Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
File: NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer (raw, json)
Hash identifier: eziVmAPKhLWhMYb+/GO7nzj+1/3kABg6A6J05FqiiVM=
Subject key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 28CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:25 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 131631
IP: 103.123.216.0/22
IP: 2403:aac0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 19:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10442 (0x28ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:df:1e:81:ee:c1:21:26:d0:53:ac:00:4a:ce:
4f:22:a0:63:62:ee:68:c9:b7:37:64:55:89:d1:98:
22:38:6e:d5:68:d0:8b:4a:f2:eb:33:65:c9:0b:08:
e0:8b:45:c0:53:9d:f9:ea:4d:ed:29:b0:81:4c:b3:
e2:25:23:49:1b:29:9b:15:d6:f8:25:50:b7:07:f1:
b4:dc:24:cb:58:8c:75:0d:15:3f:ac:63:24:bc:58:
9d:37:ab:06:87:04:98:26:19:f1:0d:20:b2:20:26:
c5:f4:a5:1a:f4:42:2a:53:23:ba:98:4d:41:62:eb:
50:9c:0c:90:87:ab:a7:87:35:74:c5:3f:cb:4e:51:
b0:8c:81:fa:a6:ee:74:83:f4:d1:50:6c:6d:d0:93:
20:98:ee:2c:f5:3f:b2:20:38:a3:73:07:0e:03:ba:
84:6c:85:5c:b5:50:02:f0:a7:e0:ab:37:2c:a9:37:
1a:4d:86:1f:f7:1c:7f:e4:e6:10:a4:ae:65:06:37:
83:ed:ee:1c:09:5d:a1:14:0c:a5:c6:c7:9c:1f:26:
33:cd:af:bc:6f:03:86:96:14:7c:bf:a3:44:31:23:
23:0a:92:89:da:4b:cc:9a:1e:a0:64:e5:fe:b9:9d:
eb:ae:65:fc:3c:34:a3:32:40:e9:70:b3:e5:fa:35:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131631
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/22
IPv6:
2403:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:29:d8:96:f1:a7:34:21:41:82:12:ca:fe:4a:eb:3c:4c:75:
61:f5:a1:ab:28:d9:0e:34:ca:4b:27:a9:41:2b:19:38:ef:5d:
51:8b:64:dd:c5:9b:92:74:2c:95:e2:ed:e5:fb:0c:7f:89:86:
b1:08:ac:f0:b8:e2:3e:15:19:7b:44:4c:64:10:27:4e:e3:aa:
27:5c:94:94:7f:f4:e4:96:fb:86:24:39:af:5a:34:65:53:1e:
b1:bb:49:ab:e2:41:18:db:e2:ad:5a:28:33:8a:70:e5:ee:dd:
14:7b:e2:d7:3f:95:18:06:41:d9:8f:87:16:81:f1:66:64:3f:
04:09:e9:0b:5a:88:3f:95:a2:a1:93:aa:d5:3e:8f:e7:a5:1e:
5d:c7:3c:82:c6:81:7b:7e:50:90:f3:ea:72:e3:5b:b1:89:bc:
d2:a5:3e:23:07:72:f8:12:87:29:13:4c:66:db:b3:42:ee:86:
bb:39:d2:20:b2:59:8d:bd:e3:15:11:3a:37:53:4e:b8:c1:12:
80:b5:5c:70:dc:f9:14:29:d4:2f:e0:bc:cc:ba:16:5e:ea:4e:
2c:f5:36:30:6a:e4:14:3f:9f:01:51:9f:67:db:d9:80:0e:93:
dd:f6:ef:40:5f:90:ff:3c:7c:86:ca:f7:ab:71:19:b1:57:94:
99:0b:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:31:04 2024 by rpki-client on console-ams.rpki-client.org