Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0mTRm5gGAj5HbgOcBf3OE3asbDw.cer
File: 0mTRm5gGAj5HbgOcBf3OE3asbDw.cer (raw, json)
Hash identifier: VGHpG07mo0cQYV64c5zxdifyJW3dU0vjxMSz/e24v5g=
Subject key identifier: D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 19BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:26 +0000
Certificate not after: Sat 10 Jan 2026 15:30:29 +0000
Subordinate resources: IP: 161.248.144.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6587 (0x19bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:26 2025 GMT
Not After : Jan 10 15:30:29 2026 GMT
Subject: CN=D264D19B9806023E476E039C05FDCE1376AC6C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:2f:38:67:ee:42:aa:62:6f:1a:67:1b:2d:
26:73:23:68:ba:b9:af:27:09:69:3f:70:e9:79:aa:
6d:c5:f7:d0:e3:1c:6d:17:36:e4:b5:8c:52:1f:dd:
04:9b:85:59:5f:b9:a6:b2:bb:08:3d:27:42:65:68:
d4:e9:3c:16:c7:f7:3b:f5:d4:36:bd:35:a9:55:53:
5a:b9:e8:35:03:49:c7:35:bb:5e:4c:67:8b:d0:17:
be:22:5a:f5:67:de:c6:e2:5b:e1:0b:8b:64:a1:93:
2d:95:9f:e9:8c:97:0c:d1:a3:56:69:cd:14:e0:a3:
3b:dc:00:cf:65:53:f5:5d:d3:13:69:bc:94:d2:e6:
4f:ab:43:59:ac:16:bc:12:39:48:0d:38:c0:e4:6d:
66:64:fd:b9:02:9f:60:69:7d:66:4a:80:3f:78:fe:
7f:87:2c:a8:2f:6e:86:73:ed:dd:01:a0:35:c4:6f:
6f:e9:a2:cb:ae:c7:a6:b6:67:04:63:c5:1b:7e:e5:
e8:ec:50:b1:a0:82:1b:05:b7:1c:88:5b:72:81:c1:
53:60:d3:e1:9a:40:d1:db:a8:20:3e:f6:27:78:b3:
77:03:24:2b:ea:9e:f5:16:6c:e0:75:df:eb:68:cf:
40:73:d1:b9:4b:c8:7a:0d:3e:ee:ec:4d:a3:e1:79:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:D1:9B:98:06:02:3E:47:6E:03:9C:05:FD:CE:13:76:AC:6C:3C
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANGTIAN/0mTRm5gGAj5HbgOcBf3OE3asbDw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.144.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:bc:f1:e5:e5:45:1c:ae:93:d5:4b:ea:01:6d:cc:b0:79:1f:
e7:f2:fc:03:1a:85:52:70:5b:5b:65:91:a9:bc:e4:ed:5b:dd:
78:eb:b8:ba:4d:81:0c:2c:af:b6:eb:ff:b4:91:6c:8c:8b:47:
25:b7:65:9f:dd:32:f0:fe:e4:df:22:d3:f3:74:40:50:ae:ef:
67:30:22:8c:a6:55:8b:4c:67:49:83:2d:33:9b:3c:64:6b:3b:
eb:42:95:8b:f1:09:30:1f:92:22:90:f0:75:b6:a6:14:30:23:
80:b1:80:f9:99:78:7c:e4:3c:0d:82:ca:b6:4b:24:30:97:33:
6c:ad:ab:ef:5b:49:24:1f:7a:ab:7e:41:95:c3:30:43:c8:9f:
89:ff:02:0d:64:90:d1:1d:e4:be:96:ed:52:8f:31:b7:2d:40:
47:98:74:30:ed:a7:c3:13:97:26:f8:a4:df:2f:5a:32:1f:c2:
3e:98:1a:02:92:a9:e4:c7:34:65:63:19:04:60:de:d3:59:27:
9b:45:b1:a2:06:c6:62:e3:1c:af:bd:94:8f:29:60:43:44:26:
c0:c9:c0:cb:79:fc:d8:33:57:f2:a0:24:e5:61:0f:dc:0a:74:
ad:a6:bf:f8:58:7a:cc:47:d4:b8:56:f6:a7:43:26:a3:3b:62:
d5:48:c6:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGbswDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF
RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyNloXDTI2MDExMDE1MzAyOVowMzEx
MC8GA1UEAxMoRDI2NEQxOUI5ODA2MDIzRTQ3NkUwMzlDMDVGRENFMTM3NkFDNkMz
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKTYLzhn7kKqYm8aZxst
JnMjaLq5rycJaT9w6XmqbcX30OMcbRc25LWMUh/dBJuFWV+5prK7CD0nQmVo1Ok8
Fsf3O/XUNr01qVVTWrnoNQNJxzW7Xkxni9AXviJa9WfexuJb4QuLZKGTLZWf6YyX
DNGjVmnNFOCjO9wAz2VT9V3TE2m8lNLmT6tDWawWvBI5SA04wORtZmT9uQKfYGl9
ZkqAP3j+f4csqC9uhnPt3QGgNcRvb+miy67HprZnBGPFG37l6OxQsaCCGwW3HIhb
coHBU2DT4ZpA0duoID72J3izdwMkK+qe9RZs4HXf62jPQHPRuUvIeg0+7uxNo+F5
sV0CAwEAAaOCAlQwggJQMB0GA1UdDgQWBBTSZNGbmAYCPkduA5wF/c4TdqxsPDAf
BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy
L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF
hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOR1RJQU4v
MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvV0FOR1RJQU4vMG1UUm01Z0dBajVIYmdPY0JmM09FM2FzYkR3Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaH4kDANBgkqhkiG9w0BAQsFAAOC
AQEAbbzx5eVFHK6T1UvqAW3MsHkf5/L8AxqFUnBbW2WRqbzk7VvdeOu4uk2BDCyv
tuv/tJFsjItHJbdln90y8P7k3yLT83RAUK7vZzAijKZVi0xnSYMtM5s8ZGs760KV
i/EJMB+SIpDwdbamFDAjgLGA+Zl4fOQ8DYLKtkskMJczbK2r71tJJB96q35BlcMw
Q8ifif8CDWSQ0R3kvpbtUo8xty1AR5h0MO2nwxOXJvik3y9aMh/CPpgaApKp5Mc0
ZWMZBGDe01knm0WxogbGYuMcr72UjylgQ0QmwMnAy3n82DNX8qAk5WEP3Ap0raa/
+Fh6zEfUuFb2p0Mmozti1UjGTg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:35 2025 by rpki-client