Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
File: TmCbp0GG0LDjoanAENod8FWaGYI.cer (raw, json)
Hash identifier: e6MeOxxazFRjg0Edbdkcx7TcvHqO3/Q/K7lR76V0GDs=
Subject key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2A0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 03 Oct 2023 07:04:38 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: IP: 2403:81c0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10765 (0x2a0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Oct 3 07:04:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:3d:c5:64:c3:5e:ae:a2:bf:1e:21:bf:ce:
b9:73:bb:85:8f:87:4e:1e:ea:ec:59:62:7c:27:1a:
54:f5:8f:a6:40:53:ba:1a:b1:fe:b2:d8:5f:db:93:
c0:79:b7:2c:7e:63:c7:21:bb:87:ae:12:da:9d:74:
35:54:b3:29:80:06:f0:56:cf:86:d6:27:91:27:dd:
54:af:19:4c:cb:d9:28:bf:6d:8e:6b:31:cb:8f:1a:
ac:c5:9e:05:17:7c:78:46:cb:1e:bc:f7:60:19:c3:
95:93:42:ae:69:5b:ce:21:d3:cb:90:2c:4e:8a:2a:
c9:6d:e2:e1:fc:8c:0b:e5:62:34:3c:43:ba:58:21:
eb:f6:fc:d2:7b:36:32:35:f2:ad:50:6d:28:42:ce:
e2:01:e9:26:4b:42:e2:79:1b:57:ac:0f:1b:e2:70:
fe:b7:5c:4d:06:0d:8c:cf:1b:37:bf:12:21:b0:10:
6c:13:d6:d0:9d:ba:43:be:ae:03:12:d3:32:e5:8a:
84:0f:b3:cd:f5:9f:36:32:ec:a7:7b:5e:89:cf:06:
e1:ed:32:22:53:cb:09:27:16:e7:28:be:70:47:cd:
fd:d0:31:ad:de:dc:b9:1d:b7:cf:dc:3a:d2:e7:fe:
30:36:19:5e:2d:a6:d9:9f:f5:03:a9:2d:c9:2d:17:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:81c0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:64:69:ce:6a:cc:bf:36:ea:de:97:46:21:df:83:20:20:a6:
0e:b1:21:fd:50:27:fb:e7:09:1b:9c:cb:5b:c7:96:fd:e0:01:
04:9e:6d:22:70:df:69:c4:c8:0b:3a:2c:95:36:28:da:cd:79:
1d:16:64:55:f3:12:4c:c0:cb:13:88:af:73:c5:06:9d:c4:1e:
c7:b8:e3:af:9c:2b:58:d5:d4:d8:a4:3e:66:25:61:4a:e8:70:
67:74:70:9e:b0:40:fc:60:54:eb:d7:3d:79:a9:a5:0e:5f:b8:
02:40:6d:f0:9b:2b:cb:79:7f:9f:e2:d5:05:89:eb:ca:20:c9:
77:69:87:43:4f:bb:9d:34:0b:5e:ff:e5:28:25:f6:be:ab:f8:
e6:a7:af:8a:28:e3:94:63:f3:de:51:4a:9b:f1:d9:88:a8:4d:
e0:e9:ea:46:15:f0:0f:5d:af:31:20:d5:a6:fb:b4:4e:8b:eb:
76:7e:a9:71:30:0f:1a:5d:0a:47:2a:a6:8b:0f:e0:6b:a2:a0:
52:22:0d:0e:c8:30:7f:f2:b4:66:2f:ba:40:82:1f:99:85:ce:
ab:2a:0e:f4:81:df:45:74:ea:f5:4d:5c:82:e7:d0:84:1c:03:
5a:6d:3b:6b:98:61:92:c2:5d:73:16:61:9a:16:f5:8c:1c:b7:
80:5a:7e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org