This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer
File:                     KQF6QhbLesJUItjytuveOXjBS-c.cer (raw, json)
Hash identifier:          oscszyXPBQDlOTTAr2p78VEsiUKpsRV6s/uLHRsCPGs=
Subject key identifier:   29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       4052
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 30 Dec 2025 07:09:46 +0000
Certificate not after:    Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources:    AS: 131681
                          IP: 2402:ca0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16466 (0x4052)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Dec 30 07:09:46 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:19:51:dd:48:72:92:35:91:b3:2c:cd:a5:7d:
                    44:28:d3:95:42:dd:e0:de:55:36:e8:2a:3d:cc:2b:
                    04:f9:25:d2:ef:65:06:56:1a:dd:6b:0d:4d:fe:3c:
                    f6:93:78:d3:0d:d5:8d:d0:23:27:4b:4c:92:b8:6f:
                    00:e8:87:7b:37:86:60:eb:c5:c6:12:1e:81:2a:5d:
                    f8:8a:9f:5e:e3:f2:68:01:95:51:27:91:6e:f1:64:
                    30:7e:b6:b3:20:6f:b2:92:a9:6d:58:85:23:8e:8f:
                    d4:ee:b3:6a:18:c6:c0:53:a0:21:9d:06:42:aa:ec:
                    35:db:ce:45:1b:97:4f:fd:7f:f0:b4:c8:e0:95:f1:
                    5c:82:22:23:b2:94:65:12:34:04:85:c6:b9:ab:04:
                    9a:98:b3:00:83:e0:bd:bf:c0:ce:10:ba:70:48:7d:
                    32:95:5b:9a:f3:80:8f:70:ab:12:8d:c9:6a:7f:93:
                    75:08:f7:7b:f8:c9:62:dc:39:b4:81:ce:0c:d2:f7:
                    8c:5a:0a:52:0d:9f:d4:92:f8:6c:77:b1:37:77:2c:
                    ff:dd:e5:01:7c:a5:18:10:a7:29:55:2b:a7:fb:b9:
                    74:ad:dd:88:f2:77:af:b2:4f:cc:1d:dc:52:67:f6:
                    40:cc:1d:87:5d:b7:e8:c2:ce:b6:47:74:32:6b:59:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131681

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:00:b9:db:54:c0:a5:74:9e:b8:6e:f9:ed:00:bf:3d:2c:
         9b:da:61:d6:d1:bf:ee:1a:c7:bd:15:ab:ed:c2:f7:c2:bd:04:
         c7:cf:34:14:76:3a:1e:f0:72:1a:7d:9b:ab:aa:32:e1:2f:a2:
         f7:de:1e:2a:d5:a3:1b:9a:4f:e6:ef:f0:3e:0b:d1:74:3e:26:
         18:02:09:21:a5:cd:ff:ae:fc:08:49:11:75:f0:a5:f7:9a:75:
         41:36:1c:aa:94:a6:bc:26:7a:14:7d:b7:af:31:16:94:18:15:
         d9:98:f3:1c:a5:b0:76:a3:dd:80:7b:a6:61:51:8a:ff:fe:0d:
         3d:1c:83:aa:0b:a1:a8:8b:d5:d9:06:4f:e9:04:b6:8b:92:eb:
         59:e3:66:e6:16:22:8a:35:36:5b:31:29:09:e5:b6:fb:3d:de:
         d9:3f:a8:7f:36:a8:1f:5b:19:18:f0:00:d3:6d:9a:9d:46:de:
         be:e0:c0:7b:19:cd:08:3e:53:37:e5:4b:07:02:d3:dd:30:bb:
         20:f0:af:37:db:b4:6d:b9:2f:e7:5e:1d:1a:69:2f:8b:86:98:
         64:2e:42:7a:e4:2b:b8:e8:09:f5:3e:eb:24:e4:d5:cc:da:1e:
         47:2a:ae:d4:bc:91:04:b7:eb:01:ee:2c:30:4e:3e:ae:7f:b3:
         1e:80:f2:72
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgICQFIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MTIzMDA3MDk0NloXDTI2MDgyMjA4MTQyOFowMzEx
MC8GA1UEAxMoMjkwMTdBNDIxNkNCN0FDMjU0MjJEOEYyQjZFQkRFMzk3OEMxNEJF
NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPYZUd1IcpI1kbMszaV9
RCjTlULd4N5VNugqPcwrBPkl0u9lBlYa3WsNTf489pN40w3VjdAjJ0tMkrhvAOiH
ezeGYOvFxhIegSpd+IqfXuPyaAGVUSeRbvFkMH62syBvspKpbViFI46P1O6zahjG
wFOgIZ0GQqrsNdvORRuXT/1/8LTI4JXxXIIiI7KUZRI0BIXGuasEmpizAIPgvb/A
zhC6cEh9MpVbmvOAj3CrEo3Jan+TdQj3e/jJYtw5tIHODNL3jFoKUg2f1JL4bHex
N3cs/93lAXylGBCnKVUrp/u5dK3diPJ3r7JPzB3cUmf2QMwdh1236MLOtkd0MmtZ
9TMCAwEAAaOCAmswggJnMB0GA1UdDgQWBBQpAXpCFst6wlQi2PK26945eMFL5zAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUUlTREEvMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UUlTREEvS1FGNlFoYkxlc0pVSXRqeXR1dmVPWGpCUy1jLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMCAmEwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD
BQAkAgygMA0GCSqGSIb3DQEBCwUAA4IBAQAOjwC521TApXSeuG757QC/PSyb2mHW
0b/uGse9FavtwvfCvQTHzzQUdjoe8HIafZurqjLhL6L33h4q1aMbmk/m7/A+C9F0
PiYYAgkhpc3/rvwISRF18KX3mnVBNhyqlKa8JnoUfbevMRaUGBXZmPMcpbB2o92A
e6ZhUYr//g09HIOqC6Goi9XZBk/pBLaLkutZ42bmFiKKNTZbMSkJ5bb7Pd7ZP6h/
NqgfWxkY8ADTbZqdRt6+4MB7Gc0IPlM35UsHAtPdMLsg8K8327RtuS/nXh0aaS+L
hphkLkJ65Cu46An1Pusk5NXM2h5HKq7UvJEEt+sB7iwwTj6uf7MegPJy
-----END CERTIFICATE-----