Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Ut75M0f2lyKg8Q9hezeAc6fUeDc.cer
File: Ut75M0f2lyKg8Q9hezeAc6fUeDc.cer (raw, json)
Hash identifier: +/0wyNaNgu6uLzgxLUTrfLYO0NoS+DTa8Uy6n2oPaNg=
Subject key identifier: 52:DE:F9:33:47:F6:97:22:A0:F1:0F:61:7B:37:80:73:A7:D4:78:37
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 1A08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 29 Sep 2020 09:53:37 +0000
Certificate not after: Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources: IP: 103.130.80.0/22
IP: 2403:b5c0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6664 (0x1a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 29 09:53:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=52DEF93347F69722A0F10F617B378073A7D47837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:9e:5f:02:75:20:99:26:73:e2:2c:a9:57:
1c:ec:ec:64:12:20:d3:42:aa:7e:1f:b3:19:d3:2f:
a9:d2:f5:38:62:a6:07:c1:dd:ad:93:5d:d2:e7:58:
79:b1:a3:f4:9d:8c:40:fe:0e:8a:dd:e1:35:73:b8:
05:26:3a:7a:d6:db:ac:14:5c:a8:02:6c:70:b4:72:
5d:65:eb:7d:2a:e1:7e:5c:0e:e5:5f:c2:70:c7:8e:
71:2d:3e:ef:5a:3a:ec:ae:6b:7c:f2:9e:45:bf:41:
90:88:84:46:83:d2:5f:73:3a:c6:2b:4a:4a:82:93:
5b:75:eb:a0:14:96:ed:88:56:46:9a:60:05:66:e3:
ef:6f:ab:0f:86:f8:3f:ae:4f:20:d5:50:54:25:df:
ea:8a:c6:37:0f:32:83:a5:dc:a9:2c:24:f8:52:2e:
72:80:c4:00:2e:e8:57:a5:40:40:cd:ed:82:9f:a5:
3d:1a:12:bf:c1:8d:66:84:17:84:0e:b6:fa:05:6a:
25:1d:4d:d7:53:2a:0b:59:c6:81:38:54:67:a8:2e:
8c:00:72:4f:18:1d:51:ea:92:51:0a:fb:41:9b:91:
84:36:c7:7a:6b:89:a6:2a:bb:ce:f7:bf:fb:9d:97:
15:3c:40:fa:05:4a:30:77:d7:9e:ac:8b:c2:96:ab:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DE:F9:33:47:F6:97:22:A0:F1:0F:61:7B:37:80:73:A7:D4:78:37
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.80.0/22
IPv6:
2403:b5c0::/32
Signature Algorithm: sha256WithRSAEncryption
91:01:b8:f3:64:c7:47:ac:56:9e:24:54:26:3a:c1:d3:44:02:
c1:aa:c2:8e:1e:c5:05:4a:b3:3e:2e:21:ff:c0:bd:d2:35:49:
2f:f3:b9:f4:f4:f9:0f:b5:fb:80:e0:b1:fc:25:21:f8:60:c6:
51:42:c9:19:09:e0:8e:95:92:52:28:fd:d1:a3:b0:9f:ed:c4:
55:1f:95:3a:19:98:7b:44:c5:cb:73:2b:1b:12:ce:51:b7:ef:
bd:78:b0:cc:8a:ca:7b:9f:0d:c1:4a:8d:cf:79:a4:99:f8:da:
6e:0c:bd:0d:d4:7e:0f:23:f4:fc:6d:88:1d:69:4b:1a:b7:72:
ea:8d:d4:a5:aa:67:35:9e:10:9f:81:30:7f:71:46:52:06:a2:
99:63:4d:c6:27:03:10:14:fe:08:14:6b:d6:97:24:b6:12:66:
3a:20:86:8e:74:94:b6:32:bc:04:4d:a8:78:6f:47:96:d4:f9:
6f:ad:1e:05:32:e8:0c:38:66:74:a1:06:ab:7a:84:5d:a7:b3:
4c:fd:1a:9f:be:8b:6e:ba:34:8c:00:0f:28:78:10:f4:90:d6:
01:4a:b3:22:88:d3:21:8f:59:bf:eb:76:be:bc:e6:36:3e:5c:
39:f9:83:9a:bf:fd:d9:76:2f:f4:9c:ec:ff:40:cb:79:de:d8:
0b:d0:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org