a1:10:1b:69:79:48:d9:c4:1a:44:08:9e:
                    11:7c:6e:5b:b0:68:3a:73:7d:9d:c1:c9:6a:49:ca:
                    d6:94:d8:96:26:0f:83:c4:ca:f7:84:a8:31:1c:5c:
                    5c:9b:89:74:88:6d:42:fd:7d:7a:0d:f1:1a:e9:60:
                    0d:62:19:13:1f:d8:b0:88:da:0d:56:83:58:29:c4:
                    02:59:eb:be:44:9e:ed:1a:2c:31:79:08:60:2e:9c:
                    10:73:29:b6:63:b8:8d:29:cd:8e:33:43:bf:cd:cf:
                    62:19:b7:2f:91:66:be:a7:a7:2d:90:5b:76:a6:59:
                    a8:3b:77:aa:f2:fc:2b:d1:28:02:c9:ed:3c:2f:b5:
                    4d:98:63:d8:94:7f:cb:74:c5:4e:9c:1e:84:4a:d9:
                    98:ed:e1:bb:1a:12:aa:55:b6:33:52:43:bc:bd:91:
                    ea:6d:b8:69:d6:11:34:f6:5b:64:b6:4e:60:5f:8c:
                    d1:8e:7c:a9:d1:2f:fe:bb:c1:a7:da:ff:17:fc:5f:
                    bf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17809
                  131145

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.224.0/19
                  111.67.48.0/20
                  113.61.128.0/17
                  119.15.192.0/18
                  121.254.64.0/18
                  182.155.0.0/16
                  203.217.96.0/19
                  203.222.0.0/19
                  210.209.128.0/17
                  211.79.112.0/20
                IPv6:
                  2401:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:94:d5:bc:8f:b9:4e:59:e2:59:18:94:5c:d5:76:cf:e6:
         31:67:c5:a5:04:97:31:1d:59:ea:85:16:66:05:64:13:0f:34:
         1f:49:a6:f2:e4:66:bb:5f:7a:c0:0b:6f:a4:b0:1b:8d:74:1d:
         8c:6f:47:73:62:c1:7b:0f:37:f2:36:8a:8a:f5:97:f5:38:2c:
         f9:b3:a9:7f:29:40:e9:92:8b:15:72:5c:bf:fd:83:8c:70:ec:
         43:ee:31:0d:26:eb:df:36:8b:9f:a3:59:91:33:1a:10:f7:55:
         3d:2b:a1:58:93:3b:c3:a0:ed:90:80:16:22:6b:4c:20:1c:51:
         ba:5a:f2:cd:ee:c2:45:f8:ad:45:97:f2:a0:3d:3e:cd:a4:09:
         65:1e:71:c8:06:23:b3:42:f1:99:c9:c3:a7:45:7a:6b:c1:c6:
         4f:b0:fc:4e:42:b0:c4:25:41:1b:ee:14:99:df:ab:e1:d3:f1:
         7c:79:96:c4:23:5c:17:33:8b:5b:31:1c:19:b2:1b:5d:92:52:
         fb:e2:46:db:29:d4:de:42:14:73:ee:de:21:83:14:6c:4c:8a:
         0e:eb:15:f6:8e:e5:51:fc:c4:7f:0d:1a:15:31:6f:f7:11:bb:
         41:62:91:ab:8b:34:83:aa:ea:82:bd:b6:f9:ff:9d:65:ff:91:
         3b:d3:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:34 2024 by rpki-client on console-fra.rpki-client.org