Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
File: pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer (raw, json)
Hash identifier: tOqztExw3U2Irt9TTEoYR7dQFF0MLX6iCGhHK35Gnt0=
Subject key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2B75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 11 Mar 2024 07:35:34 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 131662
IP: 103.123.128.0/22
IP: 103.135.16.0/22
IP: 2403:a2c0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Apr 2024 03:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11125 (0x2b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Mar 11 07:35:34 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:39:a9:f9:a2:6f:cc:c9:57:41:b8:87:65:
bd:b3:a3:a1:62:9c:5e:0c:c8:36:6d:70:2c:02:c3:
9c:28:a9:7f:41:66:19:c9:1e:2f:9f:25:50:96:08:
ba:ac:80:f5:02:fd:90:19:05:37:10:14:4f:a4:55:
4d:66:12:8e:82:39:32:9a:9d:00:e0:31:c0:f9:6c:
81:92:ae:65:3b:34:18:3e:51:a6:b3:90:bb:a4:3c:
f3:0e:1d:bc:27:58:30:11:e2:eb:85:f4:e4:4e:c8:
1f:70:d6:f5:d2:99:31:8b:17:3b:95:b0:54:f0:5c:
17:6d:b2:b0:2c:bc:83:63:99:07:7e:e6:b5:57:be:
73:b4:66:61:77:17:a1:d1:f3:8c:d2:d0:87:42:37:
45:49:ab:62:a6:da:1d:3c:f9:33:ae:4d:33:9e:ff:
9e:0f:46:c1:54:33:c2:56:da:af:cb:67:0b:e2:2f:
23:9f:4b:5e:b6:25:86:f5:08:66:fc:f2:67:0e:59:
4f:ef:73:c6:0a:57:a7:a4:b9:d4:ec:df:b2:c3:63:
02:c0:c4:97:5c:3e:4b:69:8a:43:a5:aa:e9:b1:96:
65:18:cd:b2:7d:ab:fd:47:f9:bb:1e:86:59:5d:b9:
20:41:96:ab:53:56:f7:69:91:39:28:2f:e8:f5:2a:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131662
sbgp-ipAddrBlock: critical
IPv4:
103.123.128.0/22
103.135.16.0/22
IPv6:
2403:a2c0::/32
Signature Algorithm: sha256WithRSAEncryption
63:d1:5f:90:19:b0:53:63:50:4b:34:95:b0:a5:9f:b3:79:ac:
e8:18:95:e3:f6:e8:b9:54:fc:d8:3f:a1:6b:51:67:9c:e4:e6:
fd:07:2e:54:14:65:4c:6d:98:e0:fe:c0:d9:14:35:ef:1f:54:
ba:7e:23:e8:a1:8e:67:2c:fc:3e:3d:72:50:59:a1:96:c2:13:
9a:d2:9d:a9:e2:1f:b9:aa:e3:1d:96:4f:81:39:85:5d:18:f9:
20:6d:ea:ea:2d:c8:33:77:70:a2:8f:d2:5b:2b:17:aa:a9:19:
ec:98:6e:0c:7a:69:58:0b:f9:6e:63:1e:68:c8:06:a3:2e:96:
1f:8b:be:8b:cf:c2:d8:30:d1:16:b7:50:00:7f:a1:69:d4:5c:
09:fc:11:0c:18:80:c0:0b:84:4f:ca:7c:cd:bf:40:78:a1:db:
ad:4f:66:f2:4b:94:c7:83:7d:72:67:11:e5:0b:43:11:86:db:
cf:e2:b9:ca:81:02:f1:07:56:fc:5d:db:a6:1b:86:bc:48:6c:
41:06:4d:8b:b5:c7:b8:5e:24:31:5d:4d:28:ce:2d:07:ee:80:
c0:27:36:96:8c:96:76:3c:43:d5:a7:09:d9:09:10:e4:c0:f6:
05:a4:37:9e:64:ec:60:52:9a:cb:5b:28:37:9a:cf:2e:02:ce:
05:09:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 00:23:50 2024 by rpki-client on console-ams.rpki-client.org