Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer
File: eVcHbim_wWSO_3GjmLqsSp6IaCA.cer (raw, json)
Hash identifier: giYJ+UtVMnc+JtO6VvJCobJo9zcmR0oyoDM2ypP/aog=
Subject key identifier: 79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2EC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:31 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131626
IP: 103.118.24.0/22
IP: 2403:f3c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11971 (0x2ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:31 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7957076E29BFC1648EFF71A398BAAC4A9E886820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:34:ae:16:6a:65:44:71:9e:d0:ed:c1:f0:
33:3f:2d:0c:45:a9:91:38:1f:ce:bb:30:67:01:80:
3c:30:7b:9b:32:41:53:2a:4f:42:ac:45:3a:70:24:
19:a6:2c:a5:fb:00:5d:2e:b5:4c:72:5f:bc:b2:3f:
a9:ab:dd:8d:04:60:9d:ee:f1:14:42:b8:ab:58:d9:
1e:cf:78:ca:20:6e:ec:b9:09:c2:25:21:d0:9a:df:
7a:6f:eb:92:e1:71:25:e5:13:6f:85:cc:95:42:a1:
7a:6b:33:77:fe:35:33:0e:ca:92:b2:ba:76:85:82:
54:14:95:37:8a:e2:80:38:54:71:12:64:bb:68:a0:
2f:f9:0f:70:99:96:71:1f:18:8b:dc:08:a7:11:39:
84:1c:7a:4f:2e:c5:4e:c8:ab:c3:5b:07:69:9a:82:
42:3f:c7:16:1b:f6:47:f9:9f:cd:57:56:a6:6e:d9:
98:09:40:99:9f:67:da:dd:12:b0:8c:99:4d:d0:d7:
ba:dd:9e:23:88:76:8b:1a:ca:73:aa:88:d8:14:1b:
fd:d8:f2:66:94:1b:72:74:3a:09:88:23:05:13:e2:
ae:67:4d:f0:e1:ef:4a:0d:ec:ae:09:81:ef:21:58:
f8:3c:86:ee:ec:b4:92:3f:dd:f2:26:12:ad:9b:ad:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131626
sbgp-ipAddrBlock: critical
IPv4:
103.118.24.0/22
IPv6:
2403:f3c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:67:4d:9f:5d:c6:7a:48:3d:4c:69:6c:3d:6d:3d:35:99:06:
1f:62:44:a4:51:82:7f:ee:e4:c7:2b:ea:4c:f2:44:46:ea:10:
d6:51:7d:d7:53:fa:e0:22:38:0a:f7:95:dd:d1:5e:62:9c:e1:
3f:05:ac:8b:02:c0:75:d2:c9:22:c0:55:e1:a8:37:78:0b:5e:
7f:54:57:10:64:80:8c:ba:58:b7:d2:60:53:e6:22:18:0e:43:
0a:54:1a:80:4a:33:9e:87:5c:80:2f:bd:ab:7d:aa:b7:98:32:
5f:be:df:08:44:44:45:ac:8f:da:05:1b:77:a5:e6:27:8e:06:
8f:5f:d5:5f:a5:a7:b8:76:75:93:7f:5f:7d:be:b4:ca:9f:07:
08:57:61:c4:ae:76:02:00:28:06:6f:6c:42:5e:42:22:99:ae:
59:71:a9:d1:58:1c:f8:c3:5d:3e:ed:02:c4:1c:53:2f:d6:f0:
c1:bd:6e:06:08:23:a7:d7:bd:4f:73:f7:c7:a3:b3:81:7b:78:
1a:69:d9:9a:56:7a:a5:d5:b0:0e:6d:34:25:9f:0c:f5:1a:5d:
c1:f6:35:7b:c7:24:45:4a:69:c2:22:22:a8:d3:84:3f:a7:69:
3a:09:32:2e:fe:ba:27:42:a8:56:48:bd:c1:e9:2c:e5:8e:d6:
2c:45:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:44 2024 by rpki-client on console-fra.rpki-client.org