Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
File: wU-s_UXCwCdo6CcvT7g_su2vdDk.cer (raw, json)
Hash identifier: a+aVaIEFXHXwugvmDrvDso85Dyds+9K3opcWB85Ehhw=
Subject key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 27AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:09 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: AS: 131642
IP: 103.137.62.0/23
IP: 2404:aac0::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 May 2024 07:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10156 (0x27ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ff:02:62:ae:4b:ec:8a:66:ad:c4:2a:e3:a5:
05:4d:eb:b6:f3:3c:0d:65:14:a3:a0:7f:fa:ef:db:
fb:2d:15:d3:7e:1e:04:b3:28:f4:f7:ea:5b:a8:8f:
2c:65:b6:19:9b:16:bb:3f:68:32:bb:e7:dd:82:0b:
1e:56:4d:c2:4e:4b:21:25:cb:a5:01:f3:ae:05:6f:
ac:35:df:b6:12:0a:ed:e6:79:0f:52:4f:ca:f5:d4:
a4:1a:b4:15:cc:d8:ea:16:29:c1:b8:a4:c6:3a:92:
6f:db:c7:75:c2:df:d5:e0:43:33:ec:b6:3f:0d:9a:
d0:8a:b2:c6:8b:ab:c6:98:2a:95:b7:c1:d0:03:81:
99:67:91:c3:74:76:16:38:ec:5a:a7:b3:8a:bf:55:
5a:58:6a:b9:12:54:3f:69:08:7f:13:81:dd:bd:69:
5f:0e:02:c7:f9:fd:82:90:5f:a0:32:09:b7:d7:69:
0f:45:36:51:49:6f:bc:14:8b:11:c7:5d:6a:35:a4:
58:65:75:cb:ca:e9:9d:08:56:fb:8f:0e:f4:8c:fd:
0b:6b:d0:a5:54:4b:3b:e0:62:fd:61:24:f6:80:44:
88:3f:25:6a:04:59:ef:44:63:15:ec:57:d4:35:3d:
ae:f8:65:9b:bf:9c:f4:86:9f:73:62:bf:bc:10:c5:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131642
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
IPv6:
2404:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:a9:c0:70:09:86:9e:3f:a3:60:d9:9f:fe:71:96:23:f7:32:
04:cc:01:97:12:eb:a2:68:a3:3c:40:4a:b4:4e:53:79:7e:4d:
a4:a2:9e:64:8b:75:41:9d:3b:cc:e4:ab:0c:b9:bc:03:2d:d1:
f7:dd:f2:b0:e7:d1:da:9c:11:ac:fc:45:d5:ac:5c:86:6c:2c:
09:58:ee:a2:cc:26:ba:ec:ca:d7:53:a9:f6:7a:f2:0a:3d:d3:
cd:ed:d6:09:95:42:cf:ce:61:9f:76:98:3d:92:9e:21:54:54:
47:a3:27:1b:27:3a:a0:83:7f:7f:2c:30:9f:b1:f4:f3:8c:0f:
d6:2f:39:58:72:00:7b:35:a6:3a:6b:80:1e:ca:6c:00:cf:60:
81:67:70:37:9b:1a:71:a3:2a:fb:f2:a5:10:3e:95:96:90:99:
84:46:bb:6d:bb:21:8e:60:b4:92:6f:e3:fb:4f:b4:77:69:e4:
bc:16:2a:86:ed:bc:d9:8e:9f:56:8f:4d:b0:f4:80:a9:57:4e:
1e:81:f1:37:84:60:63:db:4a:9d:01:f5:98:e1:c8:a4:6a:2c:
4d:9a:3c:89:24:6c:09:e0:a1:f5:a6:2a:e6:29:a3:1e:1a:e7:
b4:b8:29:b0:27:91:4f:fd:74:f9:85:50:ba:18:e4:2f:2b:dc:
ba:c2:0c:be
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgICJ6wwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEwOVoXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoQzE0RkFDRkQ0NUMyQzAyNzY4RTgyNzJGNEZCODNGQjJFREFGNzQz
OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPf/AmKuS+yKZq3EKuOl
BU3rtvM8DWUUo6B/+u/b+y0V034eBLMo9PfqW6iPLGW2GZsWuz9oMrvn3YILHlZN
wk5LISXLpQHzrgVvrDXfthIK7eZ5D1JPyvXUpBq0FczY6hYpwbikxjqSb9vHdcLf
1eBDM+y2Pw2a0IqyxourxpgqlbfB0AOBmWeRw3R2FjjsWqezir9VWlhquRJUP2kI
fxOB3b1pXw4Cx/n9gpBfoDIJt9dpD0U2UUlvvBSLEcddajWkWGV1y8rpnQhW+48O
9Iz9C2vQpVRLO+Bi/WEk9oBEiD8lagRZ70RjFexX1DU9rvhlm7+c9Iafc2K/vBDF
5H0CAwEAAaOCAnUwggJxMB0GA1UdDgQWBBTBT6z9RcLAJ2joJy9PuD+y7a90OTAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF
hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTLzBUBggr
BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BR
Uy93VS1zX1VYQ3dDZG82Q2N2VDdnX3N1MnZkRGsubWZ0MDEGCCsGAQUFBzANhiVo
dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwICOjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAWeJ
PjANBAIAAjAHAwUAJASqwDANBgkqhkiG9w0BAQsFAAOCAQEACqnAcAmGnj+jYNmf
/nGWI/cyBMwBlxLromijPEBKtE5TeX5NpKKeZIt1QZ07zOSrDLm8Ay3R993ysOfR
2pwRrPxF1axchmwsCVjuoswmuuzK11Op9nryCj3Tze3WCZVCz85hn3aYPZKeIVRU
R6MnGyc6oIN/fywwn7H084wP1i85WHIAezWmOmuAHspsAM9ggWdwN5sacaMq+/Kl
ED6VlpCZhEa7bbshjmC0km/j+0+0d2nkvBYqhu282Y6fVo9NsPSAqVdOHoHxN4Rg
Y9tKnQH1mOHIpGosTZo8iSRsCeCh9aYq5imjHhrntLgpsCeRT/10+YVQuhjkLyvc
usIMvg==
-----END CERTIFICATE-----
Generated at Tue May 21 06:28:53 2024 by rpki-client on console-ams.rpki-client.org