Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pwGbBeIMn7wWKz0dz7EeunJlzIY.cer
File: pwGbBeIMn7wWKz0dz7EeunJlzIY.cer (raw, json)
Hash identifier: Tli9DEWkpoUyVHHL/POAf9u/yyrspx4mmYOKzvMYjec=
Subject key identifier: A7:01:9B:05:E2:0C:9F:BC:16:2B:3D:1D:CF:B1:1E:BA:72:65:CC:86
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 19AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/AVER/pwGbBeIMn7wWKz0dz7EeunJlzIY.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/AVER/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 29 Sep 2020 09:53:33 +0000
Certificate not after: Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources: IP: 103.129.172.0/22
IP: 2403:8240::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6570 (0x19aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 29 09:53:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A7019B05E20C9FBC162B3D1DCFB11EBA7265CC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:85:ac:5f:cf:8a:96:bb:65:c7:bc:f5:cb:
28:d5:8a:c6:5c:a1:90:82:14:79:c9:cb:46:ee:7d:
7f:5d:f8:d8:5d:23:55:63:a1:07:9a:09:b1:06:4f:
ac:2a:a3:31:e5:5c:2b:f2:cb:02:b6:c0:c9:3e:b8:
65:21:2f:07:45:db:7a:d0:1b:ef:33:9b:14:c0:bb:
e4:40:2c:f9:77:22:fa:47:b0:42:c3:22:34:ac:d9:
fa:1f:a5:b1:6d:7c:83:1f:eb:b7:d1:28:13:ba:3f:
c4:f6:02:ad:76:b4:77:26:c7:79:63:0c:7f:94:46:
96:47:24:c6:96:8e:54:db:95:a7:64:1d:75:85:02:
2a:27:35:74:eb:9b:2e:21:2f:fe:2f:c1:ed:cf:af:
92:cf:f3:02:2e:6f:84:9f:9f:63:65:9b:0c:bd:58:
84:1f:34:32:5c:bd:63:ed:2d:3d:07:14:f0:62:69:
e8:cd:f3:6e:01:a2:6b:a3:07:90:26:ce:8b:65:4a:
69:48:57:e8:79:26:5f:d6:d3:53:a6:8a:8d:ed:86:
4f:69:78:3e:5b:5e:35:6f:db:9e:3a:7c:37:a0:cf:
fc:ed:17:02:55:90:39:b5:01:4f:3e:87:40:43:5d:
36:84:9d:3f:7c:6c:d5:f0:ca:be:18:9b:3c:19:99:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:9B:05:E2:0C:9F:BC:16:2B:3D:1D:CF:B1:1E:BA:72:65:CC:86
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AVER/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AVER/pwGbBeIMn7wWKz0dz7EeunJlzIY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.172.0/22
IPv6:
2403:8240::/32
Signature Algorithm: sha256WithRSAEncryption
31:4d:99:19:5b:48:77:25:7b:65:f5:e5:d0:13:be:88:db:ca:
f9:f0:2f:98:55:0a:0a:cf:9c:55:6a:c3:f3:d7:69:3b:82:87:
4a:0a:99:e9:d8:e2:58:d8:9b:bc:2c:fb:71:68:98:ae:04:39:
14:b2:b6:f3:e4:c9:d0:33:ea:a4:9c:81:ed:a3:62:da:58:b7:
46:26:a3:aa:60:fa:3c:04:83:39:a7:99:7f:c8:02:02:2a:b7:
ad:94:ef:75:8d:20:66:8c:2e:e0:70:fa:a3:8f:96:be:38:06:
98:c5:98:00:ee:61:7b:af:e3:3b:81:b4:95:f8:0b:e3:18:52:
d6:98:d5:a7:44:96:e3:4f:3f:d8:0d:2a:82:9a:b0:55:cf:c8:
ac:05:5d:90:14:f2:54:84:44:60:26:77:c3:a7:f3:25:83:ed:
65:36:3a:aa:c1:1e:69:46:15:91:fb:d9:00:d3:6e:7f:5e:1e:
38:5f:77:e3:c9:4a:b6:7a:92:e0:5c:7f:48:76:24:c9:c8:10:
38:1b:e7:f5:21:0e:50:39:02:09:2e:e8:17:ed:35:66:d7:63:
e5:04:83:76:5c:a1:fa:3a:91:de:17:2b:81:d7:0f:79:ac:b0:
d9:8b:73:89:b4:ea:87:bb:08:c7:38:2c:93:53:17:5e:79:cf:
5c:5a:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org