Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
File: df5TxhG0_Vaz9oMZ7spiifPw8qk.cer (raw, json)
Hash identifier: Lz+2v/Ox8usWeYVtVGzCf5tQw/wWxsfHoJoT0clEs/I=
Subject key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2812
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:15 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 4782
IP: 61.56.0.0/20
IP: 61.57.32.0/19
IP: 61.60.0.0/17
IP: 61.67.64.0/19
IP: 117.56.0.0/16
IP: 124.199.64.0 -- 124.199.111.255
IP: 163.29.0.0/16
IP: 210.69.0.0/16
IP: 210.241.0.0/17
IP: 211.79.128.0/18
IP: 223.200.0.0/16
IP: 2001:4420::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 May 2024 07:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10258 (0x2812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:2c:bb:26:c9:8c:69:f1:36:ae:8f:3e:70:
f3:bd:d9:a6:7b:bd:38:f3:59:81:fc:9b:0d:9c:f3:
3b:45:ad:0f:c7:86:b1:dc:69:1b:0f:fb:f7:be:82:
24:af:6e:d8:ef:9c:b2:81:4d:63:ff:b2:27:13:27:
75:3b:c8:a1:fe:a4:ed:26:0f:d1:1f:a3:33:9d:2a:
31:a0:84:4a:03:2e:50:21:53:16:79:0f:8d:16:b4:
72:b2:61:77:e5:7e:8b:78:a2:88:ae:ae:59:a0:03:
c5:48:21:1a:ee:af:57:3d:d5:7d:8d:50:d6:20:dc:
a3:f2:34:a2:b4:72:41:25:ae:7e:b2:f2:f9:81:14:
5b:46:9e:9e:d8:ae:d4:79:29:2c:1e:15:25:ed:58:
ce:a2:b3:2d:be:16:49:73:37:0b:31:e7:d7:7c:88:
77:1e:17:48:80:81:f2:26:e4:28:62:c3:df:2b:70:
7b:e2:49:4b:91:b2:0a:72:54:80:a9:b1:46:f6:ea:
8d:47:e0:53:7c:44:9d:cb:1a:3a:04:94:3b:a2:ee:
c9:39:bc:6b:25:ed:75:8e:a6:58:07:7d:2a:0f:a3:
35:3a:af:e2:75:6e:4a:4a:45:aa:c5:3b:08:16:d8:
c2:c1:1c:7e:3e:c8:88:88:a5:44:b6:b5:b3:61:1b:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4782
sbgp-ipAddrBlock: critical
IPv4:
61.56.0.0/20
61.57.32.0/19
61.60.0.0/17
61.67.64.0/19
117.56.0.0/16
124.199.64.0-124.199.111.255
163.29.0.0/16
210.69.0.0/16
210.241.0.0/17
211.79.128.0/18
223.200.0.0/16
IPv6:
2001:4420::/32
Signature Algorithm: sha256WithRSAEncryption
5d:6d:b1:27:d8:94:c7:7f:6a:fb:09:f8:cc:8e:65:0f:cc:ce:
99:ee:fd:bf:1c:47:17:89:c8:85:ac:06:50:a6:84:49:a9:23:
90:5e:90:42:5f:89:8b:79:aa:3b:ff:bc:cd:89:fd:d0:e6:53:
03:8a:7d:50:7b:f4:3f:d4:a0:c4:5f:74:e6:c4:2e:68:42:fb:
a8:b8:e1:4f:ff:9f:9d:ed:04:ee:78:c6:fe:66:fa:89:13:19:
3e:a0:d9:35:85:0b:04:a0:e4:2d:58:ad:4a:45:8e:fa:e3:40:
be:c5:ac:72:80:b9:3b:04:fc:c4:f8:5f:b9:fa:3f:8c:9b:4d:
d4:7c:cb:f2:3e:22:e1:b9:13:26:45:6f:0e:7c:c1:4e:8d:cf:
c6:eb:2f:48:db:48:ea:17:e2:70:e5:aa:70:a9:81:d1:ff:89:
a6:88:45:bd:cb:f9:22:b8:99:0b:f0:6c:8d:2c:50:c3:4e:33:
fe:ea:78:4a:77:5b:aa:4d:7e:e4:f4:37:b0:74:2e:b8:5d:97:
99:17:05:bb:74:eb:f4:aa:d4:52:00:86:d4:7f:5e:3a:d1:27:
81:e4:43:78:cc:48:5e:d9:2a:25:10:36:3c:08:ae:4c:75:ec:
1d:ad:c1:f4:36:32:85:c3:92:99:22:b4:ab:dc:e7:b3:2c:ef:
9e:63:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:28:52 2024 by rpki-client on console-ams.rpki-client.org