Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
File:                     bWxcv87Lp5h5UREtqhh__LYgTiY.cer (raw, json)
Hash identifier:          zF83r1YlWmYC6H6EUHB7rgi7Trrg3h9mhUqJtgieb0M=
Subject key identifier:   6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2E13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:23 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 18179
                          IP: 103.16.244.0/22
                          IP: 103.20.176.0/22
                          IP: 211.78.240.0/20
                          IP: 2404:db00::/32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11795 (0x2e13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:23 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:bc:26:e1:21:dc:41:0d:90:2f:21:6f:c9:
                    62:76:84:5a:d8:26:6b:5f:f7:d4:4e:33:76:ef:e3:
                    67:3c:c4:3d:32:2f:86:87:13:69:d6:09:b4:18:b7:
                    e5:18:fb:f4:2f:f1:fb:2e:5b:b4:67:e9:2d:b0:a0:
                    f1:89:83:8b:4b:75:94:d2:e7:fa:da:06:1f:03:f5:
                    cf:af:ac:98:92:b4:7c:98:44:b9:eb:4b:5d:06:56:
                    4b:b5:00:03:1d:41:26:db:96:0e:06:fa:0e:56:8d:
                    bb:56:e8:b5:0b:e3:62:78:f1:d9:2d:4a:6f:36:19:
                    c6:8f:91:54:af:4b:02:08:a6:d3:7d:50:ce:d2:66:
                    70:c6:a8:43:31:dc:77:4b:98:53:9a:ad:5d:ee:14:
                    f4:f3:81:04:c3:ca:57:29:30:62:a9:53:a2:b7:8c:
                    ae:05:de:30:56:56:8b:44:d4:42:ff:b7:a0:2c:11:
                    e5:d9:3e:3c:51:69:97:95:c1:e3:12:51:93:7f:74:
                    76:de:40:a9:03:96:6b:f1:55:0e:83:fa:4d:b0:25:
                    e4:5d:80:2d:60:dc:e0:cd:42:39:87:92:93:3d:95:
                    70:cc:a1:75:2d:fb:7b:14:a9:bc:4e:f0:1f:b5:be:
                    62:44:ff:ab:09:7e:dd:da:a3:13:88:a7:8a:db:5c:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18179

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.244.0/22
                  103.20.176.0/22
                  211.78.240.0/20
                IPv6:
                  2404:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:0b:d5:99:d2:a4:f0:79:1e:ce:5d:c0:2f:e3:70:c5:9b:
         89:d5:bd:a4:a9:09:b1:c8:35:a9:a5:ee:2e:0b:b5:dd:df:6d:
         d7:80:46:12:ab:a9:b8:8a:f0:e4:bc:c3:c4:91:b9:d8:8a:9b:
         5f:cc:d1:92:5b:12:57:e6:38:24:5a:1f:0f:89:94:4d:f8:8e:
         69:cb:9a:0d:c5:f1:27:09:2d:d7:4a:0c:8e:8a:8a:2a:f7:7c:
         a9:de:6b:53:33:6c:cf:87:12:d5:60:4b:ac:1e:21:0a:86:93:
         93:e9:78:cf:f4:3a:53:62:11:00:f0:f0:1b:b2:f2:df:c7:b6:
         78:25:fd:fe:3f:1c:58:23:ef:06:41:34:f2:5a:ee:07:d8:1b:
         7f:48:99:34:fa:66:e9:25:51:77:b9:5e:cd:a8:25:55:b8:bb:
         36:95:43:29:22:9c:36:6e:38:b8:c5:f8:66:9c:1d:28:b9:7d:
         94:ad:d5:e8:be:e2:f0:b6:31:95:55:a9:02:f2:43:c1:22:50:
         78:ef:e2:7a:17:d4:bf:02:4b:d6:46:9b:83:4a:43:7c:26:b2:
         79:6c:cb:76:5f:12:de:6a:ec:47:9d:6e:e7:ff:74:30:f6:f7:
         f2:ba:39:6f:45:99:4e:06:62:ae:ba:2b:56:ea:89:92:38:e7:
         71:da:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org