Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
File: 9aRLXgeIZbrvk1E2nZYda6JVbUc.cer (raw, json)
Hash identifier: wgAS5pxK+CDvTePg+zNb0+32HSkMQtZ0jLZKhBW1vl0=
Subject key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:12 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 103.131.148.0/23
IP: 2400:f520::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13649 (0x3551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ec:97:7b:82:e0:9b:9b:71:3a:3d:46:9f:77:
2c:91:ba:d5:35:7d:77:94:0b:78:30:b7:bd:c2:e6:
ea:a5:6e:48:78:b2:57:2c:d8:04:a0:b1:88:77:56:
e6:13:07:52:ea:47:56:ef:07:8c:18:16:c8:ea:7f:
e9:14:ae:1f:b5:b1:8b:4c:21:e2:61:dd:74:a5:16:
b7:54:2f:74:93:32:2b:33:ee:d8:63:a4:11:7e:a7:
af:02:26:12:cc:f0:79:20:f8:96:a9:53:2d:63:be:
ac:5b:58:19:fa:66:e2:5b:b5:90:44:1c:be:dc:47:
60:88:d2:0c:4f:ea:8c:62:5a:eb:00:fb:67:b4:a9:
5e:23:cf:c9:88:70:ad:58:6d:26:d2:17:76:9b:e1:
31:9e:f7:c9:49:af:e4:b6:71:c3:ab:ca:92:72:f2:
13:15:32:f0:95:88:ab:ae:e2:a7:c6:5c:d9:99:f9:
fe:5d:90:ba:cd:41:d1:19:43:08:ef:5f:46:70:fe:
09:82:6d:cd:8f:a1:b7:1f:98:49:fd:d3:64:90:3c:
f4:43:5f:23:79:05:13:f7:f2:d6:70:0f:97:58:ab:
c0:0c:1d:e8:fb:f6:65:68:b2:04:4e:e6:c9:ad:b3:
c8:70:51:a9:9c:56:00:d8:02:6d:10:73:c4:c3:ce:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.148.0/23
IPv6:
2400:f520::/32
Signature Algorithm: sha256WithRSAEncryption
13:7f:b5:1e:4f:de:2a:db:d7:0c:0a:0e:d0:93:ef:e6:78:fd:
38:b7:83:c0:8b:02:f6:74:7f:88:61:d2:84:00:29:6b:45:7c:
ca:e9:72:95:b7:43:3f:de:35:a8:55:8d:1b:46:38:df:7d:cd:
00:d3:5e:61:f1:08:be:5e:24:af:89:8f:49:f7:fb:0b:d2:7f:
22:89:8b:13:8e:d6:be:66:18:49:67:c8:3d:ff:3e:12:39:26:
f4:47:3f:b8:cc:23:54:87:ee:f7:fa:57:48:55:95:20:93:c6:
72:94:4d:a5:0b:3f:a1:7c:55:f9:08:e2:6f:80:06:c8:50:6b:
b8:bc:55:d5:4c:62:75:fc:14:ad:07:be:39:1c:94:e8:3a:79:
c2:8f:5b:54:8a:74:6e:48:16:47:d2:6c:23:93:a4:37:87:ff:
7b:49:c5:d8:48:a6:ad:cb:8f:3d:e8:f4:c7:2d:77:29:41:73:
b1:4b:47:e5:a7:67:a9:23:f0:bd:2c:64:d4:36:1b:d9:30:4e:
51:31:e7:80:27:bd:5a:c9:1c:f8:0e:9e:52:21:4f:78:ea:59:
33:a2:78:7e:23:c7:b3:23:68:68:ba:75:02:4c:24:ae:ca:9b:
47:cf:e4:d2:da:2d:8b:af:04:df:27:bb:d7:8d:d7:08:b3:0b:
2a:90:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:07 2025 by rpki-client