Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer
File: 0mTRm5gGAj5HbgOcBf3OE3asbDw.cer (raw, json)
Hash identifier: v6s+Gf8EKX7BD6d4p8rPrbevEOFX2AdrKEdry9PkVas=
Subject key identifier: D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 191F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 13 Jan 2025 02:03:22 +0000
Certificate not after: Sat 10 Jan 2026 15:30:29 +0000
Subordinate resources: IP: 161.248.144.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6431 (0x191f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Jan 13 02:03:22 2025 GMT
Not After : Jan 10 15:30:29 2026 GMT
Subject: CN=D264D19B9806023E476E039C05FDCE1376AC6C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:2f:38:67:ee:42:aa:62:6f:1a:67:1b:2d:
26:73:23:68:ba:b9:af:27:09:69:3f:70:e9:79:aa:
6d:c5:f7:d0:e3:1c:6d:17:36:e4:b5:8c:52:1f:dd:
04:9b:85:59:5f:b9:a6:b2:bb:08:3d:27:42:65:68:
d4:e9:3c:16:c7:f7:3b:f5:d4:36:bd:35:a9:55:53:
5a:b9:e8:35:03:49:c7:35:bb:5e:4c:67:8b:d0:17:
be:22:5a:f5:67:de:c6:e2:5b:e1:0b:8b:64:a1:93:
2d:95:9f:e9:8c:97:0c:d1:a3:56:69:cd:14:e0:a3:
3b:dc:00:cf:65:53:f5:5d:d3:13:69:bc:94:d2:e6:
4f:ab:43:59:ac:16:bc:12:39:48:0d:38:c0:e4:6d:
66:64:fd:b9:02:9f:60:69:7d:66:4a:80:3f:78:fe:
7f:87:2c:a8:2f:6e:86:73:ed:dd:01:a0:35:c4:6f:
6f:e9:a2:cb:ae:c7:a6:b6:67:04:63:c5:1b:7e:e5:
e8:ec:50:b1:a0:82:1b:05:b7:1c:88:5b:72:81:c1:
53:60:d3:e1:9a:40:d1:db:a8:20:3e:f6:27:78:b3:
77:03:24:2b:ea:9e:f5:16:6c:e0:75:df:eb:68:cf:
40:73:d1:b9:4b:c8:7a:0d:3e:ee:ec:4d:a3:e1:79:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.144.0/23
Signature Algorithm: sha256WithRSAEncryption
67:22:3b:0a:86:4f:86:22:c1:3f:14:f8:10:75:14:84:31:f0:
ca:06:ae:66:b4:d6:7d:85:d6:c3:e6:2c:b4:29:af:27:e5:53:
08:10:fb:82:f2:d1:60:7f:f6:79:36:d4:4e:a5:5d:fa:03:cb:
8b:a2:71:2c:d4:46:31:ef:76:04:e5:dc:2a:db:40:e4:df:50:
ed:4b:de:f5:42:7b:3a:54:c6:b4:49:ca:0a:95:4e:8c:1a:2e:
8d:27:c8:73:2e:41:89:9e:94:53:e9:f1:19:3b:ff:a5:b1:97:
d7:ad:a5:7a:e0:27:44:d4:b6:0e:75:c5:8b:92:ab:f8:16:58:
2f:86:a0:73:a6:ac:79:3e:c2:2c:73:c1:b6:9b:6f:c5:4f:a0:
14:ec:84:da:cc:54:9d:7f:30:28:66:e8:78:2d:90:2f:a6:9f:
a5:cf:2a:a5:4b:62:c1:a2:b5:73:ec:42:9f:10:d3:30:9a:39:
45:04:02:c1:3d:d0:c2:58:13:d2:3b:40:af:cd:d1:de:23:c2:
b8:9f:47:41:d1:12:35:c7:30:16:f8:b1:28:dd:7b:ac:47:64:
1d:ec:39:3a:cb:6c:04:68:c7:82:53:a7:a1:e9:98:b9:fe:fb:
55:99:d0:b3:44:fa:ec:41:10:d4:df:82:3e:d5:8f:9b:27:fa:
54:2e:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:19:11 2025 by rpki-client