Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
File: hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer (raw, json)
Hash identifier: IyhUahs6SJQgAnRp3FrajPEvUO4GPG6aQg4+vH/4vG8=
Subject key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 287C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:21 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 131638
IP: 103.133.152.0/22
IP: 2404:4fc0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10364 (0x287c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:d3:e1:24:30:a9:0b:db:02:5d:b2:bd:e4:
4b:43:b2:4c:ad:1c:40:41:4e:ee:05:89:2c:7d:b7:
34:20:36:83:3c:91:60:dc:20:fc:59:1b:1a:ca:11:
ed:78:5c:3a:5b:fe:e1:67:f9:63:41:75:77:e5:e3:
29:af:b1:e8:d4:78:38:01:11:c6:0d:1a:b4:fb:21:
19:9b:57:13:19:0a:87:6c:93:11:ad:89:6d:e4:91:
4f:6b:47:5c:e5:01:45:44:e4:d9:90:e3:e9:0c:dd:
64:e4:8f:e3:e2:53:d8:db:69:ab:b0:2a:d9:1e:0f:
2c:2f:f8:aa:73:96:b7:27:c3:40:1d:4b:92:ab:92:
d1:4f:24:00:f5:16:3b:a0:f8:26:cf:65:17:c6:72:
7c:8b:47:9b:64:a1:4a:0d:b1:20:ba:24:c8:de:f0:
db:74:a8:79:61:99:90:5f:78:24:f5:7a:e7:66:08:
2d:fe:a6:a1:7c:14:27:07:dd:16:05:e1:f2:9f:12:
b4:14:35:58:d8:64:f6:69:15:68:66:6a:a3:ae:da:
45:28:51:da:e2:15:45:76:36:86:0e:86:6f:ff:48:
f3:58:67:38:c6:d3:de:29:43:46:3c:05:a2:3a:43:
f7:fd:1e:3e:ef:d0:3a:d3:55:14:36:91:a0:d6:47:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131638
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/22
IPv6:
2404:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
39:d2:55:6c:c3:6f:68:38:4d:61:80:d6:88:2f:24:e4:9c:0f:
d8:2f:79:d9:1c:0c:ac:c1:4e:aa:bb:f3:0b:8f:48:36:eb:5c:
97:f5:be:1a:5a:1d:8d:3d:b0:27:05:12:8f:5d:28:d8:e9:f0:
e9:61:d5:1b:2d:68:62:f3:4c:62:28:1b:5a:79:70:8d:da:9e:
fe:67:2b:38:5d:41:00:45:3f:65:c5:56:f1:f2:dc:e9:c1:0f:
bb:9e:f2:fa:98:fb:09:65:12:d4:d3:a1:5c:c3:81:13:bd:0d:
59:f2:47:b3:37:0a:29:59:52:71:88:d0:ba:3e:af:56:4d:8e:
6e:08:a2:36:67:aa:72:4b:a2:ee:13:2f:8e:3c:49:5d:32:f6:
62:b3:c8:f0:80:73:4c:33:72:7b:3c:76:58:7e:8a:a3:08:b7:
e1:01:96:74:f1:f4:34:4c:ff:76:66:0e:d4:fe:da:25:c3:16:
30:c5:1f:28:42:4f:74:18:f5:0c:f2:ee:05:a6:e8:71:52:56:
7e:a6:61:80:38:1b:0a:e0:af:b7:ec:21:69:91:a4:12:f2:9f:
4a:1c:a5:4a:6d:ad:d8:b4:1e:f3:1e:82:bd:68:fe:83:ba:fc:
a7:10:25:ce:50:57:83:32:e9:e7:24:3d:b1:61:6b:f3:08:b6:
f7:84:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org