Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Ay0zZk94CyxQHuYj57vx0iayYkg.cer
File: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (raw, json)
Hash identifier: 69YT660aHwW/dmp6bRXoPdEHUD+RCLczZzHBiEyQvIw=
Subject key identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 17B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Thu 07 Nov 2024 23:50:05 +0000
Certificate not after: Tue 04 Nov 2025 15:30:21 +0000
Subordinate resources: IP: 160.191.168.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6072 (0x17b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Nov 7 23:50:05 2024 GMT
Not After : Nov 4 15:30:21 2025 GMT
Subject: CN=032D33664F780B2C501EE623E7BBF1D226B26248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:07:7a:9a:c1:99:e0:ef:d5:6b:2b:5d:7d:
45:2f:5a:bb:95:3c:ad:3f:b8:b7:3e:b4:48:42:7e:
13:8a:dc:67:d8:13:c2:6f:c2:09:e6:ca:94:ba:14:
ea:19:2c:e6:69:2b:8c:cd:67:88:37:c1:86:41:a2:
49:ec:9e:74:74:c7:4e:9d:7c:e4:88:00:26:51:c0:
a3:09:1e:34:a5:ee:f6:44:0d:b6:17:8f:cb:d5:84:
69:cb:4b:ef:2d:06:d6:60:a6:54:0a:e7:55:11:69:
6c:b4:db:4d:6f:48:42:29:8d:b5:3e:5b:7b:f8:42:
83:84:2c:9e:3d:81:10:e8:f3:1f:50:f8:8f:00:d4:
ef:3c:a9:39:3f:58:5a:bc:0d:f1:c4:98:a4:a1:92:
ad:49:16:96:54:4b:96:7a:09:86:d7:03:d7:9a:d3:
78:22:40:6a:b6:10:d6:48:58:77:f2:7f:d5:2b:ea:
da:81:17:35:23:c4:9a:fd:d7:97:46:e4:f6:83:4a:
4c:3b:26:a2:f4:17:72:0d:96:9e:06:6f:1d:2b:b9:
63:a6:57:78:09:3b:e5:9a:11:83:73:f5:51:08:5a:
19:79:a9:ff:17:11:37:55:96:35:9c:91:b3:89:a8:
ec:87:67:24:72:46:2a:58:7e:af:bc:ae:a3:c0:72:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.168.0/23
Signature Algorithm: sha256WithRSAEncryption
63:ce:9d:ff:d8:8f:35:bd:e1:80:8d:4e:ea:a2:1c:37:35:05:
82:dd:db:94:8a:49:b3:42:2e:f7:15:48:01:ca:ee:85:59:a0:
25:53:3e:72:5c:41:b4:b8:6d:c5:e0:c0:cf:20:fb:94:be:88:
ac:21:e1:a5:1b:1a:49:02:da:27:d1:40:4a:e7:80:a8:24:1d:
74:2b:bc:9f:5e:0f:65:66:84:52:14:5d:1d:12:4b:80:ad:4c:
00:8c:aa:9b:d3:7e:a5:33:49:72:9a:cb:87:3a:51:7a:dc:8d:
34:d0:cd:0f:73:bd:42:87:02:4d:7d:61:3e:d9:b4:2a:98:e8:
9e:dc:cf:18:11:a8:f2:af:9e:80:e1:2d:e5:4c:d6:16:d6:b2:
7d:6e:49:8e:98:82:d9:32:13:1d:ad:78:3f:db:8e:a7:fc:3b:
39:24:29:7b:ad:7c:0f:0f:92:14:9d:0e:0b:70:d5:bc:0f:d2:
d5:66:40:e5:d7:ff:0d:60:90:b1:9a:a9:25:5e:fd:15:8f:aa:
fd:b4:24:a8:e9:44:d6:ff:e5:4c:7d:b1:b4:c6:7d:ce:3b:fa:
1a:db:18:63:c1:de:9e:27:0c:f7:82:00:69:91:8a:af:f6:18:
95:2e:38:53:34:40:9a:72:ea:7e:34:5e:dc:8e:0b:1e:2e:8f:
7c:0d:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:48:30 2025 by rpki-client