Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
File: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (raw, json)
Hash identifier: J6Gx2U1PXOzP/hVJKu6NfBx5dVWR/NQgnsBaZR4aOok=
Subject key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial: 161F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Mon 26 Aug 2024 02:30:53 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: IP: 160.25.104.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5663 (0x161f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Validity
Not Before: Aug 26 02:30:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:09:61:de:c2:c3:69:3b:42:f8:25:48:a7:
2f:35:12:b3:ea:fd:b6:2d:f6:35:75:49:93:6b:dd:
73:75:a9:48:35:28:de:5f:7d:62:bc:df:4d:54:e5:
e9:7b:74:e6:06:c0:1c:52:27:a5:d9:de:7b:9f:4e:
80:68:40:c9:0b:1c:0e:c8:cb:69:a0:21:20:fb:ff:
58:99:b8:dc:a7:1a:97:70:0a:85:0d:14:51:94:6e:
80:3a:9c:d2:0d:c1:ee:2e:02:bf:b6:1b:87:6d:63:
21:7a:ec:09:96:bf:c1:e4:79:8d:53:27:d3:a9:3c:
11:95:6c:a1:08:9f:05:cd:ce:90:6c:cf:c6:db:5b:
09:a0:84:4e:fb:55:1e:0d:aa:b9:40:45:00:7c:be:
80:a0:cd:5b:86:64:98:6d:c2:3c:6d:55:9f:b0:b6:
60:39:86:33:d0:4f:75:0c:0c:f6:21:c4:11:6f:35:
5b:ec:a7:cb:11:11:a6:93:7e:9a:5a:75:4c:71:dc:
e1:4a:f1:9c:5f:88:dd:d9:4a:fa:c9:a2:a5:b1:b0:
1b:56:b5:81:7b:61:ea:54:88:d1:35:f9:53:42:fd:
96:db:f9:89:25:77:c1:ea:ee:c3:e8:84:77:fc:09:
4e:b3:c2:12:70:9c:0e:60:0b:f2:4c:c9:c9:06:fd:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
X509v3 Authority Key Identifier:
keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.104.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:c7:0b:3f:ce:31:e1:02:6d:f8:13:ee:a8:15:17:0b:eb:ad:
26:76:5d:06:f5:4c:24:dd:14:b6:af:75:14:93:4f:73:2a:ff:
b3:43:5d:0f:4c:a7:05:6a:cf:fd:67:fe:39:3a:96:0d:e2:fa:
cb:7d:b9:6d:7c:39:7c:4d:a5:d0:4f:c8:54:6c:26:1a:1a:a4:
59:0c:5e:65:6e:ca:2a:7e:4b:eb:75:87:cd:e9:6e:fe:c9:2c:
f0:c3:a1:47:e7:ac:ef:b2:5d:a9:e5:0e:1f:6e:17:77:98:74:
73:00:66:6b:9b:52:40:02:61:28:08:b9:91:79:fe:72:50:c8:
e9:4a:8d:7c:26:86:c0:22:43:13:21:7f:ae:57:0c:5c:f7:cb:
0b:32:9d:85:44:a4:99:2d:f5:0d:49:08:aa:95:8c:91:92:94:
27:87:03:af:fc:5c:17:4e:49:46:64:94:f5:b0:3b:a7:25:ec:
66:aa:61:3c:13:68:03:38:c6:1a:ec:a7:38:b0:b9:b5:0c:e5:
91:ff:61:ff:ce:38:73:91:15:02:87:42:f3:09:53:e4:89:f9:
41:11:e4:78:a7:2c:20:5a:c6:6e:f7:5c:24:96:05:4b:7b:03:
4b:4d:05:6e:cf:45:35:97:7b:50:31:f7:a5:db:f9:26:69:3e:
7f:6d:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:06 2024 by rpki-client on console-ams.rpki-client.org