Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
File: RXsQNypobj_3Nla-tc0968kyNxo.cer (raw, json)
Hash identifier: HtmfAnlkSsA4ayGr+tmY0v4a9CVdvQVwGJIx0qs/Q9Y=
Subject key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 14D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Wed 15 May 2024 05:32:59 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: IP: 134.208.0.0/16
IP: 140.109.0.0 -- 140.138.255.255
IP: 192.83.166.0 -- 192.83.196.255
IP: 192.192.0.0/16
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 05:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5332 (0x14d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: May 15 05:32:59 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:25:77:c2:25:bc:d3:39:e1:9d:02:fa:47:
dd:bf:1a:5d:b8:a9:d8:d8:eb:00:de:6d:d1:56:8d:
4b:04:6f:7f:5f:43:e1:71:da:32:36:db:a0:2b:74:
c2:ac:98:3d:35:e5:51:70:5e:9d:a3:0d:3e:a6:15:
e5:25:f6:11:b8:a4:da:d9:93:c6:2c:58:8d:91:1e:
52:e4:aa:4d:f3:88:31:33:9a:cc:f3:f0:97:5f:44:
29:b5:2b:07:eb:88:0e:59:9e:15:42:04:4c:ae:36:
79:4a:a3:04:ab:ae:a8:b4:9b:a0:5b:96:cb:80:a9:
ce:c2:30:50:1c:e7:e8:c7:d0:9b:30:4f:91:d1:38:
1a:b6:5f:92:98:8e:2f:cd:ec:31:f7:1b:40:b8:36:
77:f6:90:fe:42:96:fe:b3:9c:bd:e5:b2:54:88:14:
cb:86:6a:53:c7:e0:24:a0:60:a9:ee:25:62:cd:b8:
67:ab:f0:ea:1f:47:fe:aa:d4:7c:99:70:fd:b0:14:
4f:4e:f8:62:59:8f:ab:4b:d2:b6:06:4d:c7:84:a8:
d1:22:89:2c:96:f3:da:0e:c4:f6:1d:f4:5e:a5:9c:
02:d8:f9:e5:9a:b8:e5:4c:a3:64:1b:9f:f5:05:28:
ac:1e:0f:c4:b4:6a:32:57:4e:48:dc:4b:95:f8:06:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
140.109.0.0-140.138.255.255
192.83.166.0-192.83.196.255
192.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:a4:50:02:c7:0e:35:30:dd:4e:92:f9:1a:23:a0:37:b7:3b:
fe:b6:8e:af:76:02:28:43:b0:f8:c6:7c:9e:bb:e9:b5:1a:92:
8d:d8:6d:86:e6:e4:50:fb:27:c2:e4:8a:d3:c2:8a:d8:ac:52:
98:44:fb:31:3d:42:19:60:df:a4:7c:d7:8a:b7:55:e2:c0:bf:
54:aa:f7:4c:1d:cb:e7:ef:4c:37:9a:08:f9:c4:46:db:d7:0f:
5d:95:67:6f:05:99:02:23:30:5b:ad:4a:0c:c9:47:e6:26:a3:
59:d7:56:92:1c:50:89:68:10:2d:4d:40:99:7f:0d:68:69:c7:
b5:58:64:4e:8b:01:03:31:a1:9f:31:33:7d:39:00:c6:5b:d3:
bb:ad:c2:6d:a6:3c:cb:b0:b3:54:47:9c:3e:78:34:2a:fb:cf:
23:5a:d4:61:f5:0c:d3:55:65:e4:d1:ee:54:68:f3:06:7e:d8:
72:d0:40:48:90:da:cf:5b:dd:7e:08:26:68:24:bc:84:bc:01:
50:cc:f5:02:98:ce:34:d9:44:69:49:83:28:8a:9e:d8:25:03:
5e:50:94:a3:e2:c1:f7:eb:a0:aa:64:bd:88:16:05:41:29:ad:
ae:85:1c:36:f7:7a:db:7e:ff:f6:9c:26:47:0f:4a:7c:68:67:
e2:0e:87:ad
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgICFNQwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF
RUExNzgxODYxNzQzMB4XDTI0MDUxNTA1MzI1OVoXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoNDU3QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcx
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJ5JXfCJbzTOeGdAvpH
3b8aXbip2NjrAN5t0VaNSwRvf19D4XHaMjbboCt0wqyYPTXlUXBenaMNPqYV5SX2
Ebik2tmTxixYjZEeUuSqTfOIMTOazPPwl19EKbUrB+uIDlmeFUIETK42eUqjBKuu
qLSboFuWy4CpzsIwUBzn6MfQmzBPkdE4GrZfkpiOL83sMfcbQLg2d/aQ/kKW/rOc
veWyVIgUy4ZqU8fgJKBgqe4lYs24Z6vw6h9H/qrUfJlw/bAUT074YlmPq0vStgZN
x4So0SKJLJbz2g7E9h30XqWcAtj55Zq45UyjZBuf9QUorB4PxLRqMldOSNxLlfgG
Sk0CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBRFexA3KmhuP/c2Vr61zT3ryTI3GjAf
BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy
L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQvMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
VEFORVQvUlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDA9BggrBgEF
BQcBBwEB/wQuMCwwKgQCAAEwJAMDAIbQMAoDAwCMbQMDAIyKMAwDBAHAU6YDBADA
U8QDAwDAwDANBgkqhkiG9w0BAQsFAAOCAQEAOqRQAscONTDdTpL5GiOgN7c7/raO
r3YCKEOw+MZ8nrvptRqSjdhthubkUPsnwuSK08KK2KxSmET7MT1CGWDfpHzXirdV
4sC/VKr3TB3L5+9MN5oI+cRG29cPXZVnbwWZAiMwW61KDMlH5iajWddWkhxQiWgQ
LU1AmX8NaGnHtVhkTosBAzGhnzEzfTkAxlvTu63CbaY8y7CzVEecPng0KvvPI1rU
YfUM01Vl5NHuVGjzBn7YctBASJDaz1vdfggmaCS8hLwBUMz1ApjONNlEaUmDKIqe
2CUDXlCUo+LB9+ugqmS9iBYFQSmtroUcNvd6237/9pwmRw9KfGhn4g6HrQ==
-----END CERTIFICATE-----
Generated at Wed May 22 02:03:20 2024 by rpki-client on console-fra.rpki-client.org