Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
File: KkeBVTgnMeXA9oId1TifnlLh5NY.cer (raw, json)
Hash identifier: b8BXNDRnzITHcWK+KS+2tdcdVSj6x0OZ9SzO2qVCcT0=
Subject key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2ECB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:31 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 17809
AS: 131145
IP: 27.96.224.0/19
IP: 111.67.48.0/20
IP: 113.61.128.0/17
IP: 119.15.192.0/18
IP: 121.254.64.0/18
IP: 182.155.0.0/16
IP: 203.217.96.0/19
IP: 203.222.0.0/19
IP: 210.209.128.0/17
IP: 211.79.112.0/20
IP: 2401:ab00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11979 (0x2ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:31 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:f3:6e:9a:bf:d3:ae:8b:cf:2d:7c:cf:26:
a4:01:c1:0e:8f:56:d9:a0:4a:1b:86:a2:40:89:24:
3a:c7:65:fd:26:90:72:de:40:88:8a:37:ef:3c:a2:
b1:a9:76:80:21:0c:d3:ef:38:9e:65:a1:97:1b:77:
17:c7:19:a1:10:1b:69:79:48:d9:c4:1a:44:08:9e:
11:7c:6e:5b:b0:68:3a:73:7d:9d:c1:c9:6a:49:ca:
d6:94:d8:96:26:0f:83:c4:ca:f7:84:a8:31:1c:5c:
5c:9b:89:74:88:6d:42:fd:7d:7a:0d:f1:1a:e9:60:
0d:62:19:13:1f:d8:b0:88:da:0d:56:83:58:29:c4:
02:59:eb:be:44:9e:ed:1a:2c:31:79:08:60:2e:9c:
10:73:29:b6:63:b8:8d:29:cd:8e:33:43:bf:cd:cf:
62:19:b7:2f:91:66:be:a7:a7:2d:90:5b:76:a6:59:
a8:3b:77:aa:f2:fc:2b:d1:28:02:c9:ed:3c:2f:b5:
4d:98:63:d8:94:7f:cb:74:c5:4e:9c:1e:84:4a:d9:
98:ed:e1:bb:1a:12:aa:55:b6:33:52:43:bc:bd:91:
ea:6d:b8:69:d6:11:34:f6:5b:64:b6:4e:60:5f:8c:
d1:8e:7c:a9:d1:2f:fe:bb:c1:a7:da:ff:17:fc:5f:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17809
131145
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
111.67.48.0/20
113.61.128.0/17
119.15.192.0/18
121.254.64.0/18
182.155.0.0/16
203.217.96.0/19
203.222.0.0/19
210.209.128.0/17
211.79.112.0/20
IPv6:
2401:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
95:6a:5e:82:a4:14:3e:06:6f:ef:47:b1:5c:8c:7c:71:21:3b:
73:d4:a6:51:d1:c6:32:6c:6c:50:2e:df:1d:1d:7e:76:9b:eb:
95:07:48:61:b0:36:b2:6c:20:d6:b8:84:53:f4:6c:f3:16:8c:
b0:57:fb:2c:e2:7c:a0:76:73:37:d9:e0:3d:fd:5b:88:46:27:
7d:59:79:d2:64:6c:6e:21:81:60:40:cf:a3:d5:d1:dc:f5:00:
2f:60:a0:c4:3a:7d:72:cd:cd:f5:e6:99:d8:5b:ce:02:d5:34:
b2:78:75:bd:78:85:00:ba:ae:10:26:54:95:c5:74:7d:60:f3:
0b:5c:94:c8:be:41:61:19:14:e6:79:7f:5e:44:12:06:59:4c:
97:ac:17:cc:54:2f:40:77:33:b0:2b:70:a5:a6:49:01:8a:5e:
ec:1a:9d:bd:b2:2e:d2:e3:aa:a3:23:f2:3b:ba:eb:f1:c4:42:
5e:5a:f2:a8:d8:34:02:11:3c:28:b4:63:e7:2d:44:ca:49:ec:
b3:18:2d:f6:d7:1f:3d:ff:b5:7e:17:3d:c8:04:e5:24:67:cf:
03:29:9c:41:5d:bd:aa:0c:38:fe:1a:a6:c6:54:ef:74:2e:d7:
8c:c8:b4:16:95:12:8f:0f:60:75:89:19:70:cd:a6:81:0f:b7:
10:5d:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:34 2024 by rpki-client on console-ams.rpki-client.org