Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
File: IsUSmNl6ECkCcx_cSb36s51Sqys.cer (raw, json)
Hash identifier: MS2aAo7OtamzCxM/8v96n1HTXIHITO8hXrQ1EA7mWUc=
Subject key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 331F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 13 Jan 2025 06:35:46 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.177.32.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13087 (0x331f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jan 13 06:35:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:8f:ca:37:64:2f:bc:61:aa:86:c1:a4:c1:
69:9c:ad:b1:bf:ad:bc:61:9b:03:51:d5:2b:aa:b6:
9f:66:10:a4:12:d8:65:ef:4b:e4:76:86:3d:81:47:
57:ab:b8:3a:4e:3f:69:ef:76:e7:e6:66:be:6b:61:
f7:9c:d8:09:37:e4:4d:0a:76:8b:d9:57:ba:68:cf:
3c:fc:11:30:21:b8:6f:33:09:a0:86:22:e3:29:33:
81:3f:14:f6:19:b5:f9:38:d0:c8:df:1a:e8:ec:b8:
dd:2a:72:9b:d2:3b:d9:8e:61:c8:a7:0d:ab:af:3a:
67:d3:ca:89:7f:97:e8:b2:50:c0:de:7c:6f:8c:45:
35:91:bf:7a:43:82:0c:e3:8f:74:f9:63:77:c7:d1:
dd:28:56:02:33:32:bc:25:96:bf:a3:67:94:4d:cb:
60:83:cc:9c:29:9a:8e:1f:f7:45:d8:6a:e9:13:00:
b4:11:25:97:fa:4a:c7:a0:84:4f:18:a1:d7:75:82:
8a:c5:08:ac:24:20:4f:80:10:58:cd:fc:ee:bc:6e:
e7:0d:19:ad:24:d4:11:96:7c:1f:d1:74:77:13:c2:
df:50:bb:bb:60:f4:4e:8f:00:be:cd:de:bf:24:9c:
24:a0:f5:39:0b:41:65:09:88:62:f2:94:b2:eb:45:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:6f:65:1b:25:d4:01:70:d7:41:29:ab:c5:dd:cb:f4:77:e2:
50:21:4a:bb:63:4e:eb:e2:07:aa:8d:3c:6d:67:4e:9f:ac:9d:
b0:f1:03:a9:af:c8:d6:2f:b2:93:79:69:a6:f3:ee:6f:f5:d9:
e0:c6:0f:73:9b:5a:50:81:ce:c7:65:2b:a8:6a:f5:9e:b3:06:
05:f2:bd:ac:8d:85:77:22:40:42:80:25:b9:ce:d4:63:0f:19:
3d:3f:74:bc:69:4a:9e:e4:09:ac:03:c6:e6:87:eb:d9:52:9f:
47:2d:c4:c1:43:09:6e:6f:eb:2d:0b:8c:0b:a3:37:75:02:ee:
4a:16:1e:65:37:2f:74:c2:9a:c5:7c:dc:3e:6b:a5:a5:e8:61:
46:86:45:94:e5:92:35:f6:38:58:19:df:8f:1e:1b:cb:08:5e:
1d:00:2a:fd:09:a7:6d:5c:51:fc:69:a8:e8:32:de:94:a1:16:
90:f1:58:23:36:48:d3:f3:b7:fa:b7:46:6e:38:23:43:52:52:
f1:cf:c3:05:11:38:1c:27:e8:72:ff:fe:79:39:e1:ae:20:49:
74:dd:0a:78:f3:f4:26:5c:42:65:7c:cb:72:ed:e6:bf:01:dc:
52:85:6c:92:9a:5e:68:6f:7c:52:ff:81:60:bc:e3:8e:9b:43:
91:0b:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:37:35 2025 by rpki-client