Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer
File: fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer (raw, json)
Hash identifier: 07BJkQAOSuC7kpKXf9z2H07GhcFkgaL/faV0YMitgsk=
Subject key identifier: 7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2E8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:28 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131678
IP: 103.149.66.0/23
IP: 2405:e540::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11915 (0x2e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:5b:4a:0c:b5:56:51:61:e8:7d:73:5b:83:
60:7d:bb:18:55:bd:c8:ef:42:d8:d6:c1:0d:5e:af:
5f:4e:ab:f2:67:79:8b:08:ed:6b:52:69:ea:01:09:
a4:f4:90:84:ed:91:54:de:b3:55:af:ff:6f:3d:d5:
39:4e:54:b8:78:fb:ad:9d:a5:6c:8f:c2:b7:99:2c:
55:ea:26:57:79:f7:e8:d1:da:fe:e5:e3:5f:b6:c0:
90:56:55:7d:97:29:93:23:58:6d:2a:eb:fa:98:a4:
35:5a:4e:8d:4c:4f:8d:d7:d4:8b:0c:1a:8f:6b:50:
33:f6:00:6f:06:85:1a:82:43:9a:46:28:7e:12:d0:
c3:c7:a4:80:11:b2:d8:f4:98:4c:7e:58:ac:c4:a1:
cf:34:81:53:e6:76:20:5e:57:39:21:a2:54:0d:a4:
98:b9:ad:76:1c:f5:cb:1b:e4:3f:af:14:ac:99:45:
5c:33:87:b7:50:24:e4:1d:63:3a:ac:61:19:42:24:
e8:02:9a:db:11:05:80:32:6e:36:c4:8d:a2:5b:f0:
17:a6:f0:33:fe:04:c2:03:e3:c7:e8:ff:30:66:6a:
fe:84:0c:2a:84:79:1f:03:99:c5:28:89:59:5b:2e:
7d:d5:56:4c:3a:b2:70:07:86:d8:20:7c:ce:1c:59:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131678
sbgp-ipAddrBlock: critical
IPv4:
103.149.66.0/23
IPv6:
2405:e540::/32
Signature Algorithm: sha256WithRSAEncryption
79:89:c2:6f:87:09:0c:51:00:ff:37:8e:61:1e:18:30:76:9a:
ca:d6:07:56:3e:a3:1b:18:1e:85:42:61:99:ae:7f:a3:0f:82:
5c:f9:bd:43:44:1b:92:a4:76:32:cf:ce:59:30:54:46:83:a9:
e5:f3:35:e0:eb:9f:3e:4f:57:62:ee:88:0f:af:cd:69:95:3b:
d9:da:02:b7:9f:c1:61:bf:11:51:5f:37:2e:1c:34:3c:f7:6d:
41:5d:e4:34:52:a1:68:e7:ae:ae:09:4c:08:95:11:fd:55:07:
87:e6:7e:aa:fa:91:4b:94:5d:7c:ab:32:0c:35:98:b0:20:a2:
75:bb:67:78:41:58:0d:da:df:e0:e0:b9:21:03:da:98:bc:ca:
60:6c:35:a7:70:f1:84:bd:25:89:39:1e:f7:15:5d:85:2d:d6:
94:8a:01:41:0e:d4:f6:9e:9b:5a:a6:cc:71:33:b7:ea:64:1c:
62:13:ac:e6:d1:e9:7e:f3:ab:1e:7b:72:b5:73:79:9c:0e:e8:
88:95:8d:02:b6:80:ba:20:92:c0:55:32:a7:4b:5c:a1:3d:ad:
df:3e:f8:39:3d:80:18:62:f5:d3:7a:50:18:27:30:c1:3d:01:
a3:31:00:a4:d2:60:dd:87:04:06:fe:2a:25:ca:f4:e9:dc:3c:
95:f9:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:44 2024 by rpki-client on console-fra.rpki-client.org