Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
File: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer (raw, json)
Hash identifier: UVC82hZYx+FHS4WjVroo3w78EGGnJeUO/XNWPtBdsQw=
Subject key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3355
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 14 Jan 2025 08:25:27 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 150760
IP: 180.94.30.0/23
IP: 2401:5220::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13141 (0x3355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jan 14 08:25:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:64:e5:e3:3e:be:17:cd:16:02:8f:64:7d:
dd:5b:4d:9c:d1:af:75:88:20:75:27:0e:a5:0b:78:
c0:d8:bb:a5:d7:40:37:4c:24:8b:99:1f:62:23:67:
97:04:3e:9c:55:c6:33:59:04:e1:3e:39:c7:32:10:
92:04:55:64:ec:eb:6f:3c:e3:10:73:62:20:6b:72:
7b:c1:c5:65:4e:58:14:8c:72:f3:3d:31:1f:2f:83:
3e:fb:4f:d9:06:ac:37:bc:c6:4f:75:c7:f5:75:d2:
59:1c:d8:42:6c:33:0b:25:4a:05:04:5f:43:7a:3e:
5a:f5:8d:f0:8e:42:01:2b:8f:96:92:13:6b:8a:04:
08:ac:34:e7:ff:79:01:05:db:cc:2c:cf:a0:86:8b:
a8:92:9a:fa:8f:fc:cd:73:1a:71:64:f8:9b:fa:d3:
7c:50:09:ba:13:dc:e9:a4:e9:d2:cc:d2:87:5c:44:
70:67:f2:e1:59:d2:3c:f9:a7:1e:89:9a:ae:fb:e1:
25:2f:ee:4c:75:ae:02:18:42:f5:91:95:5d:af:88:
57:a8:aa:2c:2c:06:1a:8a:1f:27:b8:4a:3b:db:d2:
38:90:b4:30:f4:71:b4:24:5a:a8:84:d4:87:35:26:
b7:c0:0c:fc:66:f8:f1:f9:52:97:10:e8:06:bc:a8:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150760
sbgp-ipAddrBlock: critical
IPv4:
180.94.30.0/23
IPv6:
2401:5220::/32
Signature Algorithm: sha256WithRSAEncryption
1e:33:b1:ba:fc:bf:c0:16:e6:16:1c:db:54:dc:a9:d4:86:1b:
73:3e:d9:07:e0:db:14:4c:7a:dc:60:f4:bb:d7:dc:f1:69:94:
55:71:3a:df:e4:8d:a3:ca:ea:ab:f5:f1:02:a6:9e:7d:f8:5c:
40:98:35:7e:34:81:4b:82:ac:93:67:52:ce:0c:60:78:45:e8:
01:16:a2:b0:ed:59:c1:4d:2a:96:8f:20:2d:9f:6c:3e:c2:18:
d4:95:ea:e6:0b:84:14:9c:09:ce:06:74:d0:ab:67:49:8a:71:
22:8f:5d:3d:e1:82:4a:b2:0b:6a:42:fe:25:f8:66:4f:54:81:
94:4d:36:33:e7:1c:cb:2b:54:e8:8d:dd:64:69:a0:a7:ea:97:
71:6c:79:f0:4d:2b:40:db:d0:12:5a:96:e2:b1:08:77:5e:26:
3b:b8:4b:cd:dd:1f:52:06:32:53:29:b7:0d:04:05:73:53:51:
b2:b5:25:e8:87:d5:3d:c3:26:ee:9e:96:e3:e6:9a:82:16:a1:
95:33:70:9d:0e:97:da:ef:18:61:bf:e3:41:3f:56:86:f0:95:
fe:29:74:73:e3:55:84:3e:a3:45:3e:a6:49:e6:09:3c:74:76:
23:61:26:7f:4f:f1:19:70:87:22:28:d6:b7:e0:7f:8d:8d:ca:
02:3d:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:20:01 2025 by rpki-client