Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer
File: Z3gr2kgldGOtzabXLy7kG1_ZShE.cer (raw, json)
Hash identifier: 50yv2u+jjKA4qFXyt5CqElNsO14umhs1fMp+4uAxlMk=
Subject key identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3022
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 13 Sep 2024 08:18:37 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 2404:a3c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12322 (0x3022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 13 08:18:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:8e:93:25:fe:d6:3d:b4:77:b0:8d:40:a1:
4d:ec:05:52:a0:ce:be:7f:94:75:ad:8d:88:ef:49:
9b:dc:e1:cf:7e:89:06:e0:6f:db:14:b2:87:ff:fd:
a0:2f:fb:8c:a5:f5:19:9d:2b:89:27:1a:d6:c3:39:
c1:e1:46:78:dd:a6:82:c8:8f:69:c2:c2:85:25:88:
5e:78:7b:22:55:04:bb:44:70:86:50:07:51:62:81:
d8:33:35:aa:50:17:2c:4b:85:f1:4f:09:3f:49:a4:
62:36:cd:a8:dc:c6:0b:5d:8b:7c:d4:c9:06:3a:85:
c7:a4:da:3b:c3:29:57:e3:39:37:d2:0a:94:61:5e:
28:34:f3:ac:97:7e:43:72:dc:8c:e0:38:2b:4f:34:
ad:6a:ab:cc:fe:df:0d:b9:ac:1d:14:1a:f6:8f:98:
9f:a9:1c:5a:f4:77:65:51:7b:bb:d2:89:dd:c0:c6:
21:7e:a2:56:22:06:35:a2:63:87:0e:d7:08:79:d8:
6d:22:37:7b:72:7f:cf:1e:d3:8e:be:01:17:61:22:
91:fa:99:bb:02:e2:f2:29:33:60:80:18:47:03:6f:
46:9b:1c:f3:e0:d9:08:8d:a7:a6:6e:6e:70:71:98:
2e:ad:67:43:e9:83:e9:9f:65:80:18:c6:09:6c:a7:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:a3c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:93:94:b9:73:b7:c5:36:8f:fb:e0:11:8d:4c:cb:13:52:72:
61:bc:ec:fc:9d:f9:1d:35:a4:c6:2e:66:98:6f:ac:03:3d:c5:
94:88:ad:ed:7a:60:c9:7e:68:4a:92:de:97:86:78:d1:6d:40:
69:41:ed:7e:85:27:f3:e7:5a:4a:20:65:53:12:70:39:eb:25:
f8:14:1e:14:cd:44:ba:15:b9:1e:5f:93:dc:7a:4b:b8:c6:a8:
73:52:22:15:35:c0:cc:41:83:04:e9:33:74:a6:3e:50:c9:91:
7b:79:84:f6:47:7d:17:31:13:81:f4:b0:4c:48:f1:cf:fe:25:
ef:8a:36:e1:59:7f:1d:31:be:72:0b:a5:e1:87:0e:0f:aa:5a:
b6:38:da:a8:33:a3:88:af:91:e2:1f:91:56:1d:51:98:25:78:
cd:a3:45:7e:f5:ae:68:eb:2b:4c:1e:29:93:66:8d:c8:2d:b0:
e7:18:71:94:6f:79:ba:ea:a0:83:0c:ab:a8:0d:ef:b8:90:95:
9e:33:59:cd:fd:1c:66:25:db:87:d0:41:e3:ff:60:c7:83:02:
ad:51:0d:fc:82:e2:8e:70:24:2c:bd:dc:8d:b1:cd:10:32:e9:
41:f2:87:18:b3:97:56:46:3d:ed:2b:95:de:da:e8:c6:0d:f3:
fa:33:64:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:20 2025 by rpki-client