Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/k9lrBpm-uhV9UFSAKbwReSmtIOc.cer
File: k9lrBpm-uhV9UFSAKbwReSmtIOc.cer (raw, json)
Hash identifier: 3e7FRfq8p1y2Ge6jfXo2oKHN3yQGtuE5kBQL0eJPyHk=
Subject key identifier: 93:D9:6B:06:99:BE:BA:15:7D:50:54:80:29:BC:11:79:29:AD:20:E7
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 32ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 10 Jan 2025 05:35:06 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.118.148.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13037 (0x32ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jan 10 05:35:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=93D96B0699BEBA157D50548029BC117929AD20E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:aa:50:2d:ec:b6:ef:38:96:81:03:29:a7:
b1:74:87:54:fa:53:4d:11:44:ef:12:bf:11:20:1b:
fd:e3:38:09:88:e7:71:83:fe:59:0b:c7:1d:91:31:
b1:99:88:45:5b:8f:b1:ba:c4:14:df:2e:ea:a8:9d:
95:18:c5:be:a6:ea:7d:32:a5:1c:14:4c:b2:36:0d:
8a:a9:67:fb:f9:9d:60:e0:9b:9e:c3:a4:4f:b3:85:
ac:55:9e:a6:94:ef:61:c0:3c:c6:f4:f9:33:4c:7c:
f3:be:01:a5:57:09:2e:d7:fc:05:d0:4c:d2:82:3e:
6c:87:ef:34:00:a5:e4:d6:58:7b:10:72:b5:34:1b:
88:04:58:9c:bd:e1:b2:79:bd:f3:ea:85:51:e3:c7:
1f:8f:7b:b2:ce:20:07:6d:86:8d:05:4b:08:e0:44:
e8:bc:53:aa:f1:20:db:91:21:df:90:8a:1d:fb:a6:
ae:9f:6a:0f:70:50:48:50:d7:ae:06:3a:d6:9f:e0:
e5:e9:4c:9f:18:50:f7:9a:fe:42:35:1d:50:40:9c:
b7:44:ce:89:81:43:0b:85:9a:86:69:8c:ef:51:b6:
a5:f1:d2:21:91:34:8b:dd:cc:c1:d2:6d:63:f1:b5:
e6:8a:7b:df:37:c5:41:d8:3d:c5:40:0f:a2:1a:33:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:6B:06:99:BE:BA:15:7D:50:54:80:29:BC:11:79:29:AD:20:E7
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.148.0/23
Signature Algorithm: sha256WithRSAEncryption
17:69:fd:81:c3:80:61:67:d6:d9:86:32:ce:ce:82:c5:a9:9e:
84:c0:49:39:9f:e4:c4:20:7f:97:d4:fb:65:9e:cb:e5:bd:2b:
ee:f3:b1:82:8f:f9:ec:16:3d:cd:06:ed:29:5f:16:66:1d:87:
b7:8c:19:a6:5b:02:2a:1d:4c:3b:69:e1:98:06:a9:e4:0a:b1:
44:df:82:3d:69:4c:87:5e:0f:e5:70:9f:25:9b:c4:5d:97:9f:
dd:81:6f:b5:40:5b:e5:94:0b:04:d0:ad:a2:e6:e2:b4:c9:b0:
43:df:eb:36:c2:93:f4:18:0f:ab:7c:1b:3e:5e:31:da:a3:6a:
cd:30:2c:13:c1:8f:7d:42:27:85:54:af:fc:7d:aa:98:6b:da:
a6:ee:ac:cb:2a:b4:d9:5c:35:a4:c1:ee:32:c2:ac:29:92:c6:
b7:68:85:25:73:f1:07:3a:30:28:46:e4:65:6d:29:9d:c5:34:
62:d8:11:55:42:42:00:51:ae:36:bd:65:a0:74:8f:ac:c1:23:
85:1d:09:26:b2:b0:4f:1b:08:8c:2b:48:94:f2:0f:e7:80:fb:
af:0b:f6:19:9a:b6:dd:5d:2b:b0:04:0c:37:1b:75:3c:f7:71:
74:61:ca:54:19:40:af:d5:e1:db:14:23:4b:24:03:b4:3a:5b:
e0:08:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:33:45 2025 by rpki-client