Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/lwDAaO-pprLmh5MQya6gMNyLKtE.cer
File: lwDAaO-pprLmh5MQya6gMNyLKtE.cer (raw, json)
Hash identifier: nlO0+3nk7qBxprYSeIK/KH+0e2127yohgTwtnZmiSt0=
Subject key identifier: 97:00:C0:68:EF:A9:A6:B2:E6:87:93:10:C9:AE:A0:30:DC:8B:2A:D1
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/lwDAaO-pprLmh5MQya6gMNyLKtE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 13 Jan 2025 06:35:47 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.6.124.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13111 (0x3337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jan 13 06:35:47 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9700C068EFA9A6B2E6879310C9AEA030DC8B2AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:a5:3a:76:94:84:b9:b1:f2:8c:56:59:e7:
95:bf:f7:b0:97:d4:ea:33:f5:c1:bd:53:d9:94:6a:
b5:dd:f2:8f:16:af:59:8a:91:a6:37:6c:8b:59:48:
08:8e:1e:00:a7:28:74:a5:3f:45:77:e5:f1:9f:71:
e4:32:98:2a:e4:f7:8a:06:3d:fd:d8:e7:9c:72:7a:
ae:ef:d6:7b:c8:00:df:b9:6e:14:51:9c:5b:4d:62:
b2:f2:63:1d:ca:d4:72:68:77:8e:5f:50:1e:f8:2f:
e6:a5:bc:76:05:75:78:bb:fc:eb:30:b2:3f:79:8c:
48:c6:6a:6b:f8:7a:a5:bc:99:a2:9b:0b:55:ac:5e:
dc:2b:af:30:6f:42:27:ca:2e:9b:43:33:3b:cc:9d:
e5:b6:6c:8b:46:6b:1c:96:83:e4:c9:17:71:27:12:
04:0c:0d:13:ca:cc:29:2f:d8:33:9a:d4:aa:32:20:
c4:a2:5e:25:37:57:e5:58:45:99:16:cf:54:5c:03:
aa:1a:4c:b6:5c:6f:3b:d2:ba:d3:aa:b6:72:8b:1a:
e4:c2:9a:29:f8:8e:eb:4c:24:09:db:76:11:36:72:
23:96:73:76:1d:e8:c8:46:58:1f:13:e3:70:d7:ea:
e2:d2:b3:e8:7d:4d:1d:61:43:8d:47:31:c9:b5:25:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:C0:68:EF:A9:A6:B2:E6:87:93:10:C9:AE:A0:30:DC:8B:2A:D1
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/lwDAaO-pprLmh5MQya6gMNyLKtE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.124.0/23
Signature Algorithm: sha256WithRSAEncryption
48:bf:93:52:dd:59:b0:ce:84:06:f6:db:62:8d:1b:7a:74:76:
d0:0f:a6:39:08:01:51:c9:7f:45:d9:a6:38:47:20:f9:18:f7:
6c:8f:70:d0:1f:3b:14:cb:f9:0b:37:01:72:45:8f:6c:56:74:
68:b3:a7:75:a9:fd:8e:1d:61:ec:ad:8f:b7:dd:a2:b7:fa:71:
9b:3a:04:db:ad:63:0c:fe:c1:33:af:cd:23:45:f3:35:e1:83:
0a:dc:ef:c3:fe:ca:d0:76:b3:51:68:46:5c:93:8b:4f:df:cc:
43:ef:33:44:06:ae:3d:a1:1c:86:3c:6b:5b:fa:64:d8:c2:57:
46:bc:49:90:13:64:4a:a7:3f:20:a7:86:1b:85:72:89:e0:fb:
b8:fe:10:f3:67:69:e2:b5:85:fc:8f:66:60:32:b0:bf:1a:1c:
dd:fb:5c:62:17:a5:53:aa:c9:ef:d1:69:d1:2a:58:64:82:f4:
cd:db:c2:17:98:e6:a2:58:10:73:d4:9d:f1:52:94:dd:ee:cf:
57:dd:9b:1d:d7:9b:ed:68:ba:2e:bb:0f:b7:fa:42:53:f5:af:
b3:b6:6a:f3:d4:96:3f:2e:a6:94:ba:fd:59:d1:e3:27:66:2d:
d5:3f:24:54:41:15:40:8d:35:36:52:b1:68:5e:5b:73:b3:25:
4d:c2:70:89
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICMzcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDExMzA2MzU0N1oXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoOTcwMEMwNjhFRkE5QTZCMkU2ODc5MzEwQzlBRUEwMzBEQzhCMkFE
MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALPxpTp2lIS5sfKMVlnn
lb/3sJfU6jP1wb1T2ZRqtd3yjxavWYqRpjdsi1lICI4eAKcodKU/RXfl8Z9x5DKY
KuT3igY9/djnnHJ6ru/We8gA37luFFGcW01isvJjHcrUcmh3jl9QHvgv5qW8dgV1
eLv86zCyP3mMSMZqa/h6pbyZopsLVaxe3CuvMG9CJ8oum0MzO8yd5bZsi0ZrHJaD
5MkXcScSBAwNE8rMKS/YM5rUqjIgxKJeJTdX5VhFmRbPVFwDqhpMtlxvO9K606q2
cosa5MKaKfiO60wkCdt2ETZyI5Zzdh3oyEZYHxPjcNfq4tKz6H1NHWFDjUcxybUl
x8sCAwEAAaOCAk4wggJKMB0GA1UdDgQWBBSXAMBo76mmsuaHkxDJrqAw3Isq0TAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09MSU4vMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
Q09MSU4vbHdEQWFPLXBwckxtaDVNUXlhNmdNTnlMS3RFLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcGfDANBgkqhkiG9w0BAQsFAAOCAQEASL+T
Ut1ZsM6EBvbbYo0benR20A+mOQgBUcl/RdmmOEcg+Rj3bI9w0B87FMv5CzcBckWP
bFZ0aLOndan9jh1h7K2Pt92it/pxmzoE261jDP7BM6/NI0XzNeGDCtzvw/7K0Haz
UWhGXJOLT9/MQ+8zRAauPaEchjxrW/pk2MJXRrxJkBNkSqc/IKeGG4VyieD7uP4Q
82dp4rWF/I9mYDKwvxoc3ftcYhelU6rJ79Fp0SpYZIL0zdvCF5jmolgQc9Sd8VKU
3e7PV92bHdeb7Wi6LrsPt/pCU/Wvs7Zq89SWPy6mlLr9WdHjJ2Yt1T8kVEEVQI01
NlKxaF5bc7MlTcJwiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:56:03 2025 by rpki-client