Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
File: LYTKJpMg4lYhai3uLqOBowRSarQ.cer (raw, json)
Hash identifier: LYHx6Ie5YJw9npcqvG4EmipMm1RxHXfGpIia/KbTBiY=
Subject key identifier: 2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 2770
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 01 Sep 2023 03:11:06 +0000
Certificate not after: Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources: IP: 211.76.96.0/20
Validation: Failed, certificate revoked on Mon 15 Jan 2024 20:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10096 (0x2770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Sep 1 03:11:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:65:80:ac:d4:d6:3b:84:5d:45:a2:44:5e:
a5:27:fe:a7:3f:a1:dc:49:ae:e4:39:53:54:29:60:
a2:30:11:c2:d7:15:03:2d:02:30:10:0f:79:33:d3:
54:93:b8:14:b0:27:91:b8:ca:dc:c6:04:6c:2b:38:
c8:af:57:d2:d0:e0:86:b6:00:c5:66:27:04:54:1c:
29:63:aa:f7:b2:7b:c5:b5:aa:37:e1:d5:d9:55:f6:
cc:21:32:2c:7e:3e:bd:9f:7f:38:06:77:9a:7c:cd:
50:99:7c:70:af:9e:44:46:61:37:1b:2e:81:b4:c9:
4f:af:55:cb:c1:f0:8c:b1:5b:88:22:b0:76:36:a7:
dc:ac:b3:b1:a7:f4:4f:7a:4a:7b:03:d8:18:15:55:
cc:65:ea:dd:01:1e:44:10:1b:f5:2f:81:c7:12:0c:
db:3c:b3:c4:8a:86:02:a8:8c:a7:7e:90:f0:6f:88:
6f:9a:de:02:3c:5e:ab:a5:10:83:e0:74:f6:d2:75:
ea:d0:47:3c:ab:3a:ae:c9:cf:f8:aa:dd:39:19:09:
f9:a0:b1:ad:f0:3a:64:ad:61:bc:01:eb:8b:95:b8:
9c:c9:d6:3f:43:87:5d:c3:ce:25:31:75:0f:7b:57:
fd:46:65:45:10:58:d1:05:8e:d7:76:69:eb:70:c9:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.96.0/20
Signature Algorithm: sha256WithRSAEncryption
27:50:2f:18:cc:87:24:5f:51:4c:b4:d0:58:60:96:2a:c6:fc:
be:af:f4:a8:dd:e5:17:ed:88:18:69:b7:04:3f:28:b3:df:a8:
f3:86:42:fb:a8:2c:95:f3:cc:f9:ba:d1:05:71:82:b6:df:65:
61:ca:11:b3:79:9e:4b:11:20:dd:56:e0:f4:0e:8e:ea:5a:b7:
8d:6a:6a:88:18:98:a6:7d:eb:0f:3d:06:b1:d6:b9:c2:68:f0:
58:de:e0:f3:d1:f9:81:86:8e:dc:dc:75:bf:9c:4a:60:45:ca:
b9:59:f9:6a:a5:a8:7b:3b:0f:78:87:9c:2e:be:c0:fd:e4:05:
8c:66:39:de:44:98:c0:14:59:09:a7:fb:a1:81:31:31:3e:75:
ca:51:f5:4f:fe:3c:78:7d:89:8f:e0:59:b3:8b:c2:2e:2d:9d:
95:09:37:50:c6:5b:b9:83:36:90:6a:d9:44:ec:79:7d:11:9f:
bc:ea:59:d1:cc:0a:e7:46:f8:68:d2:d7:ad:29:44:a8:9f:ba:
18:2d:59:5a:0e:c6:4a:97:6d:a1:10:ca:47:36:63:27:0e:44:
72:af:76:b8:3c:6c:20:7c:3d:50:2d:3d:ef:7a:31:7b:ea:fd:
96:c6:49:1b:49:9b:bf:09:ac:32:83:e0:89:e8:36:8b:fd:e7:
77:0f:d9:0f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgICJ3AwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIzMDkwMTAzMTEwNloXDTI0MDgzMTAzMTA1M1owMzEx
MC8GA1UEAxMoMkQ4NENBMjY5MzIwRTI1NjIxNkEyREVFMkVBMzgxQTMwNDUyNkFC
NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANdZZYCs1NY7hF1FokRe
pSf+pz+h3Emu5DlTVClgojARwtcVAy0CMBAPeTPTVJO4FLAnkbjK3MYEbCs4yK9X
0tDghrYAxWYnBFQcKWOq97J7xbWqN+HV2VX2zCEyLH4+vZ9/OAZ3mnzNUJl8cK+e
REZhNxsugbTJT69Vy8HwjLFbiCKwdjan3Kyzsaf0T3pKewPYGBVVzGXq3QEeRBAb
9S+BxxIM2zyzxIqGAqiMp36Q8G+Ib5reAjxeq6UQg+B09tJ16tBHPKs6rsnP+Krd
ORkJ+aCxrfA6ZK1hvAHri5W4nMnWP0OHXcPOJTF1D3tX/UZlRRBY0QWO13Zp63DJ
Hw8CAwEAAaOCAkowggJGMB0GA1UdDgQWBBQthMomkyDiViFqLe4uo4GjBFJqtDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF
hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRUJULzBUBggr
BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0VC
VC9MWVRLSnBNZzRsWWhhaTN1THFPQm93UlNhclEubWZ0MDEGCCsGAQUFBzANhiVo
dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQE00xgMA0GCSqGSIb3DQEBCwUAA4IBAQAnUC8YzIck
X1FMtNBYYJYqxvy+r/So3eUX7YgYabcEPyiz36jzhkL7qCyV88z5utEFcYK232Vh
yhGzeZ5LESDdVuD0Do7qWreNamqIGJimfesPPQax1rnCaPBY3uDz0fmBho7c3HW/
nEpgRcq5Wflqpah7Ow94h5wuvsD95AWMZjneRJjAFFkJp/uhgTExPnXKUfVP/jx4
fYmP4Fmzi8IuLZ2VCTdQxlu5gzaQatlE7Hl9EZ+86lnRzArnRvho0tetKUSon7oY
LVlaDsZKl22hEMpHNmMnDkRyr3a4PGwgfD1QLT3vejF76v2WxkkbSZu/Cawyg+CJ
6DaL/ed3D9kP
Generated at Mon Jan 15 22:54:33 2024 by rpki-client on console-ams.rpki-client.org