Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
File: Uptgbbhig71KCK9-sz7ziiVmMbs.cer (raw, json)
Hash identifier: bz6tfz+JnneH1ImV0uykRDSkZr/8pOvcpikPDWxNM1c=
Subject key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2D15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:12 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 4781
IP: 203.65.192.0/19
IP: 210.63.64.0/18
IP: 210.67.64.0/19
IP: 210.241.128.0/19
IP: 211.73.192.0/18
IP: 2403:9f00::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11541 (0x2d15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:1a:68:8c:5d:e5:5b:3f:5e:60:61:ac:22:
cc:78:25:76:d7:a7:00:2a:e4:75:10:ae:bc:09:82:
51:78:02:a9:88:32:98:7a:d6:c1:12:61:39:ff:bc:
2a:9f:78:de:a5:21:1c:7e:f6:c6:ec:9d:ac:0b:08:
ba:fd:6c:4f:e9:50:39:85:7a:77:cb:8f:4c:a8:bc:
68:c7:7d:89:28:a6:e9:83:9a:34:ab:c7:41:2e:b3:
a5:c0:77:3d:01:87:ed:56:8f:27:89:56:88:ce:72:
d5:d0:87:d0:48:7e:8f:ff:67:d5:05:19:f1:96:0d:
9c:f9:46:13:58:48:98:d7:9c:c9:75:42:36:17:31:
19:99:a7:dd:5d:5b:6b:eb:2d:4f:b2:1c:a5:5a:1c:
e6:ca:72:c3:13:04:4b:2d:90:79:81:25:fa:02:7b:
0e:57:65:24:35:d2:5a:30:f7:eb:58:e9:40:63:d6:
e8:e4:a6:2b:87:1b:cc:11:e0:d7:22:78:53:7d:5a:
4b:cc:26:f9:57:26:42:05:46:ab:38:5f:64:eb:8a:
44:bc:b7:21:b6:21:a2:9f:ff:60:94:fa:72:05:b4:
69:f2:39:b3:8e:f9:86:7c:a2:15:63:b9:b1:77:97:
5c:b5:af:6d:cf:8f:bb:91:29:55:5f:eb:d0:5c:88:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4781
sbgp-ipAddrBlock: critical
IPv4:
203.65.192.0/19
210.63.64.0/18
210.67.64.0/19
210.241.128.0/19
211.73.192.0/18
IPv6:
2403:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
05:3d:ca:f0:3a:77:80:31:05:63:be:ab:e7:be:34:d0:49:ff:
02:f8:52:f8:a4:a4:94:b2:ce:42:09:f2:a7:d1:92:8d:56:33:
c1:ad:5c:26:9e:44:9e:15:a1:c3:05:df:e6:33:28:a4:60:b2:
b5:2a:05:ae:d8:53:60:30:ce:ff:ee:4b:58:3d:50:56:b6:69:
a2:e3:c0:f3:7b:92:db:ac:45:82:b0:14:53:b9:9b:f0:0c:2d:
31:dc:de:40:35:1e:18:91:30:ce:1e:ba:64:ff:7a:10:34:55:
01:0b:5b:cf:38:99:04:a7:c2:3d:55:e7:8d:7c:5b:c2:d1:b4:
97:ef:20:02:f2:a7:9e:1b:e0:57:f8:74:fd:97:bc:8e:3d:bf:
0d:7b:3b:42:57:a1:e5:60:de:71:0c:9f:fe:93:86:9f:ac:e4:
5a:38:6c:63:ab:3e:13:2c:5c:23:d4:54:a4:89:87:62:61:1f:
8d:a8:c2:23:9c:1a:55:30:d7:c1:3a:21:5d:22:10:ed:67:6c:
3f:72:c9:a2:18:4e:2f:c0:0d:8f:a6:1a:98:ef:dd:0f:3e:38:
f7:7f:2d:1b:f0:c2:74:4e:0e:53:19:5e:2a:78:70:e3:ee:36:
33:9b:1b:8e:e4:9d:a6:15:7e:5b:3f:ba:9f:b3:a6:7e:b6:f9:
41:7a:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org