Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
File: NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer (raw, json)
Hash identifier: wHm5W7Bc+7i2wQyjLcsCpY632UlsWu5rPzKtkUZ3nPs=
Subject key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2E7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:28 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131631
IP: 103.123.216.0/22
IP: 2403:aac0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11903 (0x2e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:df:1e:81:ee:c1:21:26:d0:53:ac:00:4a:ce:
4f:22:a0:63:62:ee:68:c9:b7:37:64:55:89:d1:98:
22:38:6e:d5:68:d0:8b:4a:f2:eb:33:65:c9:0b:08:
e0:8b:45:c0:53:9d:f9:ea:4d:ed:29:b0:81:4c:b3:
e2:25:23:49:1b:29:9b:15:d6:f8:25:50:b7:07:f1:
b4:dc:24:cb:58:8c:75:0d:15:3f:ac:63:24:bc:58:
9d:37:ab:06:87:04:98:26:19:f1:0d:20:b2:20:26:
c5:f4:a5:1a:f4:42:2a:53:23:ba:98:4d:41:62:eb:
50:9c:0c:90:87:ab:a7:87:35:74:c5:3f:cb:4e:51:
b0:8c:81:fa:a6:ee:74:83:f4:d1:50:6c:6d:d0:93:
20:98:ee:2c:f5:3f:b2:20:38:a3:73:07:0e:03:ba:
84:6c:85:5c:b5:50:02:f0:a7:e0:ab:37:2c:a9:37:
1a:4d:86:1f:f7:1c:7f:e4:e6:10:a4:ae:65:06:37:
83:ed:ee:1c:09:5d:a1:14:0c:a5:c6:c7:9c:1f:26:
33:cd:af:bc:6f:03:86:96:14:7c:bf:a3:44:31:23:
23:0a:92:89:da:4b:cc:9a:1e:a0:64:e5:fe:b9:9d:
eb:ae:65:fc:3c:34:a3:32:40:e9:70:b3:e5:fa:35:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131631
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/22
IPv6:
2403:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
90:ae:8a:d6:3f:87:69:91:b6:ae:cb:33:e4:96:3d:af:b9:10:
c1:54:7f:14:eb:c7:b9:5b:d2:02:0d:c5:06:4d:07:2c:d7:b6:
19:ac:85:0f:03:0a:d6:87:c8:1e:5c:a8:17:f4:46:48:b2:2d:
18:59:2e:d0:f8:55:ac:f5:fc:df:41:f9:ea:b7:d8:61:9e:15:
98:d1:71:7a:56:44:95:95:c1:1c:1e:7a:42:a3:6f:d3:d0:72:
59:8b:1a:2c:cc:54:20:73:80:67:2d:7f:80:63:00:a6:87:9a:
0d:95:36:79:89:83:a6:84:eb:29:fb:a4:0c:06:3d:d4:0f:12:
6c:05:cf:02:8a:d7:e7:8e:47:65:a5:e4:f5:4e:3d:a8:9f:1e:
5b:94:4e:c5:4d:ab:84:a7:de:8f:06:b9:26:42:01:42:e8:a3:
48:ac:c5:03:0c:5f:b3:4a:38:35:46:48:b6:39:7d:82:da:97:
23:63:e3:b7:4d:51:26:e1:c2:0a:a5:28:5c:f2:f6:c4:c7:ca:
e3:da:6c:37:ab:a1:96:25:91:77:19:bd:e4:d8:aa:7f:85:85:
eb:28:60:c2:8c:fc:05:95:af:a5:e1:cc:06:06:52:4b:c2:46:
cc:75:ed:b9:fb:15:d3:47:e9:6d:4e:51:01:4c:51:1c:6c:d6:
17:3b:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:30 2024 by rpki-client on console-fra.rpki-client.org