Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer
File: nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer (raw, json)
Hash identifier: 0nSRuUa91RFn2leTeYhynDjqbOYWcim0WHlJTbc6POU=
Subject key identifier: 9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2A52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 31 Oct 2023 07:12:57 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: IP: 2403:b040::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10834 (0x2a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Oct 31 07:12:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9EEBB531831504906C0086DB42969683D64BBAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:22:7b:05:fa:4b:73:55:5e:23:6c:4e:54:
de:f8:b9:f2:e9:be:bb:c0:38:cc:c1:6b:c8:c0:f4:
24:94:5e:eb:af:6b:41:22:e0:4a:9e:b0:31:46:9c:
65:aa:4f:75:9c:14:89:d3:e3:7e:ab:bb:85:56:23:
16:b0:a1:76:85:46:d2:83:b8:28:e0:3a:b7:fb:38:
c4:a9:35:1b:d1:ae:13:74:b7:33:29:20:23:bd:86:
6e:ef:ef:29:f4:d7:1b:0d:07:61:ff:35:d8:6e:94:
05:7c:79:04:32:b5:4c:6d:3a:ad:39:d8:4e:d3:7e:
91:ac:d1:e3:6b:3b:b7:36:3e:e5:24:56:9b:a2:e7:
e6:3b:c0:1b:ab:66:a1:10:6d:75:96:05:bd:b4:28:
97:e7:45:6d:d9:a5:4e:fa:76:21:92:e8:dd:37:c8:
4d:eb:09:2b:d5:78:f5:b7:7b:6f:c8:80:20:cf:23:
3b:34:72:bc:63:8a:53:35:1c:7c:99:5b:05:c7:a3:
69:96:39:c7:4c:c7:e0:6f:1e:d8:3f:64:0a:db:ba:
db:da:c8:cd:2a:af:f4:f6:78:b3:dc:98:db:8e:cf:
82:c5:42:3a:a4:96:51:00:b6:f2:73:b2:65:d8:85:
97:b4:50:20:ca:d1:5c:3b:41:b1:81:4f:70:59:4f:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:b040::/32
Signature Algorithm: sha256WithRSAEncryption
71:aa:71:37:93:4e:a3:54:2b:b1:14:50:b3:eb:81:b7:c4:89:
bd:10:02:02:2d:4a:ee:e0:12:f0:48:b4:e1:13:b8:00:6c:1c:
b2:c2:0b:97:db:70:f2:7c:4b:31:3a:a0:41:b7:b2:83:04:d0:
d5:8b:74:6e:d2:13:ef:8e:c6:1b:ef:48:22:14:28:91:9f:bd:
dd:ea:4d:26:bd:90:9d:07:ba:58:44:fd:9d:3c:47:80:a2:d4:
2b:a7:e5:a1:ee:f3:24:9c:1b:ab:6d:d0:45:da:cf:d7:32:1d:
8e:7c:cb:42:92:c0:96:57:bd:57:61:97:48:44:3c:69:32:15:
1b:51:84:35:47:96:26:15:6c:ed:3f:0d:34:ba:c5:3f:f2:01:
ac:5b:6e:e0:23:01:79:6e:26:eb:01:ff:d0:6c:76:50:5a:ec:
58:7d:10:40:e9:45:01:84:c6:9b:aa:65:03:f9:eb:84:57:d5:
e8:33:d2:24:f3:b0:47:de:08:ae:a7:34:39:91:82:69:aa:b8:
5f:3f:20:14:f6:c4:0e:29:07:df:f4:72:c1:62:e8:7a:fd:4e:
0a:f0:a4:92:4a:2a:e3:e9:60:35:27:c8:d9:13:14:a5:32:4d:
56:38:6b:ce:24:14:43:cb:64:04:0f:b6:c2:41:3d:90:ff:9f:
0b:57:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org