Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
File:                     RXsQNypobj_3Nla-tc0968kyNxo.cer (raw, json)
Hash identifier:          WZGrw7JTP17Z5hUt6E/bYnLdUXjMAZ91xOaQedEX8rA=
Subject key identifier:   45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       160B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:39 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 134.208.0.0/16
                          IP: 140.109.0.0 -- 140.138.255.255
                          IP: 192.83.166.0 -- 192.83.196.255
                          IP: 192.192.0.0/16

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 07:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5643 (0x160b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Validity
            Not Before: Aug 26 01:57:39 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:25:77:c2:25:bc:d3:39:e1:9d:02:fa:47:
                    dd:bf:1a:5d:b8:a9:d8:d8:eb:00:de:6d:d1:56:8d:
                    4b:04:6f:7f:5f:43:e1:71:da:32:36:db:a0:2b:74:
                    c2:ac:98:3d:35:e5:51:70:5e:9d:a3:0d:3e:a6:15:
                    e5:25:f6:11:b8:a4:da:d9:93:c6:2c:58:8d:91:1e:
                    52:e4:aa:4d:f3:88:31:33:9a:cc:f3:f0:97:5f:44:
                    29:b5:2b:07:eb:88:0e:59:9e:15:42:04:4c:ae:36:
                    79:4a:a3:04:ab:ae:a8:b4:9b:a0:5b:96:cb:80:a9:
                    ce:c2:30:50:1c:e7:e8:c7:d0:9b:30:4f:91:d1:38:
                    1a:b6:5f:92:98:8e:2f:cd:ec:31:f7:1b:40:b8:36:
                    77:f6:90:fe:42:96:fe:b3:9c:bd:e5:b2:54:88:14:
                    cb:86:6a:53:c7:e0:24:a0:60:a9:ee:25:62:cd:b8:
                    67:ab:f0:ea:1f:47:fe:aa:d4:7c:99:70:fd:b0:14:
                    4f:4e:f8:62:59:8f:ab:4b:d2:b6:06:4d:c7:84:a8:
                    d1:22:89:2c:96:f3:da:0e:c4:f6:1d:f4:5e:a5:9c:
                    02:d8:f9:e5:9a:b8:e5:4c:a3:64:1b:9f:f5:05:28:
                    ac:1e:0f:c4:b4:6a:32:57:4e:48:dc:4b:95:f8:06:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.208.0.0/16
                  140.109.0.0-140.138.255.255
                  192.83.166.0-192.83.196.255
                  192.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4c:9d:06:81:cf:d5:4a:d9:43:09:7a:3b:88:86:5d:ca:95:14:
         82:7d:be:0d:2f:58:92:8f:44:00:3f:91:c6:b1:11:48:9a:b7:
         40:96:6c:cb:1d:8f:1f:9e:1f:fb:c5:3b:a0:5c:d2:0b:44:8b:
         f5:2e:38:2f:ec:7b:c0:2b:a4:cd:d3:9c:3e:8d:bf:8d:e2:9d:
         5a:35:56:83:a3:b9:36:c3:9d:68:16:1d:43:82:7a:8a:5b:61:
         e6:b8:4d:7e:37:0b:d4:ca:be:ff:0c:98:ba:d4:d2:c2:63:bd:
         43:f3:46:ca:67:65:43:03:19:f5:60:d1:08:65:55:85:26:b0:
         7c:bb:a2:df:6e:47:70:96:45:15:12:1c:10:34:77:b0:a1:a1:
         f2:01:a9:4c:fe:37:67:c3:7d:35:cd:14:2a:7f:38:8e:8f:32:
         bc:be:1e:c6:10:ce:37:b1:43:41:a0:0e:64:37:95:43:0f:86:
         69:1e:57:96:bb:7c:98:99:db:a3:97:08:04:7c:f0:d2:ee:9e:
         51:34:47:22:e5:26:7e:e7:63:1a:4b:3a:0c:21:77:00:8d:99:
         3e:cf:c0:80:90:9e:b1:c2:e1:b4:99:96:20:82:de:99:55:51:
         77:f6:22:ed:bd:fb:2e:e0:f7:24:bb:ac:f3:85:a9:b0:62:72:
         81:0a:a0:53
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgICFgswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF
RUExNzgxODYxNzQzMB4XDTI0MDgyNjAxNTczOVoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoNDU3QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcx
QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJ5JXfCJbzTOeGdAvpH
3b8aXbip2NjrAN5t0VaNSwRvf19D4XHaMjbboCt0wqyYPTXlUXBenaMNPqYV5SX2
Ebik2tmTxixYjZEeUuSqTfOIMTOazPPwl19EKbUrB+uIDlmeFUIETK42eUqjBKuu
qLSboFuWy4CpzsIwUBzn6MfQmzBPkdE4GrZfkpiOL83sMfcbQLg2d/aQ/kKW/rOc
veWyVIgUy4ZqU8fgJKBgqe4lYs24Z6vw6h9H/qrUfJlw/bAUT074YlmPq0vStgZN
x4So0SKJLJbz2g7E9h30XqWcAtj55Zq45UyjZBuf9QUorB4PxLRqMldOSNxLlfgG
Sk0CAwEAAaOCAmwwggJoMB0GA1UdDgQWBBRFexA3KmhuP/c2Vr61zT3ryTI3GjAf
BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy
L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQvMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
VEFORVQvUlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDA9BggrBgEF
BQcBBwEB/wQuMCwwKgQCAAEwJAMDAIbQMAoDAwCMbQMDAIyKMAwDBAHAU6YDBADA
U8QDAwDAwDANBgkqhkiG9w0BAQsFAAOCAQEATJ0Ggc/VStlDCXo7iIZdypUUgn2+
DS9Yko9EAD+RxrERSJq3QJZsyx2PH54f+8U7oFzSC0SL9S44L+x7wCukzdOcPo2/
jeKdWjVWg6O5NsOdaBYdQ4J6ilth5rhNfjcL1Mq+/wyYutTSwmO9Q/NGymdlQwMZ
9WDRCGVVhSawfLui325HcJZFFRIcEDR3sKGh8gGpTP43Z8N9Nc0UKn84jo8yvL4e
xhDON7FDQaAOZDeVQw+GaR5Xlrt8mJnbo5cIBHzw0u6eUTRHIuUmfudjGks6DCF3
AI2ZPs/AgJCescLhtJmWIILemVVRd/Yi7b37LuD3JLus84WpsGJygQqgUw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:39 2024 by rpki-client on console-ams.rpki-client.org