Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer
File: dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer (raw, json)
Hash identifier: pPdk/klJrS8TIWCmulWFejP7UNID/LLcahgizJji5Uw=
Subject key identifier: 76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2E1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 01:57:23 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.189.108.0/23
IP: 2400:8560::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11803 (0x2e1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 26 01:57:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:09:ca:7b:d2:56:22:bd:15:e1:77:69:5b:
61:e9:06:ba:8b:f2:f4:65:d8:de:49:79:0d:eb:b6:
0d:fd:e8:b9:66:e3:c6:67:99:9f:2a:39:f6:3d:6b:
42:09:f0:0c:a2:47:f1:7a:9e:60:aa:1f:72:73:94:
78:ab:ce:88:4a:48:a3:4c:df:2f:f8:2d:e6:bd:67:
4e:17:91:6f:a4:e1:b8:96:23:d9:78:01:57:30:9a:
e9:0e:e0:f9:2e:13:a3:64:75:6e:fd:5d:e1:ec:d4:
57:ac:00:1b:30:17:63:39:b7:37:5c:f7:34:60:31:
75:8f:9f:39:c1:af:0c:2d:25:25:11:6b:42:09:3b:
b8:42:33:17:98:ea:d5:1d:da:85:5f:3e:ce:1b:42:
a0:8a:64:2b:bb:86:79:a5:3d:32:fc:42:b1:d3:a9:
57:93:59:4a:21:98:31:05:13:36:30:6d:41:7a:6e:
db:4c:1f:eb:7b:d9:bd:87:28:06:ab:3d:96:26:97:
78:73:29:52:a8:86:f4:d0:92:20:0f:33:e4:2b:f3:
41:95:01:43:71:a1:4b:c5:93:3b:6b:6c:98:4a:82:
94:20:b6:f0:44:75:43:6d:b9:64:6a:6d:ff:bc:10:
a8:ed:a3:1b:49:85:2a:dc:27:1e:48:b9:49:a8:94:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.108.0/23
IPv6:
2400:8560::/32
Signature Algorithm: sha256WithRSAEncryption
2f:81:0c:37:7b:a7:21:7f:8e:3e:c7:ae:70:cc:eb:6a:06:da:
85:56:dc:85:85:0a:ba:ce:6b:06:f0:08:e7:7c:6d:81:2c:a4:
c0:22:0d:8d:59:0f:9f:1e:69:41:53:b0:28:95:84:d0:37:74:
ec:98:72:21:96:08:12:b1:c0:fb:a8:24:24:70:c7:b2:3f:80:
5c:ff:11:61:af:00:25:fb:cf:8b:aa:ba:88:cd:d7:36:18:f7:
1e:91:1f:e2:8f:05:b7:d9:05:37:41:5e:6e:07:33:86:2d:a6:
fb:da:c8:1e:6a:56:98:9b:18:3b:af:f1:8c:e2:6d:3c:4b:5b:
1e:05:67:1b:0e:6f:39:20:29:89:a9:a6:41:87:2f:89:f2:ce:
f3:8a:d7:c7:84:ad:a2:a7:e0:04:41:e1:18:a3:0c:1b:69:60:
77:d2:53:a7:6a:04:e9:0c:2f:72:96:35:77:3f:92:2c:5b:3c:
23:bf:62:4b:17:63:54:ac:b6:20:b0:13:06:b0:94:71:b8:d4:
ad:8f:b7:e3:42:6b:64:f3:6e:7b:0b:bd:34:2b:ad:9f:ad:6c:
04:2b:d2:d8:5a:75:a5:d2:55:6f:1e:c1:92:7b:5e:9e:0c:59:
74:87:f4:7c:01:aa:bc:7e:30:ab:0f:ef:23:0e:a1:f5:1c:af:
83:6f:a3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:19:50 2025 by rpki-client