Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
File:                     XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer (raw, json)
Hash identifier:          9v02OXmU7itupaoX1KqVDx1J1wOT/tVHvyDBjD4y298=
Subject key identifier:   5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2F3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:37 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 131644

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12093 (0x2f3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:37 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:46:41:84:26:be:9c:03:7f:4d:c2:59:03:
                    00:d3:9d:1f:67:8b:82:16:86:16:d8:25:25:a4:f8:
                    e4:e8:9b:7d:d1:a7:be:c7:6e:de:85:05:ec:61:c8:
                    66:01:1e:28:e2:0a:c2:af:ca:c4:3e:76:5b:af:d4:
                    a8:07:19:91:3a:e1:aa:12:e6:f4:01:20:24:34:36:
                    25:8b:a1:08:4b:1d:41:be:f7:0f:61:8a:6e:03:01:
                    fc:4f:c9:65:ec:63:b1:23:0f:6f:4a:e5:32:81:d6:
                    19:10:d4:07:7b:f3:88:22:2c:0f:80:cc:73:4f:33:
                    8b:ff:3e:92:a4:30:2e:5f:c8:ac:7c:94:1e:73:d9:
                    05:0e:6d:84:93:66:55:cd:38:d2:1e:56:79:b3:a7:
                    aa:11:7c:a8:cd:22:d9:49:09:ed:37:a9:9b:16:c9:
                    fc:b6:a3:31:7b:a3:4d:d2:e9:09:5b:65:44:5e:dd:
                    f7:79:7b:e1:7b:71:0f:f6:98:10:3f:bb:2c:28:14:
                    5e:aa:f4:d0:48:24:1c:16:8d:2f:0b:65:07:a3:65:
                    e0:08:01:58:9d:6b:4c:6f:51:8e:6b:f4:11:a8:fe:
                    90:41:12:1d:52:38:e6:ab:92:46:63:b5:9e:35:01:
                    83:e2:b0:f8:b2:2d:2e:05:29:7f:89:91:cf:05:4e:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131644

    Signature Algorithm: sha256WithRSAEncryption
         80:72:0b:c1:f3:8c:f4:12:fb:cd:90:5d:ea:f5:0e:37:c4:8d:
         fe:e1:7a:5d:13:03:82:0d:13:30:db:1e:c4:25:ae:82:3a:3a:
         02:13:06:f8:5f:40:e4:28:5b:ca:86:36:f0:2b:15:5b:32:05:
         6c:6b:08:f9:7e:a0:a5:47:01:cc:53:e1:57:23:a1:27:79:ed:
         33:2b:9d:25:02:38:82:30:84:76:19:b1:8b:ee:ca:cb:45:c3:
         1f:ec:d6:55:4a:ea:bc:ca:e1:5b:f5:6b:43:fb:22:f9:7c:f2:
         ae:dc:cf:ec:04:2d:c6:b8:79:07:cd:6b:a6:6c:80:77:0a:e5:
         d5:74:f7:e1:bd:bd:5a:61:2e:f6:9a:39:10:14:5c:33:7d:2b:
         12:97:5e:08:15:98:b4:4f:06:5c:60:f4:7f:f2:aa:4a:94:db:
         0c:d3:29:d7:34:f5:61:06:16:f3:bf:d2:8f:58:b2:fb:6f:b2:
         b7:da:14:42:27:a5:19:2d:5b:30:62:9f:f8:8f:2d:14:d3:36:
         9e:5a:10:df:a6:92:e0:8b:21:fd:0f:55:74:7c:48:15:c4:ed:
         f1:ba:05:b8:ce:28:fb:f0:41:7f:ac:90:0b:b5:ca:cb:58:c3:
         33:ac:dc:cf:b7:e0:da:78:a4:45:53:15:59:12:fe:10:c6:96:
         34:a3:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:43 2024 by rpki-client on console-fra.rpki-client.org