Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WHT2opJK4yTm2DFLXY4d3nlsjBw.cer
File: WHT2opJK4yTm2DFLXY4d3nlsjBw.cer (raw, json)
Hash identifier: 6qrzzOuTN7mSVxWl26qzCeUSAqNni9G7u7E8Xd4HEXI=
Subject key identifier: 58:74:F6:A2:92:4A:E3:24:E6:D8:31:4B:5D:8E:1D:DE:79:6C:8C:1C
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 23FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/WHT2opJK4yTm2DFLXY4d3nlsjBw.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 06 Sep 2022 03:05:06 +0000
Certificate not after: Wed 06 Sep 2023 03:00:35 +0000
Subordinate resources: IP: 103.142.152.0/23
IP: 2405:3b40::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9215 (0x23ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 6 03:05:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5874F6A2924AE324E6D8314B5D8E1DDE796C8C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:79:e6:a7:5c:fe:24:6d:01:94:07:8b:d2:
6c:c1:c4:dd:29:f8:14:b6:3a:ab:33:c9:f7:50:83:
04:d7:74:2c:b0:10:b0:3e:2c:1b:96:ed:95:9a:25:
d8:7f:54:85:ea:bb:a4:cd:9b:88:97:01:25:1a:ac:
c4:9b:d8:c5:42:9f:22:be:4a:42:0f:6f:4e:be:36:
bf:6e:d2:b1:30:ca:98:c2:cd:95:ba:df:3a:89:bb:
a6:ea:28:a2:6a:3b:e3:a4:39:56:8f:01:5e:c6:ed:
dc:02:fd:f2:eb:73:8a:b0:82:aa:48:d3:7f:24:1b:
79:65:b2:7e:ff:fe:61:8d:e5:a8:f7:38:5e:de:f1:
3f:d7:10:e4:58:72:48:bf:a9:e7:97:d1:9a:b8:a3:
25:3e:1e:98:1a:89:34:9b:a3:25:e1:de:f3:51:6e:
58:a5:57:0e:a0:af:01:3b:be:1d:1f:7d:e7:3c:66:
74:98:c3:40:09:0e:fb:e4:39:97:be:09:3d:19:e8:
34:b5:15:a4:dc:c5:4a:30:0d:0f:c5:6c:4d:3d:18:
09:f4:31:f1:c6:9c:b2:f9:c2:5c:12:02:73:1a:f7:
ac:93:b0:60:5d:ee:bb:28:9f:74:fc:51:79:6f:0e:
c6:6d:89:f8:f2:ee:ea:77:ae:c6:33:f7:09:4c:57:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:F6:A2:92:4A:E3:24:E6:D8:31:4B:5D:8E:1D:DE:79:6C:8C:1C
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/WHT2opJK4yTm2DFLXY4d3nlsjBw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.152.0/23
IPv6:
2405:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
36:a2:0f:a1:82:6c:a8:ce:d3:98:c3:f2:cc:fb:1f:95:dc:61:
e3:6e:bd:91:f9:2d:ae:73:76:d7:38:c6:98:1d:88:1c:84:38:
a2:08:1e:70:11:f0:f6:8c:37:f4:d5:25:44:9a:86:00:2b:dc:
67:87:3c:69:3f:dd:9d:1d:ae:09:e6:96:0d:4e:0f:2d:a8:2e:
c7:1c:22:20:9c:9f:c8:7f:5b:62:7a:08:9e:fd:f0:49:77:3a:
7d:37:d2:00:cc:7d:7f:37:b4:66:25:74:c0:17:fc:db:d2:34:
d8:f4:71:14:a1:fd:aa:06:82:ca:69:48:4b:ec:9c:94:aa:c6:
88:2e:2a:dc:c5:59:7a:92:bf:c5:ab:8b:81:fb:12:da:85:a9:
6d:7a:3f:23:9f:85:78:9c:f9:74:0d:a0:ae:02:0d:98:b0:1d:
b4:70:16:cd:48:8a:59:8c:e4:20:f2:0d:0e:4d:1e:36:15:4c:
9c:59:bb:05:5a:5c:66:75:e6:bf:4c:47:78:fb:87:04:8d:57:
1b:c0:d4:f5:ae:73:73:04:7c:e1:36:bc:12:e3:39:48:d1:b6:
f6:d9:34:04:99:a7:92:bc:54:40:5f:65:83:f0:f5:42:41:d6:
08:ec:d7:95:41:86:dc:86:1e:dc:9d:56:3c:73:b8:31:fe:8e:
10:13:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org