Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer
File: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (raw, json)
Hash identifier: zxpz/hmX6Ya/ZhyZHaM81xty9U07CEZcnRVMCUQvvMU=
Subject key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 19D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 10 Feb 2025 14:29:27 +0000
Certificate not after: Tue 23 Sep 2025 15:30:20 +0000
Subordinate resources: IP: 160.187.100.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6611 (0x19d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Feb 10 14:29:27 2025 GMT
Not After : Sep 23 15:30:20 2025 GMT
Subject: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:ba:8c:f3:9b:ff:0e:28:4f:86:b3:47:ee:
04:6e:c6:b7:a9:03:a3:ef:2c:a1:8c:f4:2f:3d:07:
4b:67:67:f7:11:52:25:a1:15:41:25:f1:2e:83:c0:
bd:ff:5b:04:73:ab:41:5e:40:12:da:0a:1d:93:ce:
38:36:b7:0e:3a:42:78:c7:74:e5:b1:7b:51:4a:78:
a7:50:03:b2:d3:4b:10:7f:05:db:9a:10:6c:55:60:
c7:ae:38:b7:84:1b:c0:86:c3:07:a3:e3:73:e6:eb:
07:03:7a:be:b6:95:b7:9f:30:8c:a2:a2:8f:5d:72:
78:a6:e1:df:6a:26:21:52:02:d6:ff:d6:f5:fc:a4:
5a:e9:01:b9:e2:db:cb:84:3e:a8:87:47:64:e6:a0:
fe:ed:a6:c4:11:49:65:e9:40:ce:57:55:58:a9:92:
6e:10:e3:30:db:68:e4:e1:f5:3a:b6:6e:d6:08:c9:
40:95:7f:4d:68:b8:41:de:86:17:a1:b5:ee:96:e0:
38:9b:98:15:2f:63:3d:14:18:4a:2d:9b:c3:43:34:
99:10:69:db:4b:33:6c:3d:21:ca:33:7f:45:81:8a:
0e:1f:9e:6a:4e:65:03:d5:27:f6:3a:3c:6f:97:71:
33:e5:d1:53:6a:c3:ab:a4:df:ef:a4:00:a6:9c:e2:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.100.0/23
Signature Algorithm: sha256WithRSAEncryption
96:87:15:39:17:db:70:8e:94:d7:2e:81:ae:e3:6c:5e:08:a7:
90:af:ca:35:19:0a:26:53:4f:68:16:33:e5:f8:3f:33:5a:bd:
26:b8:71:87:f2:5d:7f:29:b3:f2:02:3d:3d:da:8f:a6:14:54:
8c:0a:83:09:56:28:88:9a:8f:a2:eb:ed:79:ec:de:fa:e6:5e:
b9:61:10:01:d5:71:02:96:43:7a:5e:5d:7b:1d:12:77:4f:bb:
04:a9:18:27:a7:bf:b4:7d:b0:26:00:ff:93:a9:de:b2:3b:90:
d4:3e:2f:7b:e4:e6:64:3a:34:5b:da:83:b0:46:fb:42:e7:aa:
10:db:d7:77:74:bf:26:7e:66:0b:0b:e2:0a:59:45:32:ba:9e:
c0:35:16:d7:73:bc:1e:54:b5:3c:d1:9e:a0:15:4c:bb:5c:eb:
85:e6:8c:52:86:af:bd:58:cb:28:75:b5:aa:c4:15:b6:5b:c8:
46:c9:20:5c:fd:79:2e:e9:5b:f1:98:cb:74:f9:cd:7c:25:dc:
a3:b1:30:14:d6:33:ad:41:b8:c5:56:03:70:b2:74:b7:db:50:
17:4b:ad:18:ba:e6:56:59:89:41:30:9a:04:6f:60:37:a6:23:
52:85:20:23:51:16:70:5c:f4:3d:87:ca:ef:96:84:55:c0:17:
0b:18:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:27 2025 by rpki-client