Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
File: g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer (raw, json)
Hash identifier: Qtp2alvBmiLEzWPuavMMKQScFOBLQF0kH1SHi/GyQ0s=
Subject key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 13 Jan 2025 06:35:48 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.254.212.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13123 (0x3343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jan 13 06:35:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:e0:36:f7:12:fe:09:bf:0b:2c:eb:f9:de:
3f:92:ec:c0:ea:b6:21:d7:a6:32:cc:59:12:99:27:
be:10:ca:ca:ab:8f:16:1a:07:9b:15:7e:c8:09:16:
18:df:f5:71:16:ae:31:6f:95:ee:d1:46:ad:ea:e0:
e3:94:5a:d1:8d:e1:f8:ee:20:27:cc:09:76:11:51:
13:ee:07:28:11:ca:d2:52:71:d2:05:48:80:89:92:
c5:d1:c2:9d:e3:84:5e:58:e7:bf:54:4d:b3:4d:04:
07:43:6c:d5:b0:fb:40:e1:1f:a9:52:68:1e:5a:b4:
7b:ff:18:00:3b:d9:44:82:2a:8d:9e:1b:d6:51:c2:
bf:43:21:7e:0c:14:29:5d:51:a2:5d:78:07:db:e3:
93:68:97:42:68:70:bd:97:ef:72:e9:0d:73:27:53:
c6:8b:82:84:37:a6:a6:d8:e8:31:dd:d2:f7:68:3d:
82:2f:c6:35:ad:e9:72:2b:68:28:60:0f:db:ed:bd:
6d:0f:8f:44:f8:2e:c8:12:ef:b8:60:77:e9:fd:95:
e5:62:0d:fa:25:7e:8e:b9:b3:0d:36:54:5a:06:c5:
ef:5a:ec:16:36:cb:e1:33:6b:3c:b0:2f:c4:88:62:
77:ba:1a:b9:82:c3:35:16:d9:a8:63:22:b8:44:10:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.212.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:76:6d:27:55:49:4b:10:bb:d5:d0:cb:d5:99:e7:0c:1b:08:
e0:4f:21:75:f1:45:cd:c5:53:45:f4:67:3b:cf:a2:f1:f9:69:
ec:90:bf:75:25:c2:43:0b:c6:f2:0d:59:eb:e9:17:28:74:2a:
8a:a3:6e:11:5f:b2:64:6c:c5:c0:d3:cb:00:37:42:03:d2:f4:
29:81:fc:2f:2a:5f:85:fd:f2:a0:19:6c:ff:2f:9f:8b:c2:ec:
05:7b:7f:08:c9:b9:2f:37:57:59:fc:6b:f1:ee:8f:10:bb:1a:
5a:e6:6a:2a:84:d0:6e:fa:fc:b5:54:20:aa:b7:f7:e5:7e:28:
bc:e0:5c:1d:02:b7:33:ef:a4:61:98:ae:e5:c2:c2:36:50:44:
d3:4c:89:bd:16:57:7f:a1:a8:a6:be:70:e5:06:e7:d1:5a:8d:
3d:f9:6e:c0:8c:7d:b1:01:c3:b6:29:4f:48:9c:a1:88:92:c9:
af:8e:7e:cf:92:ef:7c:d8:ad:7e:ec:be:1d:c1:1e:1b:55:53:
f1:6b:db:66:5f:f9:ca:ae:db:3d:53:f1:ad:47:ca:e8:39:a5:
bb:b0:5f:74:eb:18:eb:ad:37:5c:cc:ec:6f:22:8c:c0:bd:7a:
fe:f6:a2:76:e0:e3:92:ab:08:c2:28:bf:d6:57:db:de:a8:5a:
2f:99:98:1a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgICM0MwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDExMzA2MzU0OFoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoODNBQ0ZDNDY2MDlDMTY0OUFCNDYxNkQyMEQ2NEM5RDE1RDgzNEM2
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMyU4Db3Ev4Jvwss6/ne
P5LswOq2IdemMsxZEpknvhDKyquPFhoHmxV+yAkWGN/1cRauMW+V7tFGrerg45Ra
0Y3h+O4gJ8wJdhFRE+4HKBHK0lJx0gVIgImSxdHCneOEXljnv1RNs00EB0Ns1bD7
QOEfqVJoHlq0e/8YADvZRIIqjZ4b1lHCv0MhfgwUKV1Rol14B9vjk2iXQmhwvZfv
cukNcydTxouChDemptjoMd3S92g9gi/GNa3pcitoKGAP2+29bQ+PRPguyBLvuGB3
6f2V5WIN+iV+jrmzDTZUWgbF71rsFjbL4TNrPLAvxIhid7oauYLDNRbZqGMiuEQQ
sDcCAwEAAaOCAkowggJGMB0GA1UdDgQWBBSDrPxGYJwWSatGFtINZMnRXYNMZDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF
hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkNBLzBUBggr
BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0pD
QS9nNno4Um1DY0ZrbXJSaGJTRFdUSjBWMkRUR1EubWZ0MDEGCCsGAQUFBzANhiVo
dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBZ/7UMA0GCSqGSIb3DQEBCwUAA4IBAQB/dm0nVUlL
ELvV0MvVmecMGwjgTyF18UXNxVNF9Gc7z6Lx+WnskL91JcJDC8byDVnr6RcodCqK
o24RX7JkbMXA08sAN0ID0vQpgfwvKl+F/fKgGWz/L5+LwuwFe38IybkvN1dZ/Gvx
7o8Quxpa5moqhNBu+vy1VCCqt/flfii84FwdArcz76RhmK7lwsI2UETTTIm9Fld/
oaimvnDlBufRWo09+W7AjH2xAcO2KU9InKGIksmvjn7Pku982K1+7L4dwR4bVVPx
a9tmX/nKrts9U/GtR8roOaW7sF906xjrrTdczOxvIozAvXr+9qJ24OOSqwjCKL/W
V9veqFovmZga
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:19:58 2025 by rpki-client