Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
File: KY7S_WrVxbVoffYUonXC_ISNTpQ.cer (raw, json)
Hash identifier: 5/fYSKvF9Aok17QGRjFpcqQ/uAukNyThIMmVXg6/hLM=
Subject key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2ECF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:32 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.159.206.0/23
IP: 2406:db40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11983 (0x2ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:32 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:d2:2e:0c:54:e7:df:51:36:82:19:89:df:
e1:06:33:ca:4c:e8:ed:76:26:c9:eb:2c:06:17:d0:
05:26:8d:e2:22:3a:94:3b:12:a5:3b:b4:86:d7:ad:
1d:0a:26:22:2c:04:ee:b0:21:b8:b6:97:ca:91:a9:
15:74:6c:1d:d8:c2:65:09:78:83:8d:99:26:6a:2b:
8e:3f:95:37:71:f3:20:f9:9e:73:77:05:2e:d8:f2:
2e:81:91:9f:c1:8a:a5:ad:6c:40:02:3c:a7:18:a1:
13:44:8f:a3:33:e5:ce:aa:ca:6a:02:5d:e4:39:bc:
3a:0f:89:3c:3f:82:2d:85:88:ef:51:9b:b7:2a:a5:
d8:2e:8b:f7:79:49:71:e6:e4:ba:c4:24:1e:ec:ad:
6b:d9:4f:83:34:a4:7a:e7:ce:57:0b:cd:8c:0c:f9:
5e:e4:9f:8d:b4:b2:ad:05:65:c8:34:1e:d7:e8:92:
b9:87:7b:68:07:f0:87:d4:ba:d6:45:91:d1:23:95:
c9:56:c3:75:5e:01:20:f7:a1:8a:b1:15:55:a5:13:
59:35:64:3f:a0:87:56:14:b3:53:3a:c6:cc:12:66:
ab:09:84:42:18:94:55:de:98:4d:4d:bc:25:a4:fb:
a6:25:58:90:65:5b:5f:69:62:8d:bf:11:1c:b8:0e:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.206.0/23
IPv6:
2406:db40::/32
Signature Algorithm: sha256WithRSAEncryption
06:9f:37:03:c9:5a:4f:77:91:a7:f5:cb:36:b2:cc:be:d2:39:
f5:0c:8e:46:9f:02:80:23:1b:4f:96:20:74:4d:7a:2a:81:b4:
2b:a9:c5:03:b8:2b:62:27:56:61:1f:57:ab:5e:78:c9:e9:13:
d6:12:de:4a:0c:53:94:a0:f4:b0:a0:64:d6:f3:df:af:e9:e6:
21:9c:84:37:be:49:33:45:f2:4f:68:f8:b5:95:ae:69:50:1a:
a9:7b:ce:5c:a0:24:0b:8a:c0:eb:78:1d:24:c9:6e:e3:8f:0c:
16:bf:47:3f:09:c0:6d:23:45:66:14:67:aa:96:e1:fb:70:12:
fa:22:90:2a:da:dd:13:f7:3d:e2:d0:92:da:3a:19:83:cc:1c:
94:15:a2:ba:b0:a5:b5:55:82:14:7d:18:23:4f:f9:10:04:53:
f5:5f:c5:4c:9d:13:71:c4:ce:fa:ad:81:a8:5b:5b:99:9c:2a:
6e:25:e7:4b:24:0a:b7:08:56:33:41:ef:a1:d4:69:5f:b1:61:
d9:d5:b8:a9:0e:f8:6e:f0:09:c9:9c:53:d0:26:a6:59:8a:f9:
c9:af:ac:6e:69:48:88:5e:2b:d5:34:ed:72:a5:80:bf:f9:d3:
73:83:8a:00:e5:60:32:7c:28:f2:4f:02:43:fb:a7:86:c2:6c:
15:29:21:35
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICLs8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTczMloXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoMjk4RUQyRkQ2QUQ1QzVCNTY4N0RGNjE0QTI3NUMyRkM4NDhENEU5
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN1e0i4MVOffUTaCGYnf
4QYzykzo7XYmyessBhfQBSaN4iI6lDsSpTu0htetHQomIiwE7rAhuLaXypGpFXRs
HdjCZQl4g42ZJmorjj+VN3HzIPmec3cFLtjyLoGRn8GKpa1sQAI8pxihE0SPozPl
zqrKagJd5Dm8Og+JPD+CLYWI71Gbtyql2C6L93lJcebkusQkHuyta9lPgzSkeufO
VwvNjAz5XuSfjbSyrQVlyDQe1+iSuYd7aAfwh9S61kWR0SOVyVbDdV4BIPehirEV
VaUTWTVkP6CHVhSzUzrGzBJmqwmEQhiUVd6YTU28JaT7piVYkGVbX2lijb8RHLgO
GpUCAwEAAaOCAlswggJXMB0GA1UdDgQWBBQpjtL9atXFtWh99hSidcL8hI1OlDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF
hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFROUy8wVQYI
KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9U
VE5TL0tZN1NfV3JWeGJWb2ZmWVVvblhDX0lTTlRwUS5tZnQwMQYIKwYBBQUHMA2G
JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAFnn84wDQQCAAIwBwMFACQG20AwDQYJKoZIhvcN
AQELBQADggEBAAafNwPJWk93kaf1yzayzL7SOfUMjkafAoAjG0+WIHRNeiqBtCup
xQO4K2InVmEfV6teeMnpE9YS3koMU5Sg9LCgZNbz36/p5iGchDe+STNF8k9o+LWV
rmlQGql7zlygJAuKwOt4HSTJbuOPDBa/Rz8JwG0jRWYUZ6qW4ftwEvoikCra3RP3
PeLQkto6GYPMHJQVorqwpbVVghR9GCNP+RAEU/VfxUydE3HEzvqtgahbW5mcKm4l
50skCrcIVjNB76HUaV+xYdnVuKkO+G7wCcmcU9AmplmK+cmvrG5pSIheK9U07XKl
gL/503ODigDlYDJ8KPJPAkP7p4bCbBUpITU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:40:01 2025 by rpki-client