Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
File: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (raw, json)
Hash identifier: 1bhnFoLRYe/4jrK0dOmfCRRCJSyHtPjdEmV4HbGfDfw=
Subject key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 1611
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 02:23:52 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 157.20.248.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5649 (0x1611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Aug 26 02:23:52 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F33A72AAF798105BB277F094458E464B4659F803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:c2:dd:57:d3:dd:7f:21:f7:ae:20:1f:c0:
f8:39:68:62:a8:78:7a:a6:aa:f4:50:01:23:6c:aa:
e2:90:d2:28:6f:7d:dd:9a:89:35:83:b2:fc:f5:2a:
d5:a1:92:c9:fe:e2:ee:a8:34:e2:da:5d:7e:93:5e:
b2:26:60:c9:2f:2a:67:e2:30:ed:38:d1:bd:99:33:
fc:e4:d3:e1:cf:cb:4b:b4:a3:a9:8f:97:b1:56:a7:
7c:32:44:02:80:6a:43:a1:29:1b:11:99:ee:38:4b:
6f:12:43:0d:72:15:07:d8:d2:f4:54:c6:ea:ee:f7:
8c:47:52:3e:34:02:ba:06:69:f0:9a:90:5f:84:00:
01:02:8d:e4:95:67:22:cd:02:d2:7f:6f:85:f5:af:
06:64:2a:6d:f8:d8:ec:08:95:5a:b2:74:6e:be:c6:
39:67:4a:c7:be:74:fb:e8:06:b9:b1:c4:3b:f3:05:
59:e0:e7:b5:e3:67:b0:d9:3c:1b:ca:64:78:ea:09:
db:a4:ed:c0:41:e8:84:8c:aa:06:c3:a4:ea:2b:cf:
8f:cf:2d:8e:7b:be:ae:f8:b5:51:67:fe:1f:7c:7b:
86:bd:1f:04:e4:f6:4a:82:e3:fd:2a:93:fe:8b:0d:
15:a1:98:2a:e9:61:8c:d6:cc:0b:08:3c:54:08:0e:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.248.0/23
Signature Algorithm: sha256WithRSAEncryption
92:f6:81:13:62:38:35:b2:8b:0d:f9:0d:8b:c9:6c:b7:ad:77:
2b:28:b6:75:04:67:0c:e5:f3:cf:62:f3:cf:a5:d0:bf:b6:0c:
e4:20:ad:09:e4:6a:e1:07:7a:99:31:a1:8b:b0:c5:1b:67:15:
40:7e:75:f0:61:da:58:7a:d5:71:a6:c2:72:8e:07:bc:fe:b1:
f4:df:f2:b5:fe:96:5f:92:33:79:4e:85:25:21:7d:03:04:e3:
a1:93:2d:78:be:3f:a7:55:de:1b:28:7e:6e:bf:14:a6:8a:d8:
0e:34:81:2b:69:c4:33:32:e2:2d:53:52:89:34:19:d0:30:b8:
31:10:48:ef:c7:68:e5:29:2d:51:69:dc:e3:01:fe:e0:d6:65:
82:09:94:3e:c9:ce:c9:6e:09:fd:a5:5c:d0:5f:b6:5d:88:c6:
93:44:83:65:02:19:62:8e:ea:8e:ed:46:2b:95:18:87:02:ee:
33:3d:38:68:6e:a5:16:a9:a0:88:b1:9a:f0:eb:94:2f:5d:e0:
12:d6:ab:e5:8e:e0:da:a3:d7:13:0b:1e:8a:5a:2e:34:65:c0:
f8:7a:2c:58:79:8a:ec:46:f2:2a:9a:14:d5:8f:42:c8:7a:28:
08:4b:bc:ad:4a:63:59:82:1e:65:56:78:fe:d8:b6:15:ce:67:
e9:75:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:29:46 2025 by rpki-client