Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pVqvXtxylqkxqO56YkI0XZ7GjR0.cer
File: pVqvXtxylqkxqO56YkI0XZ7GjR0.cer (raw, json)
Hash identifier: liXddx9eTFCz3LV4UgDV8uEz2ufTlfenW7KCz8gy2nw=
Subject key identifier: A5:5A:AF:5E:DC:72:96:A9:31:A8:EE:7A:62:42:34:5D:9E:C6:8D:1D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 199E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 29 Sep 2020 09:53:32 +0000
Certificate not after: Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources: IP: 103.124.76.0/22
IP: 2403:db40::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6558 (0x199e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 29 09:53:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A55AAF5EDC7296A931A8EE7A6242345D9EC68D1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:34:98:75:8b:d9:90:18:03:f2:8a:c0:9d:
8a:f6:0e:50:dc:8a:3f:d5:12:0d:91:38:a3:7f:e3:
8c:d7:b6:13:aa:f0:2d:e7:84:28:76:ad:27:d7:f6:
8a:49:c5:21:e0:c0:db:aa:35:68:46:31:27:4a:fe:
a5:18:47:b5:1b:b3:a6:b6:45:76:ee:b8:e8:19:1f:
bc:ff:7b:0c:11:85:4b:a1:01:57:90:33:ae:0a:81:
16:b8:e2:29:22:57:a9:f5:e7:d5:ad:5b:be:f9:ea:
b9:82:87:ef:6d:af:c2:31:ab:8d:98:6b:15:f2:91:
56:74:5f:c6:c8:2b:84:dd:9d:30:93:59:e2:82:4b:
4a:3c:b5:62:15:8a:c8:18:5e:b9:12:6a:ac:40:81:
cc:04:68:27:ae:44:b7:88:7b:bc:4a:f5:10:80:4b:
f6:37:54:d5:bf:44:25:0c:b7:3c:10:8a:e5:78:33:
a3:67:8b:af:4c:00:62:b9:88:23:9b:36:e2:46:0b:
16:50:0f:89:6e:35:37:db:2a:41:b1:1b:db:27:22:
f2:94:09:d8:49:4b:d9:82:ad:d9:c3:4b:13:cb:9a:
37:4b:a9:17:54:b5:e4:da:f5:12:86:68:1b:f2:b3:
03:3e:96:a9:51:df:ec:9f:0d:a2:de:7a:6a:10:2e:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:AF:5E:DC:72:96:A9:31:A8:EE:7A:62:42:34:5D:9E:C6:8D:1D
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.76.0/22
IPv6:
2403:db40::/32
Signature Algorithm: sha256WithRSAEncryption
87:85:91:4f:4d:6c:cf:b9:22:80:45:df:01:bb:a0:5b:58:63:
ae:35:4b:65:80:0f:45:ab:af:3a:c6:7a:dc:67:68:6d:d1:1c:
a1:d3:23:6e:7b:3c:ba:dd:f7:93:dc:ce:ec:85:b5:16:39:8a:
38:11:03:45:dc:33:6e:a0:f2:ea:87:cc:dc:03:bc:69:1b:d8:
a6:58:ba:d2:c7:58:f1:fd:01:39:8a:29:8f:54:e5:84:61:d4:
14:47:02:52:1c:3c:5b:99:82:ed:59:f6:88:20:c1:9c:d3:17:
c9:26:4f:cf:d3:bb:76:eb:f6:71:02:fe:80:1e:30:45:d8:c5:
5e:b7:36:87:fc:56:5b:73:23:8a:fb:8a:0e:3c:65:a3:ac:35:
6a:f2:6c:09:65:38:cc:0c:61:9f:95:15:e0:9c:8a:94:1c:fd:
13:c0:ab:51:fe:6b:70:d7:81:85:a2:17:03:40:a7:9a:29:1d:
47:11:dc:42:14:ce:25:77:9f:3a:09:71:81:1e:48:45:19:3a:
a6:e7:5a:65:5c:83:bf:c0:83:92:df:da:34:db:b0:f1:ba:31:
41:1b:db:08:05:ec:38:00:8c:38:5a:6b:ee:23:22:e0:35:c5:
d0:24:50:73:73:b4:88:20:97:2a:a6:da:73:c2:a3:6a:12:c7:
32:d8:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org