RPKI Certificate
Location:                 rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer (download)

Subject key identifier:   14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Manifest:                 rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
CA Repository:            rpkica.twnic.tw/rpki/TWNICCA/
Notification URL:         https://rrdp.twnic.tw/rrdp/notify.xml
Subordinate resources:
    1: IP: 139.175.0.0/16
    2: IP: 140.109.0.0--140.138.255.255
    3: IP: 159.117.64.0/19
    4: IP: 168.95.0.0/16
    5: IP: 192.72.3.0--192.72.252.255
    6: IP: 192.83.166.0--192.83.196.255
    7: IP: 192.192.0.0/16

--
$ openssl x509 -text -inform DER -in rsync/rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15377 (0x3c11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Aug  4 04:14:41 2021 GMT
            Not After : Sep 30 00:00:00 2022 GMT
        Subject: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:26:4d:f8:47:64:a3:0c:ed:a5:70:e4:91:
                    00:c5:e7:a1:9d:39:02:f3:8d:ea:5c:a2:b0:4d:4c:
                    37:5c:32:68:f5:1b:29:a0:b4:5a:b8:33:89:69:37:
                    b6:15:6e:64:7b:ab:82:3c:f7:2b:26:e0:03:47:34:
                    d7:00:02:ee:c1:6c:26:b3:84:02:7e:fd:cb:4a:a9:
                    0a:9b:98:cd:cf:19:a3:6f:34:cd:18:57:b5:32:3f:
                    23:bb:18:78:39:36:94:ce:ef:e9:ef:74:23:00:7c:
                    f2:1d:2d:95:0e:d2:bc:dd:62:7d:c9:a1:6d:03:3b:
                    5e:f0:f2:46:d6:94:0d:d6:fa:04:46:52:00:19:55:
                    64:e5:a3:12:5b:39:c6:09:81:de:3e:6a:75:0e:32:
                    67:5b:6c:92:db:2c:a9:a6:79:c7:ca:53:0b:94:82:
                    bf:c2:81:5e:07:65:60:5e:ac:20:7f:fa:e3:25:5f:
                    97:fe:e2:ec:d8:6b:21:0a:5c:40:4e:fa:d0:6f:f3:
                    1c:8e:08:6a:98:6a:84:d4:9c:16:58:e3:10:18:d1:
                    80:eb:f2:14:e6:97:61:18:8f:1e:8d:96:93:86:e0:
                    b5:1b:36:4f:24:d2:96:fc:8d:05:17:57:c1:3d:d3:
                    7d:c7:3a:f2:f9:4b:7f:6b:87:15:76:14:6b:a5:26:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
            X509v3 Authority Key Identifier: 
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.175.0.0/16
                  140.109.0.0-140.138.255.255
                  159.117.64.0/19
                  168.95.0.0/16
                  192.72.3.0-192.72.252.255
                  192.83.166.0-192.83.196.255
                  192.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:38:23:fe:2d:b3:0a:7f:25:c2:69:fd:b0:7d:ee:77:f1:
         48:9f:d8:6a:1a:54:51:ff:2e:2f:ba:ba:4e:39:b6:62:37:60:
         92:6d:7b:d7:e4:ad:29:8c:00:69:76:82:45:8e:61:28:2e:5e:
         06:0e:a8:c9:eb:7d:90:29:88:bc:4f:b9:67:ed:41:fa:0f:de:
         da:c4:a4:cf:0d:42:4b:36:c4:7c:34:fc:e3:2e:f0:b6:a0:41:
         0e:77:94:cb:4f:4b:66:7d:a7:a0:70:65:66:53:cd:5c:fd:c4:
         1c:fc:c9:44:8c:be:ac:8d:90:3f:ca:ca:fd:f6:8f:ce:78:a2:
         a2:bd:9f:17:79:74:22:c8:2e:97:6d:60:67:0e:36:5d:ee:3b:
         97:06:c0:4c:b4:ef:b8:11:27:62:7e:17:4a:91:1f:b3:d7:56:
         6f:2e:58:94:30:5b:d3:7f:34:00:60:c3:ac:d2:79:c8:06:4a:
         36:37:42:30:2a:8b:76:20:a0:f0:50:61:e1:ff:8e:c5:9a:ac:
         4b:04:27:61:7b:83:20:61:75:17:b8:20:0a:6b:c7:df:3f:ef:
         d2:72:b5:ea:a4:a0:4d:38:fa:bc:c4:53:37:d5:f3:d4:4a:6d:
         97:f9:41:83:1e:26:f4:17:c0:c0:87:f3:ef:44:5d:55:9b:5f:
         68:25:7a:5e
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgICPBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjEwODA0MDQxNDQxWhcNMjIwOTMwMDAwMDAwWjBKMRUwEwYD
VQQDEwxBOTFCREIyOTAwMDAxMTAvBgNVBAUTKDE0MzEzOTJGMkZBNkQxOEY2Njc0
MUUyRUExQUVFQTE3ODE4NjE3NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPDiZN+EdkowztpXDkkQDF56GdOQLzjepcorBNTDdcMmj1GymgtFq4M4lp
N7YVbmR7q4I89ysm4ANHNNcAAu7BbCazhAJ+/ctKqQqbmM3PGaNvNM0YV7UyPyO7
GHg5NpTO7+nvdCMAfPIdLZUO0rzdYn3JoW0DO17w8kbWlA3W+gRGUgAZVWTloxJb
OcYJgd4+anUOMmdbbJLbLKmmecfKUwuUgr/CgV4HZWBerCB/+uMlX5f+4uzYayEK
XEBO+tBv8xyOCGqYaoTUnBZY4xAY0YDr8hTml2EYjx6NlpOG4LUbNk8k0pb8jQUX
V8E9033HOvL5S39rhxV2FGulJqyJAgMBAAGjggLJMIICxTAdBgNVHQ4EFgQUFDE5
Ly+m0Y9mdB4uoa7qF4GGF0MwHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwd
bg4wDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo
oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIw
MUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3
ZGJnNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy
MUE0RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSAB
Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw
bmljLm5ldC9SUEtJL0NQUy5wZGYwgcgGCCsGAQUFBwELBIG7MIG4MDEGCCsGAQUF
BzAFhiVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMFAGCCsG
AQUFBzAKhkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkRF
NUx5LW0wWTltZEI0dW9hN3FGNEdHRjBNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6
Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDBWBggrBgEFBQcBBwEB/wRH
MEUwQwQCAAEwPQMDAIuvMAoDAwCMbQMDAIyKAwQFn3VAAwMAqF8wDAMEAMBIAwME
AMBI/DAMAwQBwFOmAwQAwFPEAwMAwMAwDQYJKoZIhvcNAQELBQADggEBAENaOCP+
LbMKfyXCaf2wfe538Uif2GoaVFH/Li+6uk45tmI3YJJte9fkrSmMAGl2gkWOYSgu
XgYOqMnrfZApiLxPuWftQfoP3trEpM8NQks2xHw0/OMu8LagQQ53lMtPS2Z9p6Bw
ZWZTzVz9xBz8yUSMvqyNkD/Kyv32j854oqK9nxd5dCLILpdtYGcONl3uO5cGwEy0
77gRJ2J+F0qRH7PXVm8uWJQwW9N/NABgw6zSecgGSjY3QjAqi3YgoPBQYeH/jsWa
rEsEJ2F7gyBhdRe4IAprx98/79JyteqkoE04+rzEUzfV89RKbZf5QYMeJvQXwMCH
8+9EXVWbX2glel4=
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:49:59 2021 by LibreSSL & rpki-client.