Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer
File: eVcHbim_wWSO_3GjmLqsSp6IaCA.cer (raw, json)
Hash identifier: SjqHYyeOOkD+pjLDof8LnnTs4+94EqgVshkUqd5e8KM=
Subject key identifier: 79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 290E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:28 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 131626
IP: 103.118.24.0/22
IP: 2403:f3c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 May 2024 07:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10510 (0x290e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7957076E29BFC1648EFF71A398BAAC4A9E886820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:34:ae:16:6a:65:44:71:9e:d0:ed:c1:f0:
33:3f:2d:0c:45:a9:91:38:1f:ce:bb:30:67:01:80:
3c:30:7b:9b:32:41:53:2a:4f:42:ac:45:3a:70:24:
19:a6:2c:a5:fb:00:5d:2e:b5:4c:72:5f:bc:b2:3f:
a9:ab:dd:8d:04:60:9d:ee:f1:14:42:b8:ab:58:d9:
1e:cf:78:ca:20:6e:ec:b9:09:c2:25:21:d0:9a:df:
7a:6f:eb:92:e1:71:25:e5:13:6f:85:cc:95:42:a1:
7a:6b:33:77:fe:35:33:0e:ca:92:b2:ba:76:85:82:
54:14:95:37:8a:e2:80:38:54:71:12:64:bb:68:a0:
2f:f9:0f:70:99:96:71:1f:18:8b:dc:08:a7:11:39:
84:1c:7a:4f:2e:c5:4e:c8:ab:c3:5b:07:69:9a:82:
42:3f:c7:16:1b:f6:47:f9:9f:cd:57:56:a6:6e:d9:
98:09:40:99:9f:67:da:dd:12:b0:8c:99:4d:d0:d7:
ba:dd:9e:23:88:76:8b:1a:ca:73:aa:88:d8:14:1b:
fd:d8:f2:66:94:1b:72:74:3a:09:88:23:05:13:e2:
ae:67:4d:f0:e1:ef:4a:0d:ec:ae:09:81:ef:21:58:
f8:3c:86:ee:ec:b4:92:3f:dd:f2:26:12:ad:9b:ad:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131626
sbgp-ipAddrBlock: critical
IPv4:
103.118.24.0/22
IPv6:
2403:f3c0::/32
Signature Algorithm: sha256WithRSAEncryption
62:87:c4:6a:f5:16:d7:d9:e4:96:8d:68:c6:ad:b2:60:de:2b:
06:b4:f2:db:01:84:e0:d5:54:1f:e9:7a:79:71:c5:49:4d:4b:
57:4c:ba:e4:41:b5:67:5d:92:9f:8c:6e:10:a1:33:a5:16:16:
34:99:1f:45:fa:3f:93:39:35:6a:ad:f1:55:8a:74:a1:01:28:
23:37:11:fe:40:ee:45:65:2a:83:0d:38:e7:ec:f8:9e:ba:c8:
04:ca:6d:f1:81:33:56:15:92:e3:40:1f:a0:b5:79:a0:cb:14:
34:a9:1d:1c:44:1d:7f:ac:b7:80:23:a9:f6:76:a9:60:dd:e5:
71:5c:10:42:c0:97:9c:f6:3f:57:3b:2d:86:86:b7:cf:20:3c:
70:16:45:f9:aa:ff:ef:8a:24:18:db:92:ab:68:65:b4:ba:bb:
df:c1:7b:43:eb:f3:e0:2e:6c:58:1c:04:e6:72:06:17:1f:1d:
bc:0f:48:19:35:da:de:fa:0d:e4:0b:12:ca:13:80:18:fe:df:
1f:35:be:2d:11:5f:f0:18:81:22:a3:dd:46:75:79:40:61:2c:
62:1d:31:73:58:9c:e4:7a:75:e5:56:86:d7:44:a2:d5:a8:f9:
bc:e2:a0:84:7e:33:02:35:81:8c:1d:b1:b7:dd:25:3e:dd:eb:
46:6e:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:28:53 2024 by rpki-client on console-ams.rpki-client.org