Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
File: -9Osn8RMPdKre10gvBWMgtg9Jgo.cer (raw, json)
Hash identifier: b/UNtzl5llCH8nvfIcbjOhE6ZXNmki+PyxSS9jzHvuk=
Subject key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2EB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:31 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.130.248.0/22
IP: 2403:c1c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11961 (0x2eb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:31 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:4b:54:e4:99:10:10:3f:e8:3b:97:ca:3f:
fe:bd:f2:04:54:3f:46:f8:f1:91:79:18:62:f8:06:
f0:af:ea:df:fb:4f:1f:6f:56:a6:c3:1b:85:e9:6a:
e6:ce:08:dc:56:32:2f:5a:cd:3c:d2:19:9e:dc:c6:
3a:1b:ad:e9:f8:e3:22:04:f2:9c:f3:24:52:08:b3:
22:6c:4d:6e:5d:36:bd:92:d6:10:51:6b:17:e9:1c:
16:92:99:4f:ca:c6:70:39:77:21:d9:8a:11:e3:b8:
a8:18:b9:da:cf:90:ef:2c:21:ae:26:1e:a6:f5:06:
50:26:b1:1b:ab:24:ed:eb:dc:3c:4a:01:e7:a6:89:
6b:1b:63:2b:a1:32:8e:6f:6b:04:4b:fc:5c:a4:49:
99:48:01:51:f5:7c:89:2e:8b:60:50:fb:2c:78:31:
93:e0:4f:4f:ed:b2:f4:1c:40:1c:a4:e8:19:fa:65:
0c:82:61:dc:07:6b:cf:39:a3:ef:b0:ce:f5:ad:bf:
6d:2a:27:71:f7:f6:f4:98:9b:3e:75:0d:1c:f0:ec:
3d:31:ac:cd:18:d8:88:4d:8b:f5:08:55:59:83:d8:
d1:51:14:a7:9a:62:df:54:af:4c:5e:96:e7:0e:d9:
d3:47:d8:5e:9b:f5:1c:4c:c7:2e:98:d8:4e:9d:7f:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.248.0/22
IPv6:
2403:c1c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:c8:78:7c:98:18:00:61:7a:09:08:15:f7:1c:8a:41:74:51:
0e:c1:58:79:d8:b4:ce:04:29:35:11:b0:1c:c6:35:d6:91:47:
0f:bb:b4:14:f4:49:96:a1:24:98:9d:77:60:7e:2e:0e:8c:e5:
2a:29:aa:84:a9:16:66:01:5c:22:f7:0d:5d:c6:0d:7c:fb:6e:
51:d8:d4:40:e3:e4:d4:ae:ac:0b:4b:eb:13:98:a6:12:79:b9:
59:48:1b:cb:6c:14:21:f2:cf:b5:09:12:ec:ef:7c:79:3b:95:
16:66:e9:a8:1e:6a:14:63:16:f0:e5:69:61:59:78:ab:1f:0f:
a7:a3:22:67:6b:9d:f0:91:80:25:b6:35:1a:42:cc:f2:13:f5:
ce:45:47:f0:3e:dd:b1:b1:3a:23:cd:3f:1b:c8:1e:c8:03:72:
8b:e8:1c:a6:dc:0a:ed:c2:7f:60:15:9b:cf:a6:93:35:0e:4f:
55:ad:25:3a:f6:3c:7d:d4:27:8e:5f:9a:e0:1b:b6:6a:28:54:
7e:e8:17:f1:7b:f6:49:84:91:27:b6:d0:db:3a:62:13:c7:6c:
42:66:b3:a5:36:3a:89:11:8e:f8:df:d4:86:1e:4e:a6:46:1d:
c2:93:9b:f2:39:d0:fa:7b:3c:01:8e:e8:71:45:f3:1c:41:54:
a1:7b:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:22:09 2025 by rpki-client