Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer
File: i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer (raw, json)
Hash identifier: ksdcOMbmducJ3e3gTghNhjIsF+rLYdQwbbjNSk9DhuY=
Subject key identifier: 8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2E3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:25 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131618
IP: 103.103.80.0/22
IP: 2403:84c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11837 (0x2e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:25 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:01:46:0e:25:5f:d6:42:f3:c7:58:7f:92:
18:1d:a6:57:5e:37:5e:6b:7a:be:35:2c:1d:ad:0f:
f7:1c:d9:43:bd:a3:57:31:cb:67:b1:f5:b8:6e:db:
52:cb:3c:29:3a:ee:88:d9:61:70:eb:6b:b6:a4:21:
cf:84:68:5f:bb:10:3b:58:d4:1c:b5:51:9f:ad:02:
fa:e7:1b:3d:a6:59:8e:d3:2f:bc:6c:a8:41:db:b9:
a4:81:fb:87:29:39:40:ee:cb:24:80:2e:dd:94:d2:
61:5b:0b:a2:cb:ee:b9:b6:53:17:c3:1c:fa:6f:e9:
4a:50:e9:56:f0:3c:32:65:d8:89:9f:c8:ef:82:59:
ac:8a:00:f7:76:dc:23:73:c8:d5:44:35:56:f1:f3:
7d:a2:1b:27:e4:a9:df:19:f0:03:cd:a9:c2:27:94:
14:7c:38:00:fd:2d:cd:88:48:4a:d3:b9:64:a8:a3:
ff:73:24:f9:7d:6b:34:a1:87:d5:12:95:0e:83:7a:
d9:d4:a9:23:65:39:35:06:e7:00:db:2a:4a:29:71:
e5:32:4b:db:e9:3c:f0:eb:f0:0c:45:a2:13:35:fb:
5d:95:f9:f6:e1:70:f5:b2:4c:03:60:d6:0e:94:5c:
cc:13:ad:6b:6a:29:00:97:66:cd:1b:20:a0:8d:9d:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131618
sbgp-ipAddrBlock: critical
IPv4:
103.103.80.0/22
IPv6:
2403:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
47:91:83:42:2e:11:c2:e8:0d:7b:fd:51:3f:3f:43:fb:54:b8:
c1:84:1d:43:b2:80:db:8d:6e:7a:93:42:41:d9:eb:6c:48:f9:
b2:f1:5c:9d:8b:e2:69:4e:cd:fc:34:88:ca:1c:40:f7:55:6b:
df:fe:f4:8e:cd:33:10:be:40:41:5b:c5:1c:58:34:53:20:d8:
28:b2:3b:ce:e5:61:b2:04:b0:22:0c:ef:48:f3:fc:ee:34:2d:
bf:b1:08:ac:74:dd:8c:50:9d:e1:9a:c5:55:9f:68:6e:b6:1f:
9e:40:34:08:f0:65:66:dc:77:ca:fa:b9:2f:e3:80:85:5b:1d:
d9:84:62:09:24:5b:2a:ba:d2:b6:9e:78:33:57:71:75:ab:27:
17:ae:fb:32:fe:fe:8c:d3:36:e9:6b:d7:8c:4b:c6:6d:25:33:
ff:33:02:2a:06:13:48:96:81:8f:09:95:2a:ac:d1:18:a7:82:
ae:8c:39:28:ee:31:9d:52:d1:a5:6e:e0:f5:58:4b:98:fd:9f:
e0:7a:7e:3f:31:0a:13:cb:ca:09:62:c8:cf:e3:d2:8e:09:88:
63:9e:ca:4e:7c:b5:eb:7e:d5:f0:95:aa:0e:d4:4f:a3:a2:fa:
0b:4d:2a:26:44:72:5c:ee:37:e4:ef:db:47:37:d0:24:6a:16:
f8:00:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:44 2024 by rpki-client on console-fra.rpki-client.org