Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
File: pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer (raw, json)
Hash identifier: JSg+V/uqVoMzO9SfSYJYH+kG1LwdaMuVOH/IyBKFTww=
Subject key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:12 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131662
IP: 103.123.128.0/22
IP: 103.135.16.0/22
IP: 2403:a2c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11547 (0x2d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:39:a9:f9:a2:6f:cc:c9:57:41:b8:87:65:
bd:b3:a3:a1:62:9c:5e:0c:c8:36:6d:70:2c:02:c3:
9c:28:a9:7f:41:66:19:c9:1e:2f:9f:25:50:96:08:
ba:ac:80:f5:02:fd:90:19:05:37:10:14:4f:a4:55:
4d:66:12:8e:82:39:32:9a:9d:00:e0:31:c0:f9:6c:
81:92:ae:65:3b:34:18:3e:51:a6:b3:90:bb:a4:3c:
f3:0e:1d:bc:27:58:30:11:e2:eb:85:f4:e4:4e:c8:
1f:70:d6:f5:d2:99:31:8b:17:3b:95:b0:54:f0:5c:
17:6d:b2:b0:2c:bc:83:63:99:07:7e:e6:b5:57:be:
73:b4:66:61:77:17:a1:d1:f3:8c:d2:d0:87:42:37:
45:49:ab:62:a6:da:1d:3c:f9:33:ae:4d:33:9e:ff:
9e:0f:46:c1:54:33:c2:56:da:af:cb:67:0b:e2:2f:
23:9f:4b:5e:b6:25:86:f5:08:66:fc:f2:67:0e:59:
4f:ef:73:c6:0a:57:a7:a4:b9:d4:ec:df:b2:c3:63:
02:c0:c4:97:5c:3e:4b:69:8a:43:a5:aa:e9:b1:96:
65:18:cd:b2:7d:ab:fd:47:f9:bb:1e:86:59:5d:b9:
20:41:96:ab:53:56:f7:69:91:39:28:2f:e8:f5:2a:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131662
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
103.135.16.0/22
IPv6:
2403:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
72:38:45:52:e9:fa:81:14:88:82:c1:41:19:6c:62:2d:00:31:
12:f6:c1:7c:a8:7d:a9:e1:df:d8:3e:6a:0e:28:c5:8a:59:6c:
bd:d4:f0:72:ac:9b:22:3c:6a:d0:58:ff:c2:ac:5d:23:2c:f2:
9e:dd:28:73:5e:54:a4:0f:f9:52:bd:2a:24:37:82:93:62:a5:
40:9f:fe:f5:3e:a2:3a:e6:4c:65:70:bf:71:49:53:a6:6b:0c:
6b:c2:13:47:ba:1f:76:00:44:31:6e:c1:db:5e:0a:7b:df:19:
42:99:db:a1:f8:c6:82:d6:51:0b:26:54:98:f9:4f:22:a5:59:
39:82:a3:5b:99:59:83:2b:2b:fe:07:06:a8:64:b0:de:10:ad:
d4:34:fa:6f:24:25:f6:60:c6:c0:63:91:83:39:40:26:d5:04:
1c:0a:0c:13:e2:02:18:ea:08:d8:77:cc:4b:75:9a:55:cf:7c:
44:80:c5:79:5c:2b:95:7c:a0:22:e6:7b:44:51:a4:e0:1d:26:
c9:d6:fc:f9:74:b9:57:49:c8:73:ec:73:f3:05:e3:c6:3a:76:
af:65:24:70:ab:ce:e5:b3:8c:5f:6b:64:ca:42:0c:59:69:bc:
08:fe:ee:bb:78:18:67:87:16:12:0c:e8:01:94:a3:ba:93:c4:
9d:f4:a7:04
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgICLRswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxMloXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoQTZFRDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANh1Oan5om/MyVdBuIdl
vbOjoWKcXgzINm1wLALDnCipf0FmGckeL58lUJYIuqyA9QL9kBkFNxAUT6RVTWYS
joI5MpqdAOAxwPlsgZKuZTs0GD5RprOQu6Q88w4dvCdYMBHi64X05E7IH3DW9dKZ
MYsXO5WwVPBcF22ysCy8g2OZB37mtVe+c7RmYXcXodHzjNLQh0I3RUmrYqbaHTz5
M65NM57/ng9GwVQzwlbar8tnC+IvI59LXrYlhvUIZvzyZw5ZT+9zxgpXp6S51Ozf
ssNjAsDEl1w+S2mKQ6Wq6bGWZRjNsn2r/Uf5ux6GWV25IEGWq1NW92mROSgv6PUq
ZosCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBSm7RTbEhAaEl0xEtxMxWAtMNi0dzAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF
hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJTy8w
WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ERU5QQUlPL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgJOMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA
ATAMAwQCZ3uAAwQCZ4cQMA0EAgACMAcDBQAkA6LAMA0GCSqGSIb3DQEBCwUAA4IB
AQByOEVS6fqBFIiCwUEZbGItADES9sF8qH2p4d/YPmoOKMWKWWy91PByrJsiPGrQ
WP/CrF0jLPKe3ShzXlSkD/lSvSokN4KTYqVAn/71PqI65kxlcL9xSVOmawxrwhNH
uh92AEQxbsHbXgp73xlCmduh+MaC1lELJlSY+U8ipVk5gqNbmVmDKyv+BwaoZLDe
EK3UNPpvJCX2YMbAY5GDOUAm1QQcCgwT4gIY6gjYd8xLdZpVz3xEgMV5XCuVfKAi
5ntEUaTgHSbJ1vz5dLlXSchz7HPzBePGOnavZSRwq87ls4xfa2TKQgxZabwI/u67
eBhnhxYSDOgBlKO6k8Sd9KcE
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:44 2024 by rpki-client on console-fra.rpki-client.org