Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
File:                     pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer (download)
Hash identifier:          ZvmQqeJgrq5WodgSLeJom6PjVrggQkEl7Ci0NriFETA=
Subject key identifier:   A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2443
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate valid until:  Wed 06 Sep 2023 03:00:35 +0000
Subordinate resources:
    1: AS: 131662
    2: IP: 103.123.128.0/22
    3: IP: 2403:a2c0::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9283 (0x2443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  6 03:05:48 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:39:a9:f9:a2:6f:cc:c9:57:41:b8:87:65:
                    bd:b3:a3:a1:62:9c:5e:0c:c8:36:6d:70:2c:02:c3:
                    9c:28:a9:7f:41:66:19:c9:1e:2f:9f:25:50:96:08:
                    ba:ac:80:f5:02:fd:90:19:05:37:10:14:4f:a4:55:
                    4d:66:12:8e:82:39:32:9a:9d:00:e0:31:c0:f9:6c:
                    81:92:ae:65:3b:34:18:3e:51:a6:b3:90:bb:a4:3c:
                    f3:0e:1d:bc:27:58:30:11:e2:eb:85:f4:e4:4e:c8:
                    1f:70:d6:f5:d2:99:31:8b:17:3b:95:b0:54:f0:5c:
                    17:6d:b2:b0:2c:bc:83:63:99:07:7e:e6:b5:57:be:
                    73:b4:66:61:77:17:a1:d1:f3:8c:d2:d0:87:42:37:
                    45:49:ab:62:a6:da:1d:3c:f9:33:ae:4d:33:9e:ff:
                    9e:0f:46:c1:54:33:c2:56:da:af:cb:67:0b:e2:2f:
                    23:9f:4b:5e:b6:25:86:f5:08:66:fc:f2:67:0e:59:
                    4f:ef:73:c6:0a:57:a7:a4:b9:d4:ec:df:b2:c3:63:
                    02:c0:c4:97:5c:3e:4b:69:8a:43:a5:aa:e9:b1:96:
                    65:18:cd:b2:7d:ab:fd:47:f9:bb:1e:86:59:5d:b9:
                    20:41:96:ab:53:56:f7:69:91:39:28:2f:e8:f5:2a:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
            X509v3 Authority Key Identifier: 
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access: 
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131662

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.128.0/22
                IPv6:
                  2403:a2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:d3:b1:41:db:b6:0f:24:4d:0a:52:42:71:8a:81:73:af:
         b7:ae:97:bd:ee:17:46:47:6e:54:a4:e1:ec:02:4e:9d:a9:e4:
         14:62:e9:d5:e9:8e:54:07:2a:f7:5d:f5:2b:de:5c:23:99:32:
         ff:c3:be:0f:44:cf:08:0e:49:f8:f4:f9:9d:1a:94:75:d4:e3:
         27:9b:b6:cc:bf:d3:4e:34:a8:b6:fa:2b:30:fd:e3:7d:18:ab:
         25:59:39:0d:37:f3:54:19:6b:8f:04:ae:23:a6:8f:1f:e6:f8:
         33:d2:0e:5c:e7:e5:ef:0d:f7:61:34:c7:eb:a6:4f:d6:cb:fc:
         a1:e6:76:f6:3b:95:c7:49:eb:4f:ab:69:6b:65:2e:1c:b8:9c:
         a1:e6:0d:5f:79:f7:a0:56:51:38:cc:b6:71:b1:b6:69:73:d4:
         26:bf:a5:e6:e0:bd:3e:7b:d9:57:1d:f6:43:f1:f6:10:95:62:
         d8:61:8b:66:df:45:f4:95:17:60:03:43:d2:4e:01:b1:9b:6f:
         ae:aa:b9:5b:ee:8f:24:b6:0c:d0:6c:1e:b6:3b:2d:86:1d:60:
         23:65:4b:b7:79:68:98:50:fe:8d:7a:76:2b:20:f4:1a:09:c4:
         1f:d0:96:b9:78:f4:bc:b9:f3:59:0f:9e:7a:c0:15:46:2f:b7:
         c5:d3:86:81
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgICJEMwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIyMDkwNjAzMDU0OFoXDTIzMDkwNjAzMDAzNVowMzEx
MC8GA1UEAxMoQTZFRDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANh1Oan5om/MyVdBuIdl
vbOjoWKcXgzINm1wLALDnCipf0FmGckeL58lUJYIuqyA9QL9kBkFNxAUT6RVTWYS
joI5MpqdAOAxwPlsgZKuZTs0GD5RprOQu6Q88w4dvCdYMBHi64X05E7IH3DW9dKZ
MYsXO5WwVPBcF22ysCy8g2OZB37mtVe+c7RmYXcXodHzjNLQh0I3RUmrYqbaHTz5
M65NM57/ng9GwVQzwlbar8tnC+IvI59LXrYlhvUIZvzyZw5ZT+9zxgpXp6S51Ozf
ssNjAsDEl1w+S2mKQ6Wq6bGWZRjNsn2r/Uf5ux6GWV25IEGWq1NW92mROSgv6PUq
ZosCAwEAAaOCAn0wggJ5MB0GA1UdDgQWBBSm7RTbEhAaEl0xEtxMxWAtMNi0dzAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF
hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJTy8w
WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ERU5QQUlPL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgJOMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA
ATAGAwQCZ3uAMA0EAgACMAcDBQAkA6LAMA0GCSqGSIb3DQEBCwUAA4IBAQA2qdOx
Qdu2DyRNClJCcYqBc6+3rpe97hdGR25UpOHsAk6dqeQUYunV6Y5UByr3XfUr3lwj
mTL/w74PRM8IDkn49PmdGpR11OMnm7bMv9NONKi2+isw/eN9GKslWTkNN/NUGWuP
BK4jpo8f5vgz0g5c5+XvDfdhNMfrpk/Wy/yh5nb2O5XHSetPq2lrZS4cuJyh5g1f
efegVlE4zLZxsbZpc9Qmv6Xm4L0+e9lXHfZD8fYQlWLYYYtm30X0lRdgA0PSTgGx
m2+uqrlb7o8ktgzQbB62Oy2GHWAjZUu3eWiYUP6NenYrIPQaCcQf0Ja5ePS8ufNZ
D556wBVGL7fF04aB
-----END CERTIFICATE-----
Generated at Sun Jan 29 17:44:55 2023 by rpki-client.