Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
File: mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer (raw, json)
Hash identifier: 2Rt/lD8CkcpnpOdV/DI7BgYFv5qyfdTmtIVAY+XV5Cs=
Subject key identifier: 99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 27CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:11 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 131646
IP: 103.161.78.0/23
IP: 2406:fcc0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 19:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10186 (0x27ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=996D67023ED27754ACB1B568433D4376C88200F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:69:d2:b0:03:a5:e6:e1:e2:f3:62:59:69:90:
7b:49:cb:35:d5:b9:21:5f:07:d0:a8:f6:96:37:62:
8e:ba:ff:c4:ed:17:0e:42:da:8d:01:d8:e8:fe:43:
63:ee:cb:a0:65:e9:6f:97:2c:5f:56:bf:04:17:53:
8d:7b:af:8e:a6:f7:cb:09:e0:fa:49:ed:c6:30:8d:
46:2b:d6:73:9d:f7:40:b4:36:c6:ee:61:5d:92:49:
49:49:a9:ac:13:22:a3:15:cf:4a:f7:d4:45:e9:0d:
c0:94:10:96:db:a3:f9:80:2c:6c:05:a0:75:31:6a:
bf:89:e7:a8:a5:53:27:0a:47:87:af:9d:6a:5e:2e:
7b:b8:3d:c2:91:cd:a3:b2:47:c2:35:15:7e:c3:c0:
15:64:4e:01:95:e6:b4:2c:5c:a6:ed:63:36:ec:4b:
25:9d:ee:b5:2c:17:9f:9f:58:68:62:c9:39:68:ff:
9f:c4:19:06:56:16:ef:ac:1f:da:99:64:e3:8e:3f:
25:a1:a4:46:fe:db:81:b6:9f:26:a3:86:26:cc:a0:
e8:8a:87:60:a2:01:58:2f:00:3e:5d:0c:5c:2e:fc:
3f:a8:5d:fa:88:7a:af:1e:fa:41:41:21:19:81:ff:
6e:a1:d8:12:9e:9d:53:57:2f:0f:1e:cd:0b:5f:a4:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131646
sbgp-ipAddrBlock: critical
IPv4:
103.161.78.0/23
IPv6:
2406:fcc0::/32
Signature Algorithm: sha256WithRSAEncryption
43:49:73:d2:29:16:f5:88:e7:cb:f4:62:b1:54:38:a8:14:0f:
89:42:74:cd:45:eb:cb:21:9b:c9:64:8c:7a:c2:68:17:58:2e:
d8:a7:a7:40:93:38:ea:bc:2a:54:4c:89:82:4e:b1:6a:30:19:
6d:ae:af:5e:0c:f7:84:6f:c1:95:70:64:af:9e:a9:b8:11:5d:
53:41:94:62:a9:8a:ad:a9:3a:ab:3e:85:58:2a:0a:28:ab:5f:
f2:e1:06:ca:d7:0d:6e:5b:64:e3:a4:02:43:4e:0a:47:44:57:
23:b7:23:4a:dd:a7:9c:43:e5:4a:ad:34:8f:20:6c:9d:12:f7:
48:fe:d3:0a:03:89:60:0b:e1:f4:70:dc:89:cd:5f:bf:dd:4b:
e2:87:c7:e6:da:e3:ef:66:60:96:f2:f4:7b:d2:74:91:2a:17:
0c:7e:7f:aa:c6:b4:35:f1:e0:51:1a:c7:22:77:66:66:bf:8a:
67:31:ce:ca:c9:66:81:51:fc:f4:67:e0:d2:62:df:fc:a8:ed:
b5:0a:1d:19:8a:12:58:b5:94:0c:c8:1a:e1:6d:b6:6c:6f:1e:
de:8c:09:82:d8:18:e0:4a:5c:7d:92:62:8d:57:59:46:0d:48:
9b:1f:f7:82:3f:53:d1:ff:5d:b7:e5:0a:4d:98:1a:9d:d6:a2:
42:93:96:52
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICJ8owDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExMVoXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoOTk2RDY3MDIzRUQyNzc1NEFDQjFCNTY4NDMzRDQzNzZDODgyMDBG
NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAONp0rADpebh4vNiWWmQ
e0nLNdW5IV8H0Kj2ljdijrr/xO0XDkLajQHY6P5DY+7LoGXpb5csX1a/BBdTjXuv
jqb3ywng+kntxjCNRivWc533QLQ2xu5hXZJJSUmprBMioxXPSvfURekNwJQQltuj
+YAsbAWgdTFqv4nnqKVTJwpHh6+dal4ue7g9wpHNo7JHwjUVfsPAFWROAZXmtCxc
pu1jNuxLJZ3utSwXn59YaGLJOWj/n8QZBlYW76wf2plk444/JaGkRv7bgbafJqOG
Jsyg6IqHYKIBWC8APl0MXC78P6hd+oh6rx76QUEhGYH/bqHYEp6dU1cvDx7NC1+k
8/0CAwEAAaOCAncwggJzMB0GA1UdDgQWBBSZbWcCPtJ3VKyxtWhDPUN2yIIA9TAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF
hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1dUVy8wVQYI
KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9D
V1RXL21XMW5BajdTZDFTc3NiVm9RejFEZHNpQ0FQVS5tZnQwMQYIKwYBBQUHMA2G
JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAgI+MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQB
Z6FOMA0EAgACMAcDBQAkBvzAMA0GCSqGSIb3DQEBCwUAA4IBAQBDSXPSKRb1iOfL
9GKxVDioFA+JQnTNRevLIZvJZIx6wmgXWC7Yp6dAkzjqvCpUTImCTrFqMBltrq9e
DPeEb8GVcGSvnqm4EV1TQZRiqYqtqTqrPoVYKgooq1/y4QbK1w1uW2TjpAJDTgpH
RFcjtyNK3aecQ+VKrTSPIGydEvdI/tMKA4lgC+H0cNyJzV+/3Uvih8fm2uPvZmCW
8vR70nSRKhcMfn+qxrQ18eBRGscid2Zmv4pnMc7KyWaBUfz0Z+DSYt/8qO21Ch0Z
ihJYtZQMyBrhbbZsbx7ejAmC2BjgSlx9kmKNV1lGDUibH/eCP1PR/1235QpNmBqd
1qJCk5ZS
-----END CERTIFICATE-----
Generated at Tue May 21 23:31:17 2024 by rpki-client on console-ams.rpki-client.org