Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer (raw, json)
Hash identifier:          Imxiowi9imHgkRjtrebWzj3u5sEjA+hHrsFScv0uK/Y=
Subject key identifier:   47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       27EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 01 Sep 2023 03:11:13 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 9918
                          IP: 61.61.0.0 -- 61.61.191.255
                          IP: 211.78.0.0/18

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10222 (0x27ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  1 03:11:13 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:7b:c4:e1:30:a8:d2:3f:51:6f:93:63:09:
                    84:cf:d9:88:8b:9f:68:d7:4c:ed:44:7a:b5:c0:3c:
                    84:8f:8a:06:00:d2:c3:d3:1b:6a:2c:c4:b0:24:34:
                    83:db:15:44:77:2e:da:ee:dd:b6:fa:47:84:9f:cf:
                    26:3f:c6:5b:bc:c2:98:d9:bb:c4:03:66:b1:45:9e:
                    55:6e:e4:69:17:7b:64:7b:4d:86:6d:ce:82:ad:cb:
                    ae:94:46:61:65:3f:94:d9:89:f6:5d:bd:89:3b:b5:
                    52:3f:a5:ef:d4:1d:a4:24:24:aa:a9:bb:d4:22:f3:
                    05:8f:38:b1:5c:04:ba:b1:a4:f0:43:22:35:5e:4c:
                    3a:72:dd:6c:c7:a9:c2:b7:6c:51:34:91:4b:4f:74:
                    5d:fd:35:f8:da:57:71:94:f3:3b:e6:aa:fc:ba:57:
                    cc:5e:cc:d5:6b:1f:8e:00:e5:d9:58:19:ff:51:13:
                    7d:31:a3:77:30:6d:39:cc:6b:ef:4a:01:a7:53:04:
                    28:0b:99:79:b1:af:02:44:20:ef:e6:74:c1:41:a7:
                    ce:c7:cf:fb:d4:3f:97:d2:73:dd:c6:2d:d3:bb:c9:
                    ff:e4:64:3a:9d:37:ce:90:c2:62:09:1f:59:2b:e3:
                    46:25:4d:7d:b8:7b:c3:83:a7:9c:0f:99:f2:0b:46:
                    fe:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9918

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.0.0-61.61.191.255
                  211.78.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         34:c6:5c:99:1c:b9:4c:c7:2e:61:08:08:2f:61:42:67:00:07:
         d3:5f:ba:8d:74:97:cb:a0:37:11:29:f9:d9:e7:5c:c6:8e:df:
         81:95:a4:71:2e:af:70:aa:e2:7a:e5:b8:98:4e:7a:8f:6d:dc:
         a4:6a:bd:23:f8:33:c3:20:31:88:d0:27:65:36:f8:77:5e:c0:
         af:8e:d2:e0:c7:4d:de:1f:e8:ea:b9:ec:f5:a6:4e:8c:c1:0a:
         88:92:55:b6:6b:05:85:19:23:c5:7c:78:14:99:a0:e0:97:ba:
         d4:ef:94:3c:51:6f:b4:6c:5c:bf:ed:9c:11:d6:cd:d7:81:5d:
         a8:f9:09:b6:3b:69:d1:81:15:db:c0:ed:15:75:78:32:f6:24:
         2a:bd:c0:71:0a:89:dd:01:40:cc:32:d8:f5:6b:2a:a7:a5:8b:
         1f:ab:73:41:38:3c:88:0b:8d:cf:59:e9:e4:ce:cd:1d:5a:1c:
         b6:13:f1:2a:1e:8c:88:7d:32:27:02:69:92:1e:f8:a0:87:5b:
         20:02:94:97:dd:98:2c:aa:5e:03:a4:08:80:20:1f:b9:b1:ff:
         53:6b:5c:bc:f3:19:c0:dc:f9:6d:86:a8:57:d9:f5:e3:ef:b4:
         8a:cd:5e:f5:45:f6:eb:b8:70:7c:5b:9f:2c:a9:77:3b:01:e1:
         72:a4:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:03:20 2024 by rpki-client on console-fra.rpki-client.org