Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
File: KRuvagwXbOCjJCNma854-dkYJMs.cer (raw, json)
Hash identifier: 8nrOtME0JazLLZS5DTU4Te1TAn00MsrDa5xhmtk6Ct8=
Subject key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 390E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Tue 17 Jun 2025 06:58:47 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 18041
AS: 38855
AS: 131668
IP: 103.147.22.0/23
IP: 211.76.180.0/23
IP: 2405:a640::/32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Jun 2025 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14606 (0x390e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Jun 17 06:58:47 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:eb:38:de:b3:82:73:18:da:43:dc:60:5d:
98:df:ac:3d:4b:ec:3e:1e:15:f3:99:dd:86:f3:48:
5e:41:bc:56:f5:ed:03:ef:e1:96:98:43:1a:b7:58:
0c:5b:88:50:02:9e:38:92:bf:53:d7:ee:85:37:97:
83:31:ae:3d:e7:24:32:d2:51:b4:29:0a:0b:58:72:
02:35:b3:33:3d:3a:04:e0:61:8e:c4:51:5a:87:7c:
37:1b:1d:4e:c2:e7:65:8d:23:73:55:69:ae:4a:25:
92:6d:2c:f7:82:48:01:9d:3a:3a:c7:d2:3a:43:d4:
30:c0:4a:f4:be:33:9b:28:98:a7:35:09:aa:86:36:
03:48:46:b2:00:99:66:45:74:f6:07:9e:8a:6a:0e:
a0:7e:91:b7:eb:be:4b:7b:fc:2f:c7:80:2c:b8:b3:
b5:d7:f3:11:a8:c7:57:42:19:92:af:fd:d3:4a:fd:
d6:d8:aa:14:89:83:84:da:e0:7e:f6:cb:3a:a7:16:
35:f1:4b:28:f7:6c:38:4c:66:70:38:0f:01:86:7f:
c0:30:5a:36:35:8e:b3:3f:72:d4:3d:15:ba:53:4d:
4f:01:c3:bf:b4:7c:ce:5a:5e:7d:14:44:09:0c:af:
79:2c:96:63:16:02:79:cc:de:51:af:5e:45:6d:49:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18041
38855
131668
sbgp-ipAddrBlock: critical
IPv4:
103.147.22.0/23
211.76.180.0/23
IPv6:
2405:a640::/32
Signature Algorithm: sha256WithRSAEncryption
01:1e:4a:98:fb:25:87:54:2e:e6:cd:34:d5:6b:5a:a9:39:4e:
42:e5:4d:ae:4e:b2:20:b5:ea:e5:e2:ba:3d:f3:b2:c2:97:b5:
2f:d9:5f:a8:55:66:b1:f2:c5:8c:fb:91:e9:6a:31:47:9f:02:
e2:4f:9c:6f:9b:aa:f2:18:f2:dc:2a:69:1a:17:5f:33:1c:a1:
27:fc:3f:3f:94:a5:f4:ee:26:e2:d2:93:9b:7b:79:f4:7e:0b:
a7:25:82:70:3d:61:ad:1a:44:33:52:e0:d9:04:bc:af:5a:d1:
50:19:af:af:9a:04:db:87:4f:b9:83:9b:f2:27:9d:29:fb:57:
ad:23:07:30:58:05:0f:0a:d4:94:26:d2:e5:05:d3:de:df:01:
52:2d:91:46:47:5d:21:d6:fc:95:76:8b:be:73:d7:8c:db:35:
e0:7f:47:5d:91:43:f2:e4:8c:f6:41:bd:e5:31:09:67:d2:8e:
2e:60:60:a9:40:0f:b7:e7:f4:30:3a:02:c4:b0:53:42:4a:4b:
56:9d:73:2c:41:f6:e0:97:22:a7:6d:7c:14:e4:c1:27:ae:e4:
80:9e:71:c9:9d:a9:ad:31:7c:82:75:16:94:e7:e0:01:b2:7d:
ce:05:6a:bb:97:62:6e:7b:51:3c:f3:55:57:f2:85:84:f0:ac:
e1:c7:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 24 14:57:21 2025 by rpki-client