Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer
File: Z3gr2kgldGOtzabXLy7kG1_ZShE.cer (raw, json)
Hash identifier: wq3WLsmOjZ1Xoe88GkA17qSsaPIVEVuXxHLaeoVdLHA=
Subject key identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 341F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:28:59 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 2404:a3c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13343 (0x341f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:28:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:8e:93:25:fe:d6:3d:b4:77:b0:8d:40:a1:
4d:ec:05:52:a0:ce:be:7f:94:75:ad:8d:88:ef:49:
9b:dc:e1:cf:7e:89:06:e0:6f:db:14:b2:87:ff:fd:
a0:2f:fb:8c:a5:f5:19:9d:2b:89:27:1a:d6:c3:39:
c1:e1:46:78:dd:a6:82:c8:8f:69:c2:c2:85:25:88:
5e:78:7b:22:55:04:bb:44:70:86:50:07:51:62:81:
d8:33:35:aa:50:17:2c:4b:85:f1:4f:09:3f:49:a4:
62:36:cd:a8:dc:c6:0b:5d:8b:7c:d4:c9:06:3a:85:
c7:a4:da:3b:c3:29:57:e3:39:37:d2:0a:94:61:5e:
28:34:f3:ac:97:7e:43:72:dc:8c:e0:38:2b:4f:34:
ad:6a:ab:cc:fe:df:0d:b9:ac:1d:14:1a:f6:8f:98:
9f:a9:1c:5a:f4:77:65:51:7b:bb:d2:89:dd:c0:c6:
21:7e:a2:56:22:06:35:a2:63:87:0e:d7:08:79:d8:
6d:22:37:7b:72:7f:cf:1e:d3:8e:be:01:17:61:22:
91:fa:99:bb:02:e2:f2:29:33:60:80:18:47:03:6f:
46:9b:1c:f3:e0:d9:08:8d:a7:a6:6e:6e:70:71:98:
2e:ad:67:43:e9:83:e9:9f:65:80:18:c6:09:6c:a7:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:a3c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:d5:bf:fa:37:bc:33:7b:14:71:45:71:a0:91:e4:b8:da:67:
c2:42:c4:90:53:5c:7a:7a:48:ac:ac:ac:fa:3e:06:ac:87:11:
b7:03:5a:de:97:1e:39:f3:15:4b:69:99:18:6e:0c:41:a7:79:
66:17:31:ee:67:7b:f3:cb:dc:2d:7a:2e:c9:88:c6:21:b3:c0:
5a:67:02:5d:1e:85:fa:5d:e6:47:cf:9e:4b:79:fd:4f:75:a5:
a8:0b:f5:da:23:bd:26:2e:e3:74:0c:57:1c:1c:e5:31:1f:96:
15:52:e8:5d:8e:38:09:1e:ed:7b:e6:29:a9:f4:09:7c:55:6c:
ff:d5:17:0d:f6:26:c3:6a:53:05:f7:70:0d:f6:06:01:52:b3:
ef:27:b2:39:18:45:2e:5d:35:6b:8f:e9:11:f6:f5:52:e1:63:
fb:85:af:34:f8:97:6b:9c:93:dd:61:6f:54:e4:1d:0f:70:1c:
a3:c1:0e:0b:a0:e3:50:7c:e0:a7:54:ed:bd:91:a2:f4:d7:e0:
13:16:a4:69:9b:05:89:07:b7:e1:52:4a:ef:f3:0e:40:58:22:
71:8b:37:03:2b:4e:06:a7:2b:73:c2:d5:8e:27:ec:37:e2:f7:
b4:e8:57:4b:bb:2a:aa:bb:13:40:f9:46:46:cd:aa:7e:6d:4c:
20:00:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:43 2025 by rpki-client