Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer
File:                     dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer (raw, json)
Hash identifier:          pPdk/klJrS8TIWCmulWFejP7UNID/LLcahgizJji5Uw=
Subject key identifier:   76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2E1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:23 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.189.108.0/23
                          IP: 2400:8560::/32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11803 (0x2e1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:23 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:09:ca:7b:d2:56:22:bd:15:e1:77:69:5b:
                    61:e9:06:ba:8b:f2:f4:65:d8:de:49:79:0d:eb:b6:
                    0d:fd:e8:b9:66:e3:c6:67:99:9f:2a:39:f6:3d:6b:
                    42:09:f0:0c:a2:47:f1:7a:9e:60:aa:1f:72:73:94:
                    78:ab:ce:88:4a:48:a3:4c:df:2f:f8:2d:e6:bd:67:
                    4e:17:91:6f:a4:e1:b8:96:23:d9:78:01:57:30:9a:
                    e9:0e:e0:f9:2e:13:a3:64:75:6e:fd:5d:e1:ec:d4:
                    57:ac:00:1b:30:17:63:39:b7:37:5c:f7:34:60:31:
                    75:8f:9f:39:c1:af:0c:2d:25:25:11:6b:42:09:3b:
                    b8:42:33:17:98:ea:d5:1d:da:85:5f:3e:ce:1b:42:
                    a0:8a:64:2b:bb:86:79:a5:3d:32:fc:42:b1:d3:a9:
                    57:93:59:4a:21:98:31:05:13:36:30:6d:41:7a:6e:
                    db:4c:1f:eb:7b:d9:bd:87:28:06:ab:3d:96:26:97:
                    78:73:29:52:a8:86:f4:d0:92:20:0f:33:e4:2b:f3:
                    41:95:01:43:71:a1:4b:c5:93:3b:6b:6c:98:4a:82:
                    94:20:b6:f0:44:75:43:6d:b9:64:6a:6d:ff:bc:10:
                    a8:ed:a3:1b:49:85:2a:dc:27:1e:48:b9:49:a8:94:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.108.0/23
                IPv6:
                  2400:8560::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:0c:37:7b:a7:21:7f:8e:3e:c7:ae:70:cc:eb:6a:06:da:
         85:56:dc:85:85:0a:ba:ce:6b:06:f0:08:e7:7c:6d:81:2c:a4:
         c0:22:0d:8d:59:0f:9f:1e:69:41:53:b0:28:95:84:d0:37:74:
         ec:98:72:21:96:08:12:b1:c0:fb:a8:24:24:70:c7:b2:3f:80:
         5c:ff:11:61:af:00:25:fb:cf:8b:aa:ba:88:cd:d7:36:18:f7:
         1e:91:1f:e2:8f:05:b7:d9:05:37:41:5e:6e:07:33:86:2d:a6:
         fb:da:c8:1e:6a:56:98:9b:18:3b:af:f1:8c:e2:6d:3c:4b:5b:
         1e:05:67:1b:0e:6f:39:20:29:89:a9:a6:41:87:2f:89:f2:ce:
         f3:8a:d7:c7:84:ad:a2:a7:e0:04:41:e1:18:a3:0c:1b:69:60:
         77:d2:53:a7:6a:04:e9:0c:2f:72:96:35:77:3f:92:2c:5b:3c:
         23:bf:62:4b:17:63:54:ac:b6:20:b0:13:06:b0:94:71:b8:d4:
         ad:8f:b7:e3:42:6b:64:f3:6e:7b:0b:bd:34:2b:ad:9f:ad:6c:
         04:2b:d2:d8:5a:75:a5:d2:55:6f:1e:c1:92:7b:5e:9e:0c:59:
         74:87:f4:7c:01:aa:bc:7e:30:ab:0f:ef:23:0e:a1:f5:1c:af:
         83:6f:a3:f2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgICLhswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcyM1oXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoNzY2MzdFRUJFRkVGNzBDNTM4Q0VBRERDRjk4NDhGQUE3OUM3MzZB
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKpLCcp70lYivRXhd2lb
YekGuovy9GXY3kl5Deu2Df3ouWbjxmeZnyo59j1rQgnwDKJH8XqeYKofcnOUeKvO
iEpIo0zfL/gt5r1nTheRb6ThuJYj2XgBVzCa6Q7g+S4To2R1bv1d4ezUV6wAGzAX
Yzm3N1z3NGAxdY+fOcGvDC0lJRFrQgk7uEIzF5jq1R3ahV8+zhtCoIpkK7uGeaU9
MvxCsdOpV5NZSiGYMQUTNjBtQXpu20wf63vZvYcoBqs9liaXeHMpUqiG9NCSIA8z
5CvzQZUBQ3GhS8WTO2tsmEqClCC28ER1Q225ZGpt/7wQqO2jG0mFKtwnHki5SaiU
V4kCAwEAAaOCAmUwggJhMB0GA1UdDgQWBBR2Y37r7+9wxTjOrdz5hI+qecc2pTAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF
hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVOR1RX
LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL01BSUZFTkdUVy9kbU4tNi1fdmNNVTR6cTNjLVlTUHFubkhOcVUubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ71sMA0EAgACMAcDBQAkAIVg
MA0GCSqGSIb3DQEBCwUAA4IBAQAvgQw3e6chf44+x65wzOtqBtqFVtyFhQq6zmsG
8AjnfG2BLKTAIg2NWQ+fHmlBU7AolYTQN3TsmHIhlggSscD7qCQkcMeyP4Bc/xFh
rwAl+8+LqrqIzdc2GPcekR/ijwW32QU3QV5uBzOGLab72sgealaYmxg7r/GM4m08
S1seBWcbDm85ICmJqaZBhy+J8s7zitfHhK2ip+AEQeEYowwbaWB30lOnagTpDC9y
ljV3P5IsWzwjv2JLF2NUrLYgsBMGsJRxuNStj7fjQmtk8257C700K62frWwEK9LY
WnWl0lVvHsGSe16eDFl0h/R8Aaq8fjCrD+8jDqH1HK+Db6Py
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:44 2024 by rpki-client on console-fra.rpki-client.org