Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
File: df5TxhG0_Vaz9oMZ7spiifPw8qk.cer (raw, json)
Hash identifier: UaL2pPlyDgKML8cuarOgLUcTDSGtFRVmcE3t9mMfjPg=
Subject key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2D63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:15 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 4782
IP: 61.56.0.0/20
IP: 61.57.32.0/19
IP: 61.60.0.0/17
IP: 61.67.64.0/19
IP: 117.56.0.0/16
IP: 124.199.64.0 -- 124.199.111.255
IP: 163.29.0.0/16
IP: 210.69.0.0/16
IP: 210.241.0.0/17
IP: 211.79.128.0/18
IP: 223.200.0.0/16
IP: 2001:4420::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11619 (0x2d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:15 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:2c:bb:26:c9:8c:69:f1:36:ae:8f:3e:70:
f3:bd:d9:a6:7b:bd:38:f3:59:81:fc:9b:0d:9c:f3:
3b:45:ad:0f:c7:86:b1:dc:69:1b:0f:fb:f7:be:82:
24:af:6e:d8:ef:9c:b2:81:4d:63:ff:b2:27:13:27:
75:3b:c8:a1:fe:a4:ed:26:0f:d1:1f:a3:33:9d:2a:
31:a0:84:4a:03:2e:50:21:53:16:79:0f:8d:16:b4:
72:b2:61:77:e5:7e:8b:78:a2:88:ae:ae:59:a0:03:
c5:48:21:1a:ee:af:57:3d:d5:7d:8d:50:d6:20:dc:
a3:f2:34:a2:b4:72:41:25:ae:7e:b2:f2:f9:81:14:
5b:46:9e:9e:d8:ae:d4:79:29:2c:1e:15:25:ed:58:
ce:a2:b3:2d:be:16:49:73:37:0b:31:e7:d7:7c:88:
77:1e:17:48:80:81:f2:26:e4:28:62:c3:df:2b:70:
7b:e2:49:4b:91:b2:0a:72:54:80:a9:b1:46:f6:ea:
8d:47:e0:53:7c:44:9d:cb:1a:3a:04:94:3b:a2:ee:
c9:39:bc:6b:25:ed:75:8e:a6:58:07:7d:2a:0f:a3:
35:3a:af:e2:75:6e:4a:4a:45:aa:c5:3b:08:16:d8:
c2:c1:1c:7e:3e:c8:88:88:a5:44:b6:b5:b3:61:1b:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4782
sbgp-ipAddrBlock: critical
IPv4:
61.56.0.0/20
61.57.32.0/19
61.60.0.0/17
61.67.64.0/19
117.56.0.0/16
124.199.64.0-124.199.111.255
163.29.0.0/16
210.69.0.0/16
210.241.0.0/17
211.79.128.0/18
223.200.0.0/16
IPv6:
2001:4420::/32
Signature Algorithm: sha256WithRSAEncryption
76:c1:19:e4:9b:68:a6:8e:1b:e6:6c:7e:d3:bc:93:5f:48:43:
0c:4a:dd:b3:aa:ff:f3:91:a4:6c:9a:69:7c:a1:e1:59:d2:00:
37:91:eb:d9:1c:84:c5:ad:91:4f:ce:da:f3:42:71:01:01:75:
97:9a:bc:8f:46:37:5b:e9:c6:22:83:76:a6:25:0d:7a:69:38:
37:6d:06:b0:46:94:07:3c:5b:7e:66:ad:e0:ef:ab:a6:2d:cd:
41:32:c4:34:7c:e1:50:6c:1c:50:13:ea:d8:79:b3:a8:e8:a1:
d8:90:29:06:d4:36:2a:8d:42:f3:1f:e8:1d:ed:cd:c9:de:3a:
35:a7:77:da:42:c4:80:61:f8:71:4d:13:40:c0:f7:50:93:fd:
8c:ca:31:aa:87:19:27:35:19:34:79:90:94:a7:20:91:9c:e2:
de:f0:b1:00:ee:32:8a:b1:16:bb:49:84:76:f4:6a:31:a9:2f:
40:23:6e:bf:19:06:6e:d8:94:37:b3:cc:f6:11:85:1d:0c:54:
d9:a9:11:0d:41:a4:de:1b:25:29:fc:4e:d4:54:cc:c1:5d:3d:
28:1c:33:71:01:39:07:dc:db:e4:f2:e0:7e:c4:32:06:d6:e8:
27:88:d9:4b:16:70:42:53:05:43:f4:67:51:3f:2c:1e:05:58:
16:76:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:44 2024 by rpki-client on console-fra.rpki-client.org