Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
File: RXsQNypobj_3Nla-tc0968kyNxo.cer (raw, json)
Hash identifier: lmkUnPXMaEfnmvWkomNi7etpg3fdzs/nRTzqtYv+C/M=
Subject key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 19E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:28 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 134.208.0.0/16
IP: 140.109.0.0 -- 140.138.255.255
IP: 192.83.166.0 -- 192.83.196.255
IP: 192.192.0.0/16
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Apr 2025 22:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6629 (0x19e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Feb 10 14:29:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:25:77:c2:25:bc:d3:39:e1:9d:02:fa:47:
dd:bf:1a:5d:b8:a9:d8:d8:eb:00:de:6d:d1:56:8d:
4b:04:6f:7f:5f:43:e1:71:da:32:36:db:a0:2b:74:
c2:ac:98:3d:35:e5:51:70:5e:9d:a3:0d:3e:a6:15:
e5:25:f6:11:b8:a4:da:d9:93:c6:2c:58:8d:91:1e:
52:e4:aa:4d:f3:88:31:33:9a:cc:f3:f0:97:5f:44:
29:b5:2b:07:eb:88:0e:59:9e:15:42:04:4c:ae:36:
79:4a:a3:04:ab:ae:a8:b4:9b:a0:5b:96:cb:80:a9:
ce:c2:30:50:1c:e7:e8:c7:d0:9b:30:4f:91:d1:38:
1a:b6:5f:92:98:8e:2f:cd:ec:31:f7:1b:40:b8:36:
77:f6:90:fe:42:96:fe:b3:9c:bd:e5:b2:54:88:14:
cb:86:6a:53:c7:e0:24:a0:60:a9:ee:25:62:cd:b8:
67:ab:f0:ea:1f:47:fe:aa:d4:7c:99:70:fd:b0:14:
4f:4e:f8:62:59:8f:ab:4b:d2:b6:06:4d:c7:84:a8:
d1:22:89:2c:96:f3:da:0e:c4:f6:1d:f4:5e:a5:9c:
02:d8:f9:e5:9a:b8:e5:4c:a3:64:1b:9f:f5:05:28:
ac:1e:0f:c4:b4:6a:32:57:4e:48:dc:4b:95:f8:06:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
140.109.0.0-140.138.255.255
192.83.166.0-192.83.196.255
192.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:f9:10:20:2b:36:83:0c:af:cb:86:5f:7c:b7:98:cb:e6:f3:
eb:d9:c8:ba:a1:1c:44:b6:34:ee:42:8a:b4:4b:21:25:b0:ba:
26:3c:9e:c9:ef:9c:10:b4:1b:c1:de:4a:ba:9d:2d:0f:0a:5b:
7b:c7:e3:7a:63:35:31:6d:ee:2b:d6:ff:8a:b8:39:34:47:45:
1c:68:a5:5a:26:9f:1e:33:c0:6c:4c:61:03:c6:12:e3:35:d0:
d0:04:ca:d4:37:45:a8:fd:68:6c:09:34:ab:3b:02:8e:1b:a0:
33:8e:f8:bd:3f:ce:7d:55:11:35:ba:08:44:41:30:8d:99:bc:
a8:c7:f5:57:89:ca:53:c9:a2:33:e4:4b:2f:b3:b5:c8:b7:77:
8b:44:3c:bf:6c:9b:cc:71:86:d3:68:40:a2:d1:49:de:8e:11:
49:39:c0:5d:1e:44:71:26:fa:3a:b5:7f:2c:cf:19:8d:f3:c0:
b7:8f:66:79:31:15:97:14:88:2c:d9:33:e3:51:e0:b2:a7:de:
d9:e5:27:27:b7:d3:4c:d5:ca:96:cf:99:47:00:cb:dd:47:f2:
df:be:cd:2f:94:75:58:3a:8c:a1:1a:fd:68:bb:f3:3a:d2:b6:
51:78:46:85:69:6f:96:e0:ac:a2:78:2b:89:40:0f:15:5a:12:
db:01:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net