Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
File: gFHy7O_CQumvnx5FSk-3llkbjas.cer (raw, json)
Hash identifier: VmgCt/OVMyDbyOnJStv6SQgw2gvCZ/Ds3MiYhmHi1A8=
Subject key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2D17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:12 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 9922
IP: 103.130.48.0/22
IP: 2403:b340::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11543 (0x2d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:4e:78:05:19:eb:c4:85:e2:91:73:99:28:
94:a5:1a:ed:a9:2c:54:b0:4e:08:95:b7:fe:a0:25:
e1:5f:f3:d0:40:9e:e7:67:4d:b8:f6:86:ed:d2:45:
20:b4:1d:a9:19:d8:88:37:f6:37:4d:92:e5:68:a4:
48:69:48:93:49:56:1b:00:c9:1a:e4:1b:22:32:6a:
1c:13:de:ec:e9:92:15:01:ec:a1:59:84:bd:ac:ac:
67:01:59:b2:72:1a:64:b8:36:f7:68:20:a6:22:20:
01:b5:ce:de:6e:4d:c2:ed:a6:2f:0a:63:18:f0:6e:
56:06:d2:58:b0:d7:fe:58:c8:02:de:dc:bd:c0:1e:
71:fc:53:12:1d:4e:ea:be:4d:26:18:49:41:06:4e:
42:de:d8:6e:35:b4:f6:d9:22:5e:00:68:95:7e:00:
36:27:55:31:d2:7b:85:b4:38:b5:0b:df:57:e2:30:
34:cf:83:08:5b:91:d2:cb:bb:be:e6:ea:d1:ce:2c:
24:9f:51:7f:ad:83:f4:a9:38:78:25:9d:42:58:e4:
3e:4e:63:06:dd:20:fa:fd:38:0d:c3:fd:5f:8e:51:
b0:6e:ca:1c:1c:fa:af:3c:4d:35:69:91:78:c8:9d:
f8:c9:0f:9f:60:85:bd:46:5d:14:2f:72:95:51:d8:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9922
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
IPv6:
2403:b340::/32
Signature Algorithm: sha256WithRSAEncryption
30:50:89:48:47:fa:66:f3:46:aa:16:7d:7a:1b:4b:d3:4b:21:
82:b7:99:ac:fc:f6:b9:57:62:a3:28:bc:ae:f1:26:39:0a:9d:
fa:87:54:83:64:11:ef:92:67:aa:8a:07:2e:2c:82:64:7c:9b:
65:61:ad:cb:f7:ee:9c:1b:0d:9d:41:f1:9f:8f:fd:47:f0:7b:
69:f4:03:04:ab:bc:5b:52:5e:df:58:e0:a8:b3:fa:fc:a8:30:
05:33:b5:90:99:19:52:7d:fd:26:cc:a7:be:fc:85:15:02:84:
14:a5:6a:5b:6d:d3:f7:45:cb:7f:69:a2:20:5c:cf:f1:6f:58:
4e:7e:0a:2a:63:a2:2a:a3:a5:8f:67:f7:36:d6:6e:da:e9:36:
c1:99:86:66:40:94:1a:59:c5:9a:cc:44:da:55:5b:ce:56:9f:
c7:f3:68:04:77:18:b8:0e:fb:8f:ba:54:3a:11:de:9f:a8:d3:
97:a6:8f:c1:c1:3c:31:da:d9:d4:44:08:a2:e1:90:d7:b9:b0:
5a:7f:ba:15:00:f6:23:d8:ba:b1:92:2b:2b:fc:53:d8:26:01:
76:57:e2:0f:8e:76:1f:06:f7:7f:89:5e:7b:d9:95:c4:93:48:
3a:b8:f6:aa:bb:92:4b:80:a9:83:55:69:83:3f:5b:b8:d8:c9:
eb:d3:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org