Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer
File:                     iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer (raw, json)
Hash identifier:          6uR+IUiZTDCpD3Fo5yUQIaPl7xl8I4glWkmD86FB8Ws=
Subject key identifier:   88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2D07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/iFbqVUmi9B2EfNhqRgtQJsFKbuM.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:11 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 63894
                          IP: 103.162.84.0/23
                          IP: 2407:1440::/32

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11527 (0x2d07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:11 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8856EA5549A2F41D847CD86A460B5026C14A6EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:01:82:7a:f5:8f:df:02:3a:b3:15:05:41:8a:
                    6f:c6:18:8c:f4:6f:8d:ba:f6:be:8c:8d:01:51:f1:
                    60:48:a8:2f:2b:28:9b:a5:22:18:d4:48:46:46:17:
                    39:ef:ea:8e:12:5c:48:70:5f:97:45:82:62:84:04:
                    32:2a:2b:7a:c3:76:60:59:fa:71:b8:0e:a7:b2:23:
                    b6:16:bd:e4:e3:9c:bb:4e:4e:e1:e5:ca:8b:29:b7:
                    89:f8:46:d5:c6:45:2c:17:71:49:aa:19:bb:44:89:
                    1f:6c:5a:c4:45:eb:13:1b:8d:7c:d8:4e:48:ce:2a:
                    f0:7e:fc:b6:a0:43:d3:40:49:52:5f:ba:f2:53:6a:
                    29:c8:2e:9a:2c:89:0f:69:a5:b3:71:d8:0c:9a:fa:
                    74:16:1f:f6:8c:60:1e:85:25:8f:91:b7:2c:55:4a:
                    7f:bc:d0:fc:fa:21:1e:11:07:09:21:10:39:b9:15:
                    b4:76:37:f4:f6:7e:e6:5c:44:ae:0c:c3:76:dd:e2:
                    4d:7c:83:b8:8b:2f:b4:be:3a:00:b4:1d:41:ee:63:
                    e1:08:3d:1f:94:57:e9:6e:eb:7a:71:0c:32:d5:ad:
                    f0:78:61:a3:e2:c8:6c:5d:6f:06:a5:c7:d9:ae:a5:
                    d8:13:45:42:79:33:93:d8:5a:fc:17:46:4c:45:af:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/iFbqVUmi9B2EfNhqRgtQJsFKbuM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63894

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.84.0/23
                IPv6:
                  2407:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:c8:eb:21:87:96:ae:dd:8a:df:a0:7e:b6:9f:e9:2a:8c:32:
         52:7a:27:8c:ba:4a:a6:88:af:6c:1c:fd:f8:2c:b2:37:bf:7d:
         0b:2a:08:e3:59:fa:4a:f4:45:0f:bf:51:79:16:75:79:34:d7:
         35:01:9e:19:77:02:30:3c:fa:83:2f:b1:ca:b0:2e:ef:e4:ca:
         c3:5f:f7:4e:59:fa:96:3e:6b:f5:4e:9c:c0:74:ad:97:b1:65:
         5d:9d:c3:09:e5:3b:0b:81:a6:22:3f:d6:66:36:66:83:75:1e:
         94:cf:3a:d6:8d:15:21:f6:02:b4:96:6d:39:23:4a:17:5d:67:
         43:bb:9d:fb:82:d5:54:9d:c3:38:89:43:f0:f2:8e:8b:7d:35:
         3f:2a:03:db:47:a5:7e:d1:9b:a4:26:f5:7b:d0:ca:8e:65:76:
         f7:24:67:c4:18:27:bc:68:f6:8c:ed:10:c8:0c:ab:34:70:f8:
         87:d2:22:e9:c8:9e:f7:15:45:a8:0f:ae:2b:b8:4f:7b:96:56:
         74:2d:e1:73:da:eb:37:63:f2:2f:ef:19:24:05:5d:37:06:b9:
         b9:85:f6:3a:64:48:ec:01:f0:db:8a:2e:f6:62:b5:de:8c:df:
         f2:f6:a7:1a:d4:4e:44:76:57:09:6a:50:dd:59:48:b1:a0:71:
         be:2d:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org