Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer
File: pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer (raw, json)
Hash identifier: j1VOu58e7B9BCrocUtbqprhYGlAHFMr0eTvpf3d4d7I=
Subject key identifier: A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2DF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:22 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131607
IP: 27.0.152.0/22
IP: 103.207.252.0/22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 Nov 2024 11:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11767 (0x2df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:01:b2:11:d4:00:b6:70:39:d0:ae:3e:fd:
d8:0e:fd:3e:f1:5b:19:1b:f1:79:49:0d:b0:a4:0b:
56:a7:c0:79:7c:56:a0:e0:d7:4d:c2:17:16:ff:fd:
84:0b:68:9b:15:7c:87:b2:11:24:95:68:37:dc:6b:
7b:48:34:12:a4:ee:2a:fc:7c:1a:9f:a4:8f:29:d4:
ec:b3:4d:d4:03:27:31:71:01:a2:ba:bd:b5:14:be:
6c:5e:b6:50:07:90:ff:87:bf:4c:9e:0f:fe:f3:1e:
40:e1:b3:ba:93:73:98:22:d3:33:c9:19:2a:25:a9:
12:71:0a:96:1b:1b:15:14:0a:00:38:5a:58:b9:7d:
d6:13:c2:8f:23:73:46:77:67:c6:36:5e:75:19:6b:
f5:7f:c2:00:5a:40:8c:17:8c:ce:b7:bb:73:e0:f9:
f0:22:e2:73:0c:26:fb:41:45:fb:2a:b3:78:2d:98:
72:97:b3:18:cb:c9:1c:1b:b4:50:56:ad:2b:55:4d:
83:7d:06:64:f0:14:06:ce:ee:05:fa:d4:69:67:e9:
c8:57:69:85:83:d8:cd:f9:fe:ce:c9:37:a1:5c:c7:
0d:c8:df:81:16:ac:74:c6:db:c0:08:b2:09:b2:70:
65:1a:dd:54:fd:e9:c9:f1:6f:94:9a:a0:45:b6:4b:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131607
sbgp-ipAddrBlock: critical
IPv4:
27.0.152.0/22
103.207.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:65:a0:f9:d4:81:a4:32:52:82:8e:86:29:b9:19:49:e4:24:
89:82:98:28:d2:ff:76:80:d1:db:ce:6d:52:17:0b:9c:b2:95:
d3:cc:ea:f8:3e:05:c4:03:5a:88:b3:54:76:16:e7:f3:f0:3b:
12:f3:21:e3:84:f8:06:e7:3e:c0:44:b2:f4:f3:d5:de:a9:7c:
c7:0f:ed:d8:73:73:1f:94:30:ed:db:27:5d:85:fd:e5:ba:38:
8e:3d:83:ae:95:93:b7:68:39:49:a4:d5:33:e3:50:69:30:41:
78:6b:eb:4f:e6:97:4c:e2:e4:3f:f6:17:bd:2c:ce:fa:a4:f0:
04:e6:63:0e:31:8b:76:e9:1e:75:d3:eb:b3:a5:2f:81:7a:4d:
40:1e:eb:d9:cf:4f:58:28:73:79:34:94:82:1d:62:0a:93:34:
c8:10:60:08:71:49:16:64:ce:2e:0d:c6:6b:68:01:f8:75:52:
2a:80:a4:0a:2d:89:dc:8d:3e:e9:82:72:b2:4e:ca:3c:67:3b:
5b:03:7c:e4:55:8d:76:9f:3a:3a:70:4f:23:16:ff:1d:90:a0:
5a:7b:b0:af:6a:35:51:57:7f:04:60:b3:52:af:26:6d:7f:0b:
8a:6f:16:c8:09:1e:b9:1d:13:0a:09:df:89:c6:d1:38:95:e2:
d4:f4:4d:f9
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgICLfcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcyMloXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoQTZGRTVEMUM5MzEyN0U0QUFFRkYxMDBGM0E1QzMzMEYyREQxQUJD
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALm/AbIR1AC2cDnQrj79
2A79PvFbGRvxeUkNsKQLVqfAeXxWoODXTcIXFv/9hAtomxV8h7IRJJVoN9xre0g0
EqTuKvx8Gp+kjynU7LNN1AMnMXEBorq9tRS+bF62UAeQ/4e/TJ4P/vMeQOGzupNz
mCLTM8kZKiWpEnEKlhsbFRQKADhaWLl91hPCjyNzRndnxjZedRlr9X/CAFpAjBeM
zre7c+D58CLicwwm+0FF+yqzeC2YcpezGMvJHBu0UFatK1VNg30GZPAUBs7uBfrU
aWfpyFdphYPYzfn+zsk3oVzHDcjfgRasdMbbwAiyCbJwZRrdVP3pyfFvlJqgRbZL
0/8CAwEAAaOCAm4wggJqMB0GA1UdDgQWBBSm/l0ckxJ+Sq7/EA86XDMPLdGrwDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF
hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUVi8wVQYI
KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9E
Q1RWL3B2NWRISk1TZmtxdV94QVBPbHd6RHkzUnE4QS5tZnQwMQYIKwYBBQUHMA2G
JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAgIXMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC
GwCYAwQCZ8/8MA0GCSqGSIb3DQEBCwUAA4IBAQCMZaD51IGkMlKCjoYpuRlJ5CSJ
gpgo0v92gNHbzm1SFwucspXTzOr4PgXEA1qIs1R2Fufz8DsS8yHjhPgG5z7ARLL0
89XeqXzHD+3Yc3MflDDt2yddhf3lujiOPYOulZO3aDlJpNUz41BpMEF4a+tP5pdM
4uQ/9he9LM76pPAE5mMOMYt26R510+uzpS+Bek1AHuvZz09YKHN5NJSCHWIKkzTI
EGAIcUkWZM4uDcZraAH4dVIqgKQKLYncjT7pgnKyTso8ZztbA3zkVY12nzo6cE8j
Fv8dkKBae7CvajVRV38EYLNSryZtfwuKbxbICR65HRMKCd+JxtE4leLU9E35
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:50 2024 by rpki-client on console-ams.rpki-client.org