Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/st59_iO5HROBJsm0Abge1CP09q8.cer
File: st59_iO5HROBJsm0Abge1CP09q8.cer (raw, json)
Hash identifier: YlsmS8hlJ2Oebv7CBv7EfQEzRztnWn7CSp5Nj9/IEh0=
Subject key identifier: B2:DE:7D:FE:23:B9:1D:13:81:26:C9:B4:01:B8:1E:D4:23:F4:F6:AF
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 18BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/JW72/st59_iO5HROBJsm0Abge1CP09q8.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/JW72/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 29 Sep 2020 09:53:21 +0000
Certificate not after: Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources: IP: 103.122.212.0/22
IP: 2403:9540::/32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6332 (0x18bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 29 09:53:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B2DE7DFE23B91D138126C9B401B81ED423F4F6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:ef:c8:cb:5c:b1:7a:ea:c2:44:8e:a5:8d:
09:98:6d:e9:63:ed:17:30:f4:ce:b4:f4:de:cb:d6:
98:9e:67:13:14:2b:8d:f0:27:24:bd:1c:f5:d6:19:
84:91:c9:83:68:23:47:18:b7:2c:47:e7:f9:8b:7a:
96:42:7d:af:a0:b0:7e:ec:58:23:74:38:d0:21:56:
cb:f6:0d:18:11:fc:14:10:29:7a:13:41:c6:35:3d:
71:4f:45:03:fb:0d:1b:92:a4:f7:f3:c7:6f:42:0e:
12:67:75:f5:dc:a6:1b:dd:2b:b3:bf:b6:5b:b4:83:
6b:02:c1:a8:71:57:50:8d:1f:1d:b2:07:89:16:82:
44:8a:9d:b7:58:8f:0c:e2:61:c6:ed:8d:73:0a:d6:
05:24:fb:3b:35:e0:12:b2:e8:ab:35:2f:76:69:41:
d8:9b:b0:01:ee:57:73:4e:22:83:d2:a2:25:49:a7:
61:27:f4:b9:1c:f2:dc:d1:d8:0e:a9:53:2d:5f:88:
c0:21:18:ac:26:37:35:ad:cf:f7:1f:db:80:d7:35:
4f:0b:d4:c6:6d:8e:97:f5:e7:cd:c7:60:f3:c6:b3:
b8:11:e0:cf:47:63:60:a8:17:f3:57:af:ba:79:b2:
57:98:10:ed:b7:0f:27:b0:2c:aa:bc:e1:17:de:52:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:7D:FE:23:B9:1D:13:81:26:C9:B4:01:B8:1E:D4:23:F4:F6:AF
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JW72/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JW72/st59_iO5HROBJsm0Abge1CP09q8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.212.0/22
IPv6:
2403:9540::/32
Signature Algorithm: sha256WithRSAEncryption
88:92:55:52:44:58:10:3b:08:29:5e:be:20:12:50:1a:66:d1:
c6:90:9d:91:aa:ae:b3:51:95:7d:ec:fc:cb:95:83:a4:ce:3b:
0f:63:a4:22:a2:de:1a:28:f7:f2:c0:39:9e:01:22:e4:20:f3:
02:fa:5c:bd:38:b6:00:49:19:d7:d2:31:2b:80:27:1c:15:d8:
46:76:ed:ca:e1:79:62:c5:be:5b:e4:8c:04:67:b7:70:a7:3d:
57:71:db:fa:86:54:73:02:05:69:da:7c:6d:1e:19:3c:ae:ce:
ac:8a:f5:bc:fd:fd:79:f4:48:a6:a2:30:cd:f8:70:c6:56:8e:
84:13:a7:81:b8:e6:11:ca:6b:c4:bf:37:1d:9c:bc:fa:1e:ef:
69:5e:5d:de:e1:3c:b5:fb:cd:fb:46:8b:7e:a1:2a:21:34:f7:
1e:70:60:f8:77:78:04:f3:f3:0f:7d:a8:fd:41:07:92:ac:4d:
85:a6:5a:25:8f:b8:bf:f5:ee:81:60:3c:67:0a:ea:56:a0:aa:
51:85:08:d2:c9:c4:d0:d1:74:52:8d:35:50:dc:88:1f:42:34:
7a:4a:1a:03:85:47:6c:47:de:97:35:71:5e:dd:58:36:c7:41:
f6:bd:57:6a:5d:26:e0:ea:9d:b1:4a:6a:d5:42:ec:b1:14:c7:
56:e2:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org