Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer
File: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (raw, json)
Hash identifier: /9Ni0OThyEMOiww60u+X4RGCFBbqRl4vDb7BbK6BBbA=
Subject key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 161D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 02:30:51 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 160.25.220.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5661 (0x161d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Aug 26 02:30:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:d0:b8:ad:bc:04:02:3e:91:87:f7:ab:8f:
56:53:e8:6b:7e:72:2e:d7:6f:cc:9c:75:73:e5:43:
f4:e3:1f:28:e0:c1:18:50:3d:75:4b:13:33:8b:9f:
8e:97:fa:41:5d:d1:3b:f8:a6:61:1d:dc:e0:31:c6:
bc:c0:a3:0c:13:82:65:d6:2f:99:3a:30:7f:07:cb:
60:7c:c9:df:52:a8:f3:32:6d:9f:c1:68:23:81:a8:
7e:a2:13:5c:f0:a1:86:3f:d2:eb:4b:82:ea:60:24:
cf:1f:ba:25:f2:b7:ad:dd:d3:2f:3a:39:d4:2a:1f:
97:7e:20:9a:7e:c0:20:6f:99:e4:8d:cf:68:34:e0:
70:10:20:ab:54:6e:a0:09:9c:4c:ab:ff:77:54:25:
d0:a9:c1:5e:44:a5:87:ed:63:1b:78:b9:58:12:77:
39:db:6e:02:2e:4a:d4:d5:50:09:f4:ac:a8:43:f4:
fa:51:b5:66:37:91:1a:de:9a:ef:8f:5a:c9:7a:4b:
b7:28:18:f6:4b:81:83:3f:7f:36:15:33:63:44:a4:
ab:cf:7d:77:55:6c:e7:5b:33:f2:74:34:b7:ab:a6:
b8:b9:70:01:33:d8:b5:d7:5a:93:59:ec:69:70:85:
f8:88:5f:e3:0a:5b:0f:14:b1:62:7c:c8:17:63:61:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.220.0/23
Signature Algorithm: sha256WithRSAEncryption
70:fd:ad:fd:0e:d6:63:ea:ef:8d:04:7a:69:8e:64:68:94:19:
be:d8:81:c0:2c:57:89:f9:10:9c:42:6b:56:94:0c:82:8a:7a:
e8:e2:e1:15:53:b9:5c:84:d9:86:24:19:a7:41:37:b7:0a:a8:
42:15:ea:07:31:7c:c2:0b:30:05:2e:fd:be:50:c1:48:fc:ef:
e2:4e:65:6c:cd:ee:06:82:8f:ef:0c:53:52:b9:db:c9:4c:f9:
a2:99:2b:f1:1f:3f:46:89:47:73:ec:04:b5:d0:e3:36:5a:31:
cb:bd:db:44:e2:a7:20:a9:68:50:bd:b7:bc:fb:78:fb:1a:34:
ac:e8:39:da:2c:92:af:fd:31:74:bd:da:5f:7b:3b:95:03:7c:
f4:a6:51:24:72:71:38:78:ae:d6:bf:5d:70:ca:08:9e:ce:28:
c8:4e:2f:2f:7b:b9:19:fd:bb:2c:12:06:f0:75:19:72:83:73:
11:af:d9:92:8a:db:8f:e8:b3:09:9c:3c:bb:08:4e:94:11:73:
62:d4:53:07:0c:05:1f:c2:95:bb:87:9e:ba:96:24:76:67:fd:
f5:14:b8:00:24:44:01:00:ed:b3:30:06:c5:8a:37:5f:e4:31:
2f:f5:8a:df:6a:b4:ec:fd:db:0c:db:cf:6b:ef:73:4a:35:6a:
48:28:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:37 2025 by rpki-client