Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.cer
File: -zvqGPdIR2v3_PhP5Dvk7bx8dgE.cer (raw, json)
Hash identifier: 4YVBXtrss/jcXpVpRQPJdFR8hHrb+MtirIidGHF4k5k=
Subject key identifier: FB:3B:EA:18:F7:48:47:6B:F7:FC:F8:4F:E4:3B:E4:ED:BC:7C:76:01
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 32F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 10 Jan 2025 08:03:28 +0000
Certificate not after: Fri 09 Jan 2026 15:30:29 +0000
Subordinate resources: IP: 2401:e7a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13048 (0x32f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jan 10 08:03:28 2025 GMT
Not After : Jan 9 15:30:29 2026 GMT
Subject: CN=FB3BEA18F748476BF7FCF84FE43BE4EDBC7C7601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:a6:f4:0e:28:ef:e6:46:59:e3:45:b6:d3:
03:ee:dc:8c:7d:99:61:f2:58:8a:1b:c9:85:ff:e2:
0b:aa:bb:5b:0e:ec:7d:d4:09:1b:69:63:90:43:9a:
da:a0:eb:e7:f8:49:5f:f0:a9:74:4c:fc:10:89:06:
44:30:e2:f3:6e:e1:d7:a3:4e:e5:e2:6d:4c:e5:49:
75:65:43:03:ce:65:24:01:ea:8d:43:21:2b:2d:90:
09:ab:30:3e:7c:fc:ba:80:92:fb:2b:32:63:07:49:
f4:11:68:f5:00:15:29:8b:fd:6d:7e:bc:58:67:72:
cb:2d:fb:69:eb:6e:4d:3f:d0:97:62:89:5a:ff:55:
a5:3a:7a:f1:a7:4b:72:c2:67:c1:ab:4c:79:f0:db:
68:5d:06:22:de:1e:12:b4:b8:b7:1f:71:7a:d7:0c:
d5:63:e2:bf:f0:4c:89:58:f9:59:f2:5b:09:cc:eb:
14:47:03:ed:8c:7d:48:04:bf:b0:0f:77:f5:ea:03:
30:b8:d1:ab:c9:fd:5e:00:1e:ac:cc:7b:a9:f9:1d:
f7:f4:f3:0c:75:1e:85:0b:21:73:d5:da:4a:07:0f:
be:d5:22:c3:00:2e:e0:e1:b1:6d:b4:a0:fe:2a:f8:
b2:32:fd:1f:b3:b6:5a:c2:34:56:5a:e1:0d:98:18:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:EA:18:F7:48:47:6B:F7:FC:F8:4F:E4:3B:E4:ED:BC:7C:76:01
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/-zvqGPdIR2v3_PhP5Dvk7bx8dgE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e7a0::/32
Signature Algorithm: sha256WithRSAEncryption
1e:2a:2f:a6:20:cf:eb:b5:25:8a:6a:19:26:c3:0a:a9:50:b1:
b5:a4:35:27:b6:af:0b:43:73:2b:15:b8:5f:ee:2e:42:fc:35:
1c:2e:22:cc:30:30:1a:c3:ea:6f:9d:22:de:c2:f5:aa:19:48:
cd:54:7d:37:c0:9f:74:da:54:4a:d5:a9:e1:13:c5:28:6e:6f:
83:a7:ab:ae:67:b6:14:7a:46:dd:42:2c:ab:a2:ae:79:96:0e:
f2:fd:89:91:d3:2e:23:b7:41:13:f7:a7:70:14:48:cd:87:45:
69:40:7a:2a:65:eb:62:23:0f:46:54:ad:d8:d5:3c:4c:95:0a:
92:9d:32:01:60:cf:8d:e3:e6:f0:03:dc:51:a2:98:56:8f:32:
63:39:a1:87:7b:09:7c:cd:12:ee:77:9d:1b:31:97:79:89:76:
3d:db:16:dc:a1:3d:ca:83:46:24:8a:ed:5b:0d:e8:9a:2e:51:
79:d5:37:bc:c7:5b:e3:3b:01:21:6a:b8:32:6e:ba:5a:ef:07:
8d:bd:73:b0:79:b1:67:ee:c7:28:c0:bf:8c:2d:ec:71:f9:be:
8a:30:d2:10:eb:b5:71:1c:70:36:ef:49:0f:1f:0d:87:63:fb:
70:df:e6:17:04:5e:01:54:5a:f7:6a:8b:f1:90:f6:18:fe:10:
4b:f9:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:20:05 2025 by rpki-client