RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer (download)

Subject key identifier:   D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Manifest:                 rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
CA Repository:            rpkica.twnic.tw/rpki/TWNICCA/
Notification URL:         https://rrdp.twnic.tw/rrdp/notify.xml
Subordinate resources:
    1: IP: 2001:7fa:1::/48

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13658 (0x355a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Aug  4 04:14:28 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:2d:6c:a6:63:34:42:4a:08:60:2c:3e:bf:
                    15:b8:8e:13:65:ca:b0:aa:4c:99:3c:d5:f8:49:6e:
                    ea:d2:42:e0:48:c8:2a:c4:81:4b:f3:50:2d:36:4a:
                    14:e6:b7:5e:1e:fa:05:f0:8f:fe:0a:a9:e6:63:f8:
                    fd:60:7d:b8:ed:09:a8:51:f7:27:e2:fa:cd:28:63:
                    ec:c3:6a:a2:ab:6b:77:39:74:16:1a:0c:28:3c:09:
                    08:be:a0:94:51:d9:c1:3e:a9:67:ba:92:95:68:ca:
                    d0:a7:a2:10:5b:cb:e6:5a:8c:e2:01:c1:8d:94:22:
                    4c:41:f6:69:ae:35:51:da:a0:23:56:d8:64:ed:ce:
                    90:75:ba:fd:85:28:22:85:38:e9:14:25:1b:2a:cd:
                    40:56:66:5b:ad:0e:b7:eb:8c:61:a5:3b:90:43:09:
                    74:14:4b:21:73:a9:84:dd:43:dd:c1:bf:25:24:72:
                    8b:01:84:0f:62:56:f7:31:93:89:83:26:17:49:e5:
                    ce:84:71:a2:7c:2e:26:5b:56:a9:4d:17:28:39:76:
                    d1:2c:ca:53:5d:f0:80:c1:d4:34:68:87:f1:4a:fb:
                    b3:ca:21:6b:14:5b:fd:4e:db:cc:90:b6:65:a4:48:
                    e3:e5:8d:e5:f9:00:3c:c4:dd:44:f3:f8:ef:1b:09:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
            X509v3 Authority Key Identifier: 
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:a5:5d:b0:56:c4:a8:42:fe:10:2e:b5:58:55:b1:49:d5:e6:
         0d:4e:91:a0:79:cc:dc:5f:73:a1:f0:7f:1d:bf:f5:56:0c:ab:
         0e:f6:8f:26:ae:0b:60:8a:d2:1d:20:5d:d6:65:aa:7d:59:5c:
         fb:4e:91:cb:c6:25:04:cb:f6:b3:29:5c:04:18:a3:57:90:48:
         61:c3:58:fb:b5:5c:73:e9:8f:61:2c:b9:83:78:dc:20:f4:a8:
         3b:d0:09:6c:5c:46:eb:07:eb:d6:41:8b:c3:f5:12:e3:2f:0c:
         ac:43:59:27:fd:2c:1e:4c:ac:17:82:2e:6e:72:40:be:3c:22:
         8f:da:46:54:49:76:9f:a2:0f:07:82:e8:4f:d4:4a:c5:25:6e:
         c4:84:9d:36:7c:39:3d:ca:50:45:c0:de:07:61:db:b9:d6:ba:
         4c:60:d1:4a:0b:d6:c4:cc:c1:07:61:82:dc:08:a1:e0:84:16:
         16:8c:66:9a:44:3b:c2:84:f0:ec:0c:18:47:b8:ca:fd:a1:a9:
         33:3b:74:21:4a:a3:55:19:5b:fc:2c:b5:2f:01:79:1d:ab:c1:
         c3:a8:e5:23:c5:91:09:c5:6d:48:d2:90:45:6c:8f:28:31:c8:
         d9:e3:4e:bd:59:07:e8:c9:67:d7:f0:f6:8e:63:61:7a:fb:c7:
         48:87:6f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:52 2021 by LibreSSL & rpki-client.