Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/rcfkUPHCu5_tBBOybMCHMuLBwPk.cer
File: rcfkUPHCu5_tBBOybMCHMuLBwPk.cer (raw, json)
Hash identifier: 7gJSK5kBRxuM5+fJ52Kx/qeryuk+Mzrn0H4d8Hou/sE=
Subject key identifier: AD:C7:E4:50:F1:C2:BB:9F:ED:04:13:B2:6C:C0:87:32:E2:C1:C0:F9
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2EA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/rcfkUPHCu5_tBBOybMCHMuLBwPk.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:30 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.177.50.0/23
IP: 2400:37e0::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11945 (0x2ea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ADC7E450F1C2BB9FED0413B26CC08732E2C1C0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:e8:68:7d:fd:16:e5:b6:1a:72:08:b8:ae:
84:08:f9:77:86:55:c8:86:21:54:37:a0:91:77:f9:
73:f7:f1:48:af:1e:b1:34:40:20:21:ca:56:8f:14:
1c:fc:1e:51:24:9f:b0:d4:53:45:2d:3b:28:78:61:
19:c7:81:7a:d2:3c:78:00:20:8a:64:6d:1e:d5:36:
57:d7:01:6b:d6:1b:47:7f:6a:37:3b:cf:f4:ae:36:
7c:0c:5c:b8:ce:7b:0b:d9:ab:7a:17:1b:38:97:63:
f5:40:37:ce:07:d0:9c:f3:09:bd:ca:c1:7f:3d:4b:
a1:d8:05:0e:04:64:49:07:2f:3c:01:f0:e1:a8:c5:
30:97:c8:d7:16:c5:b2:f2:c2:b8:29:fc:82:e8:0d:
77:12:7f:78:65:6f:30:5d:d0:ba:07:dd:de:70:8a:
75:3e:53:16:16:46:83:56:12:c9:b5:a0:d3:90:f6:
cb:1c:ff:4b:fa:8e:aa:7b:59:ea:33:21:46:63:0a:
1a:07:3e:b5:f9:63:fc:7b:24:8a:63:ed:31:e8:82:
94:4d:cc:28:a4:37:85:24:90:de:3e:5e:f5:eb:05:
3a:de:12:69:d4:5f:ee:ac:8c:bf:97:d0:23:11:a2:
d7:d6:ac:17:41:c3:6a:33:bf:37:77:f9:52:4d:74:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C7:E4:50:F1:C2:BB:9F:ED:04:13:B2:6C:C0:87:32:E2:C1:C0:F9
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/rcfkUPHCu5_tBBOybMCHMuLBwPk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.50.0/23
IPv6:
2400:37e0::/32
Signature Algorithm: sha256WithRSAEncryption
37:e5:18:32:b6:90:30:cb:f6:3b:ac:02:93:36:f3:86:71:35:
66:c0:d3:9b:2d:49:34:f5:8a:58:4a:3a:36:b7:7c:2d:bd:de:
81:ca:f7:bb:9a:4b:a7:85:6d:19:0b:98:e6:1b:2e:5f:36:82:
39:a9:f1:d3:aa:83:1e:8c:11:60:0f:25:c3:db:7d:ac:cd:c9:
ab:4e:7e:71:09:52:10:06:e9:f3:c5:08:15:a1:74:4b:63:7c:
7b:2a:5d:d0:bf:cc:16:23:fe:75:c0:7c:10:e0:b2:39:22:66:
bf:af:7e:0d:9f:3e:5a:5f:cf:05:c5:ba:69:bb:da:ce:cf:ec:
53:bf:97:49:e8:3a:94:10:d5:e9:e4:b8:02:1c:02:23:06:91:
a7:36:6f:ab:f0:14:cd:24:d9:b9:2b:ae:27:ea:9e:c6:10:35:
41:03:4f:c6:9c:bb:a0:f7:3f:b8:cb:97:25:4f:17:36:0a:55:
a0:47:4f:70:51:42:42:b9:28:06:f8:26:f2:27:54:f9:ab:bd:
45:b6:42:d7:19:7f:1e:bc:30:2a:43:2d:37:ba:b8:17:1d:da:
0e:a4:e9:20:7f:2f:95:e2:e8:d1:16:9e:63:11:78:ef:86:b1:
7d:87:06:47:f0:c0:a8:c6:e2:9a:56:98:79:83:f7:af:f7:7c:
67:ee:1b:de
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 17 04:23:49 2024 by rpki-client on console-ams.rpki-client.org