Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VE_PyyrJVPJAIqnCanfCOo6OGGg.cer
File: VE_PyyrJVPJAIqnCanfCOo6OGGg.cer (raw, json)
Hash identifier: oK6e5ykATCQXPSZIkc1VahSTfWOHNqvly0f98Hz1IvU=
Subject key identifier: 54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 1904
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 29 Sep 2020 09:53:24 +0000
Certificate not after: Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources: IP: 103.135.64.0/22
IP: 2404:7640::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6404 (0x1904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 29 09:53:24 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=544FCFCB2AC954F24022A9C26A77C23A8E8E1868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:93:67:d5:a9:70:d9:85:92:94:c5:f2:d8:a8:
67:b2:72:32:1b:60:07:14:11:89:f9:f6:0e:26:8b:
c2:35:af:23:67:2c:44:c2:e9:27:c4:76:a8:ab:59:
2d:35:c5:2a:79:ec:cb:f6:1a:a8:bf:70:3e:ae:bc:
19:81:e4:91:66:5a:3a:08:ca:6a:1e:26:c9:2f:7f:
a1:d3:b5:90:66:9e:8b:34:f3:fb:fc:9a:95:94:cd:
e2:68:b8:27:99:c6:c3:93:b2:01:86:33:20:1e:3e:
1b:43:cf:42:ed:e0:30:f2:f2:99:4c:08:47:99:e3:
ae:5d:cd:56:45:5d:df:bd:f5:16:42:52:9b:5e:08:
ea:ea:c1:83:7e:4a:6d:35:21:8a:c6:56:72:09:7d:
29:a7:43:49:d8:76:90:98:36:25:cc:1f:fc:1b:a4:
70:1b:52:47:1c:f6:34:48:58:64:49:24:c0:dc:16:
34:15:da:31:b5:71:af:8c:7b:20:d3:d7:be:25:94:
c8:e1:80:11:76:51:71:99:bc:03:b1:96:9e:f5:5e:
8d:8f:08:9a:d3:31:cd:f0:5f:42:a1:a7:5a:92:dc:
23:0b:28:ba:3d:68:e9:6a:08:66:99:05:70:36:b3:
35:cf:5b:8d:20:2d:73:3c:50:4a:07:5b:b3:17:74:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.64.0/22
IPv6:
2404:7640::/32
Signature Algorithm: sha256WithRSAEncryption
35:3a:2e:30:5b:98:26:cf:0a:5e:b1:98:1e:7a:08:f6:f6:98:
7b:ee:a9:53:83:65:8f:71:7d:4d:a0:68:1b:b0:9a:1b:f6:97:
74:d7:bc:63:02:99:4d:28:95:09:1b:65:e0:eb:c8:eb:2f:5e:
67:69:19:8b:b7:02:1d:31:33:64:c7:3a:cb:4a:c1:e3:ef:d2:
06:8d:a3:3f:9f:49:39:e4:cb:23:ab:86:a9:5c:b4:65:62:fb:
5c:5d:33:24:6e:fd:7d:da:f8:95:43:74:8c:6b:c6:7a:61:cc:
e9:0c:e8:de:e4:f8:23:58:70:a1:3c:30:91:9b:8e:52:13:74:
e9:6b:ef:c8:c8:2d:91:49:7b:cd:88:a3:da:23:8f:17:43:b8:
9e:66:64:80:37:43:75:3f:58:25:c3:ed:3a:be:dd:a6:6b:73:
8a:9e:68:7e:86:ad:a4:36:57:35:d3:4a:b6:c1:18:bd:8b:38:
6a:88:75:d0:fe:9d:2a:95:a0:9f:85:21:ea:5c:7d:f9:42:46:
c4:a2:53:11:d3:48:a0:c6:6f:50:d7:9d:75:bc:66:d6:2e:0e:
ed:85:97:51:5c:8d:34:3a:eb:52:56:47:18:14:8e:7d:b2:43:
aa:5f:75:04:e2:91:ee:c5:a9:63:94:0f:24:50:d2:c7:a8:ed:
28:24:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org