Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/zNs-bv2p7MZ505hqJ58rlE73Tl8.cer
File: zNs-bv2p7MZ505hqJ58rlE73Tl8.cer (raw, json)
Hash identifier: yhsVG9+93vTBn7hV8YvGW5boqq5aeT+YWRmzzdF+IpQ=
Subject key identifier: CC:DB:3E:6E:FD:A9:EC:C6:79:D3:98:6A:27:9F:2B:94:4E:F7:4E:5F
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 32F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 10 Jan 2025 05:35:06 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.255.206.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13040 (0x32f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jan 10 05:35:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CCDB3E6EFDA9ECC679D3986A279F2B944EF74E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a7:88:d6:2d:73:ca:0e:eb:46:be:c4:f5:a3:
10:bf:3c:9a:7b:1f:69:c0:c6:38:86:29:d9:ee:1b:
ae:13:2b:c9:63:e2:e2:74:d9:ab:ab:5c:d5:ce:57:
84:3a:3c:b1:28:9e:45:49:10:01:55:8c:aa:a5:fb:
32:97:c0:fe:8b:f4:c0:03:81:31:7e:f4:fb:98:37:
4d:e2:6a:a0:90:be:1d:23:3b:ff:fa:d1:cd:c2:f0:
22:7b:85:fd:5e:81:21:9a:a9:e5:e5:d3:0b:ad:8c:
3f:dd:d7:f5:3e:6a:7d:d2:7f:08:05:4d:40:fb:b3:
3d:c7:65:f6:03:81:e6:a6:2b:0e:13:2e:37:20:9e:
e3:85:db:39:a7:9e:f3:4e:2a:51:39:49:02:20:6b:
ce:60:0c:8a:23:0d:a8:21:0f:ca:d0:bc:84:f4:92:
cb:ae:05:89:d4:f5:07:0f:2b:a2:0e:af:a1:ac:28:
72:93:91:1f:e9:47:11:ff:68:d8:c3:32:4d:fd:8a:
96:9d:ef:88:d1:57:87:8e:64:22:9e:4f:2b:3b:eb:
a4:08:b4:d1:c7:a1:d7:88:34:14:bd:73:d7:37:5b:
7c:24:4d:f3:75:56:31:7f:e2:5d:2e:8a:a9:9f:96:
eb:4a:80:cb:b8:2a:fe:1a:eb:84:21:e9:08:23:e6:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:3E:6E:FD:A9:EC:C6:79:D3:98:6A:27:9F:2B:94:4E:F7:4E:5F
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.206.0/23
Signature Algorithm: sha256WithRSAEncryption
12:dc:e9:fc:21:8b:13:69:44:37:48:73:c0:10:a9:61:d8:2b:
46:29:d2:76:ed:60:0f:ec:4f:c9:cc:a6:cb:25:33:ed:1f:73:
5d:b6:ef:28:3b:fe:bb:e2:aa:3b:b0:a8:05:90:17:e5:82:1e:
2b:8f:65:ab:3c:4c:02:d6:94:25:0b:fe:8f:b4:6e:f2:38:9e:
af:6f:0c:52:6a:fa:f7:a7:34:25:06:8b:6c:e4:6a:c1:da:ea:
b6:63:98:22:93:1d:d0:c5:5a:2e:a6:35:ec:f1:56:b0:a1:7f:
2e:b9:e6:ed:44:02:a6:8b:5c:5e:83:10:91:b7:75:b3:ac:5d:
4a:bc:d0:ff:49:e2:5e:2a:95:53:6d:06:4f:41:65:5f:e7:c4:
48:9b:f7:a5:0a:45:1e:13:2a:f2:22:a9:8c:84:b0:88:92:e3:
50:60:03:22:7f:3d:92:8a:a7:c5:e4:88:cf:e9:4e:da:04:d9:
9b:6a:71:69:9f:26:e7:9f:17:e1:bd:79:a5:c3:46:bf:45:1a:
20:b8:c1:99:0c:5e:69:e4:5e:62:b3:d8:a4:f8:51:72:e0:98:
45:dc:33:bb:a1:12:54:18:89:a4:71:c3:f8:b6:87:ed:ad:2b:
22:0f:e2:87:08:3c:0a:f6:b8:e9:93:cd:9d:b5:75:cc:07:7d:
30:ca:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:55:40 2025 by rpki-client