Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
File: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer (raw, json)
Hash identifier: 3EZm1vdRwox/ttfwpAWuWXUwtwiwHKHSKSOibWPPnKU=
Subject key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02123B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 04 Oct 2024 13:54:59 +0000
Certificate not after: Sun 02 Mar 2025 00:00:00 +0000
Subordinate resources: AS: 150335
IP: 103.104.142.0/24
IP: 2401:c9e0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Oct 2024 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135739 (0x2123b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Oct 4 13:54:59 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:74:8a:84:db:0e:2c:4d:80:48:1c:55:95:
10:ed:25:d5:e3:b2:d7:96:b2:6b:7a:c5:c8:57:84:
8c:89:98:74:8e:e4:b7:3e:f6:44:43:6a:b9:d2:6c:
91:0f:54:c1:26:36:f9:1b:cd:a0:b0:ba:34:85:4d:
5b:b4:a3:74:0a:a5:de:85:9f:2c:e4:61:e0:1c:1a:
42:cf:63:6b:57:af:06:44:95:a0:a1:12:41:d3:56:
12:e8:77:ed:17:80:3d:9f:4b:63:7f:7f:3a:4b:8c:
1b:21:99:4f:0b:f8:71:ef:c4:33:72:e5:2d:59:ed:
44:39:78:07:47:02:18:e2:99:a3:35:d6:72:90:a6:
73:c0:32:87:56:0f:b3:f3:46:e5:c4:fa:3c:6c:57:
3c:f0:51:d1:36:68:29:fa:22:ca:f0:6d:96:d6:a7:
a1:28:ab:92:a0:7c:5e:d7:d8:0e:d2:cc:50:f3:bd:
2a:88:06:ef:ab:5d:be:dd:6f:67:42:33:28:aa:68:
42:4e:b8:84:98:d3:7f:6d:42:35:6c:d6:a8:a7:6e:
84:41:0d:53:c7:d5:b0:8e:0d:2d:ab:54:28:c8:1e:
91:f6:77:d9:c9:e4:2a:f3:b8:5e:cf:53:19:04:98:
07:20:26:f4:b4:43:f6:78:9d:dd:19:be:f5:b6:ee:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150335
sbgp-ipAddrBlock: critical
IPv4:
103.104.142.0/24
IPv6:
2401:c9e0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:3f:f9:b2:22:71:24:f6:a7:29:da:69:42:af:9f:ad:17:3b:
d1:72:49:8e:49:b0:c3:e5:d1:7c:40:84:09:29:0c:3e:dc:e5:
01:30:ea:5a:02:d7:f2:a5:92:df:ac:93:93:e4:19:bf:37:f8:
d2:54:e2:8e:1a:33:54:26:13:b6:47:a4:fa:0c:e5:d3:2d:ff:
e4:7a:a8:86:04:09:ea:e5:f7:05:89:53:c2:56:3b:05:2c:cc:
22:25:44:1c:eb:52:4f:42:04:f7:cb:d5:49:91:32:b4:55:75:
6c:c5:99:2c:5b:c4:9c:19:57:93:a8:61:d1:4f:c2:1a:b9:31:
bd:27:33:40:30:3f:ee:1a:d1:e1:2d:8f:2c:14:dc:e0:f9:e8:
9f:46:1b:92:7e:d5:83:ed:b3:7d:99:2c:27:a6:cd:23:e9:cb:
aa:1b:17:27:7f:59:dc:e8:3d:ab:1c:08:93:3d:a2:50:81:53:
1e:02:dd:87:97:bd:c5:ea:b8:3b:43:ae:5d:96:e5:9e:49:10:
72:2b:83:fd:fa:89:d5:48:2c:f5:9f:fc:2a:8b:04:eb:06:70:
0e:09:90:0b:15:3e:19:20:d3:a3:b3:48:29:37:43:34:b4:4d:
57:5d:0c:40:3f:c9:66:94:cc:64:26:51:a7:63:70:98:d0:1d:
ae:a8:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 04:29:11 2024 by rpki-client on console.sobornost.net