Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TwAMtt3TdIem3h9-rb2hJwjrLBk.cer
File: TwAMtt3TdIem3h9-rb2hJwjrLBk.cer (raw, json)
Hash identifier: naeKf9clIR7UVHHwK/P5e/E2ZDmU5Fol/ih1U6VpMkE=
Subject key identifier: 4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 1893
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Thu 19 Dec 2024 01:58:59 +0000
Certificate not after: Fri 07 Nov 2025 15:30:19 +0000
Subordinate resources: IP: 160.191.202.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6291 (0x1893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Dec 19 01:58:59 2024 GMT
Not After : Nov 7 15:30:19 2025 GMT
Subject: CN=4F000CB6DDD37487A6DE1F7EADBDA12708EB2C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:57:fc:7c:c2:94:14:19:7f:ae:44:cf:49:
ce:99:f3:05:90:eb:26:f4:02:d7:fc:60:ec:e5:db:
46:b9:d7:13:07:cb:40:18:03:6e:a5:98:f3:72:d0:
8b:e9:e8:85:34:cb:a3:83:e5:1f:a6:d2:2b:a4:91:
8f:af:c6:24:20:94:e0:12:f0:ae:56:9f:96:54:99:
6c:8a:0d:92:ae:04:99:33:d4:1a:6c:6b:63:1b:6e:
7e:c5:0b:26:58:51:cc:6b:7a:c4:f5:8f:46:9b:8e:
2e:09:ae:b6:aa:21:36:5a:d3:ee:5b:02:95:d9:ba:
d3:9c:e9:8f:fd:c1:b3:3e:4e:5a:3d:5c:bb:bb:5b:
01:27:0c:e2:ce:7f:d0:17:f5:cf:c0:2c:fb:64:79:
84:a8:f3:ba:2e:cf:77:46:70:75:a7:17:2d:e4:e7:
45:1d:dc:50:8c:89:a4:68:4d:99:c2:79:12:d8:0a:
9b:8d:2f:7e:d1:e1:93:ec:b3:cb:e5:f0:58:77:12:
fb:1f:23:31:82:c2:fa:79:ff:31:3e:fd:1f:0a:c9:
0a:9e:c0:98:15:25:8e:92:62:67:c4:38:67:32:f0:
4c:ec:36:3e:dd:dd:dc:e7:32:37:35:52:a8:13:5e:
2e:b2:21:99:c5:42:7a:79:f9:c5:50:76:5c:4a:f4:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.202.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:5a:57:d6:bc:17:a8:0d:7f:6d:59:b7:e0:88:ad:62:d1:1e:
b7:c0:ac:c4:75:5d:7d:64:4c:7c:7f:cf:63:12:db:ce:8e:c8:
c5:28:cd:3d:35:49:ed:51:ba:cc:53:59:e6:54:6f:ac:a7:5d:
d6:d6:33:94:95:92:60:7a:77:fc:b5:54:aa:b2:0a:18:e5:8c:
11:3f:49:8b:e7:c3:01:c5:b6:27:f5:eb:fc:26:ae:17:ac:68:
24:29:75:2e:f9:a8:9b:5e:ce:a9:78:0d:87:53:54:62:7a:42:
5d:44:82:cb:7d:ea:cd:7b:11:eb:4f:c2:8b:c9:b2:e6:d3:f9:
7c:76:d8:b6:17:8b:8d:1c:fb:cb:b7:ae:52:a0:3a:76:89:58:
aa:6d:e6:41:fe:04:f7:33:5c:45:b1:51:30:42:ff:6b:86:2b:
ba:0d:8c:a0:19:aa:51:09:24:60:79:04:c4:5b:2f:8a:14:c3:
b8:0b:b8:db:c2:10:ee:67:a9:5b:cd:5b:6f:ac:bd:d4:48:c5:
7a:f1:2b:91:9a:ff:91:2c:fd:62:c8:40:3c:ff:46:3f:51:b8:
07:c2:b3:bb:79:34:a4:79:5c:9e:10:3b:cf:ad:14:5f:9c:10:
27:4d:6b:91:15:46:92:14:ab:a9:d8:aa:a1:f2:1f:6f:3a:fb:
49:b4:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:42:35 2025 by rpki-client