Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/oTNzmX34FAIa-3uu9b2ooJIgo8g.cer
File: oTNzmX34FAIa-3uu9b2ooJIgo8g.cer (raw, json)
Hash identifier: IvwTi4rLXS4nMnMuL5vCnhlC3yJ5Wkow+M7AXksDLqI=
Subject key identifier: A1:33:73:99:7D:F8:14:02:1A:FB:7B:AE:F5:BD:A8:A0:92:20:A3:C8
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 281A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/oTNzmX34FAIa-3uu9b2ooJIgo8g.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:15 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: IP: 103.122.208.0/22
IP: 2403:94c0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10266 (0x281a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A13373997DF814021AFB7BAEF5BDA8A09220A3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:48:7b:6d:05:f7:b1:09:44:aa:ba:3f:d2:
e9:f4:42:62:2d:b8:ec:56:57:ef:5b:5b:82:2a:42:
bb:b0:c2:61:a2:d3:26:94:e8:2a:55:cc:69:cb:04:
be:14:eb:41:83:43:73:ee:af:4a:70:85:fe:33:2d:
d1:0a:80:aa:ae:81:18:f8:f0:65:3d:5b:d2:97:97:
22:16:01:75:13:f8:84:44:f6:28:c4:bc:d6:44:a1:
94:4b:59:bf:50:c9:a5:93:20:fe:47:f6:39:de:a6:
3c:93:1b:25:6f:85:57:98:b6:21:17:50:8f:38:57:
9b:2c:c8:1f:d8:d4:83:f5:6d:99:99:9a:8f:98:3e:
bc:00:c0:a4:d2:c6:28:a6:25:fa:28:cd:b1:0c:c1:
2b:0e:cb:9a:33:04:45:e1:85:1d:66:3c:29:e1:a4:
b9:cf:c0:96:80:6c:c5:88:42:0a:16:91:77:c1:0d:
5d:5e:93:cb:69:96:df:58:42:72:16:26:45:94:aa:
46:df:8a:00:e6:1c:19:26:fd:27:9c:c7:b2:b5:ee:
50:9c:90:0d:74:4b:dc:7d:cc:28:63:43:f2:d4:22:
4e:a2:b1:ec:0f:27:3a:17:70:73:14:e0:97:53:8d:
dd:24:3a:15:5a:16:5e:2c:81:3b:9e:9f:7d:2a:02:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:73:99:7D:F8:14:02:1A:FB:7B:AE:F5:BD:A8:A0:92:20:A3:C8
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HANSTRONG/oTNzmX34FAIa-3uu9b2ooJIgo8g.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.208.0/22
IPv6:
2403:94c0::/32
Signature Algorithm: sha256WithRSAEncryption
46:56:2b:c9:85:d0:73:5a:67:b3:a5:53:10:1a:fa:1e:c8:23:
3a:13:db:a7:ea:ab:0d:d0:7e:41:83:e7:db:58:23:72:11:7e:
53:c0:c3:3e:2d:cc:9c:89:1d:7b:bf:1f:e2:ac:48:81:ba:15:
56:23:0c:c6:79:a5:cf:26:86:2a:98:cb:99:21:aa:f4:76:a5:
f4:66:e0:ff:ca:c3:0b:10:ba:c7:a9:7b:03:24:2a:60:7f:42:
88:ef:22:a2:44:7a:d6:5e:ef:c7:8b:ce:82:b8:48:b2:66:85:
09:39:f3:ba:13:bd:a9:f9:75:09:3a:91:11:dc:7d:bf:dd:27:
2d:4e:f5:7e:33:0e:da:86:18:f9:4e:33:e5:e2:69:21:4e:3f:
45:e0:62:b7:1e:64:9f:87:3d:0f:c2:71:d6:0a:e6:90:a6:b8:
94:15:e9:ce:ba:2d:76:a5:da:a3:d9:08:d3:1e:5e:5e:6d:bb:
88:6e:e5:85:0c:9e:50:a4:cf:a5:90:bc:b3:43:7e:89:df:72:
7e:64:e9:89:7d:9d:45:54:3f:77:da:8f:4c:a1:6f:1f:85:a1:
aa:6b:ce:b1:31:f3:c1:84:c9:48:47:57:ce:1c:10:69:95:72:
e3:b6:25:1f:6e:87:ab:7e:f2:15:0b:12:a4:de:9e:6c:ce:22:
f0:c5:cf:c0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgICKBowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTExNVoXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoQTEzMzczOTk3REY4MTQwMjFBRkI3QkFFRjVCREE4QTA5MjIwQTND
ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALIsSHttBfexCUSquj/S
6fRCYi247FZX71tbgipCu7DCYaLTJpToKlXMacsEvhTrQYNDc+6vSnCF/jMt0QqA
qq6BGPjwZT1b0peXIhYBdRP4hET2KMS81kShlEtZv1DJpZMg/kf2Od6mPJMbJW+F
V5i2IRdQjzhXmyzIH9jUg/VtmZmaj5g+vADApNLGKKYl+ijNsQzBKw7LmjMEReGF
HWY8KeGkuc/AloBsxYhCChaRd8ENXV6Ty2mW31hCchYmRZSqRt+KAOYcGSb9J5zH
srXuUJyQDXRL3H3MKGND8tQiTqKx7A8nOhdwcxTgl1ON3SQ6FVoWXiyBO56ffSoC
f60CAwEAAaOCAmUwggJhMB0GA1UdDgQWBBShM3OZffgUAhr7e671vaigkiCjyDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF
hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFOU1RST05H
LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0hBTlNUUk9ORy9vVE56bVgzNEZBSWEtM3V1OWIyb29KSWdvOGcubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3rQMA0EAgACMAcDBQAkA5TA
MA0GCSqGSIb3DQEBCwUAA4IBAQBGVivJhdBzWmezpVMQGvoeyCM6E9un6qsN0H5B
g+fbWCNyEX5TwMM+LcyciR17vx/irEiBuhVWIwzGeaXPJoYqmMuZIar0dqX0ZuD/
ysMLELrHqXsDJCpgf0KI7yKiRHrWXu/Hi86CuEiyZoUJOfO6E72p+XUJOpER3H2/
3SctTvV+Mw7ahhj5TjPl4mkhTj9F4GK3HmSfhz0PwnHWCuaQpriUFenOui12pdqj
2QjTHl5ebbuIbuWFDJ5QpM+lkLyzQ36J33J+ZOmJfZ1FVD932o9MoW8fhaGqa86x
MfPBhMlIR1fOHBBplXLjtiUfboerfvIVCxKk3p5sziLwxc/A
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org