Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
File: 8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer (raw, json)
Hash identifier: AgQhvLRVUVGHGdKEFi5rrzNRSnKd17pp6vFAFQXKFZQ=
Subject key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3405
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:28:58 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.124.40.0/22
IP: 2403:d940::/32
Validation: Failed, certificate revoked on Tue 11 Mar 2025 07:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13317 (0x3405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:28:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:98:ce:d4:62:12:08:1a:94:24:f8:f6:07:
ae:19:ca:17:b3:6b:52:7d:9d:c4:3a:5e:0c:70:0f:
10:14:10:b5:7d:5b:42:32:a4:6c:f0:4a:46:61:8d:
f8:0b:04:67:ea:37:04:f0:67:e1:c2:e1:5d:bf:4f:
7a:73:1a:c3:bd:bf:32:df:a5:9c:9b:cd:1d:53:72:
22:ac:3f:8a:71:b2:58:be:43:a9:db:4d:a8:8f:69:
9e:07:b8:34:9e:28:f2:82:84:b8:e1:b9:07:b1:9e:
87:e0:5f:17:42:af:5e:ea:41:01:df:15:e3:c5:9f:
09:9e:c6:ab:44:28:b7:a8:9e:ab:44:7c:ac:e4:21:
19:f8:b4:0c:92:49:2e:f1:57:be:93:bb:d4:e1:c0:
17:fc:91:34:de:bb:04:70:df:33:ad:59:71:46:0f:
c8:22:d5:9d:78:a2:a8:f7:61:25:a3:cd:41:b9:9a:
2a:d7:4d:d2:3c:ce:c8:dc:66:0b:3c:1b:6b:75:36:
f1:85:26:19:b3:10:d6:47:9b:3f:74:b4:ee:5a:8e:
3d:f0:5d:6c:3d:a5:fd:90:a6:e2:fc:dd:bc:55:bd:
39:88:6b:85:dc:13:fd:30:05:37:e5:ee:6a:65:84:
f9:7a:45:c9:a7:9b:0f:08:e9:3d:db:7f:f6:ad:fa:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.40.0/22
IPv6:
2403:d940::/32
Signature Algorithm: sha256WithRSAEncryption
50:74:55:a9:dc:03:3a:7f:af:86:95:18:51:94:22:2c:54:84:
84:20:48:e6:22:56:75:1b:a7:0f:54:f5:92:2d:46:3d:a5:23:
1e:66:05:46:70:1c:a6:75:c7:11:af:85:f0:54:f3:e4:fa:e9:
d2:79:83:9a:0f:61:5e:3c:b6:f5:f3:f8:62:ae:00:41:48:cb:
c8:04:a0:7c:14:8f:5f:3d:ba:8e:b5:56:cd:cb:bc:b9:09:7a:
78:1b:49:0f:06:7c:ff:ab:0e:83:fc:f5:7a:a3:a2:99:f6:73:
1e:c8:40:e9:78:0f:cf:af:d6:45:ef:2f:31:5d:4e:9b:50:e8:
7b:e8:10:48:a7:e0:b7:b4:19:c3:4e:15:8c:ac:2a:59:19:b9:
c3:ae:c9:e4:f7:1f:cc:3f:a4:f9:9c:ca:7d:83:64:86:3e:68:
47:87:e6:e3:00:4c:55:9d:32:b1:66:45:0b:c0:ae:92:e8:35:
ec:ac:db:63:dc:29:a3:0d:17:71:77:66:bd:10:b5:ee:28:a9:
3f:fd:30:93:b5:01:fa:eb:12:18:9e:7c:60:4d:2f:e3:80:d6:
2a:ab:42:13:aa:ad:6d:53:4d:10:af:20:ee:37:9d:57:b0:cd:
c3:05:ba:eb:a5:53:86:89:4e:3f:86:96:4d:e9:91:e6:f4:fe:
9b:f4:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:46:39 2025 by rpki-client