This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XlP1iJp2WghURuHetlJmWfs4DSE.cer
File:                     XlP1iJp2WghURuHetlJmWfs4DSE.cer (raw, json)
Hash identifier:          HDrZEfNWsoY/zExk7SEgcnuUZE0IigJT9fw0CBEPdds=
Subject key identifier:   5E:53:F5:88:9A:76:5A:08:54:46:E1:DE:B6:52:66:59:FB:38:0D:21
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2B05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/XlP1iJp2WghURuHetlJmWfs4DSE.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 02 Jan 2024 09:23:57 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 150773
                          IP: 119.75.245.0/24
                          IP: 2001:44f0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11013 (0x2b05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Jan  2 09:23:57 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5E53F5889A765A085446E1DEB6526659FB380D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:e3:a2:87:c3:2d:92:3a:b6:56:a4:7c:2d:
                    40:5d:90:54:9e:b8:19:0c:32:94:3a:0d:da:5e:c3:
                    19:ac:a8:a8:0d:19:7e:76:62:61:75:c6:90:2b:22:
                    c2:83:76:46:86:c6:d0:ab:33:6d:d6:9b:be:5c:4a:
                    26:83:70:89:c3:09:0f:63:30:b6:4b:40:cb:9c:7c:
                    97:7a:16:12:06:59:65:f8:67:e5:c2:d5:0f:d2:dd:
                    a3:22:84:df:ec:cf:42:9b:93:94:99:12:29:40:01:
                    4e:86:f6:50:4b:d5:c3:40:5e:67:b7:37:46:0c:e6:
                    37:39:f9:da:24:5b:9f:62:84:a0:db:90:f6:80:e9:
                    28:a9:0d:71:de:86:71:29:62:98:75:55:d9:1e:1b:
                    96:51:a3:9d:94:b9:f5:8c:4d:ce:4b:a6:eb:3b:d9:
                    01:6b:67:76:99:15:5a:ec:32:fe:6d:66:c7:74:e3:
                    85:73:8d:31:39:52:ba:4e:74:8c:51:8d:c2:7d:66:
                    f3:57:48:47:83:15:95:0d:67:09:32:cc:f5:de:7a:
                    e1:0d:7d:7c:aa:82:46:05:78:07:ed:b7:96:9c:bc:
                    94:d9:e0:dd:83:4f:1e:c5:00:95:ed:7c:a3:0f:4e:
                    88:c0:55:21:41:45:36:7d:46:23:1e:ee:79:c4:00:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:53:F5:88:9A:76:5A:08:54:46:E1:DE:B6:52:66:59:FB:38:0D:21
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/XlP1iJp2WghURuHetlJmWfs4DSE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150773

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.245.0/24
                IPv6:
                  2001:44f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:e3:1b:41:82:3b:6b:65:a6:7c:05:9d:97:d1:02:2f:a8:21:
         a2:42:7c:eb:97:7a:c3:bc:3d:bb:e1:ab:bf:31:31:6e:4f:41:
         06:d0:5c:e1:51:4e:14:6f:49:42:e4:4d:cc:88:e6:40:4e:17:
         0e:3f:02:44:60:d1:dc:7a:81:21:63:dd:1c:6a:fb:31:50:b4:
         8f:f5:b1:45:c4:93:3c:09:75:1c:42:31:56:84:09:73:4f:7a:
         03:61:9a:1b:fc:c1:60:ae:4f:ea:5f:62:9e:da:1f:d9:24:f6:
         ef:9e:4e:09:67:a7:80:2e:1e:2a:6d:3f:1b:33:68:ab:c9:d6:
         61:f9:5e:7c:11:4f:21:0e:2f:f7:6e:65:99:07:e9:66:48:f0:
         22:be:a1:c4:34:d8:8b:5e:cd:c7:df:d2:c0:f6:ff:66:7c:4e:
         cd:57:b7:04:4c:4a:d9:7e:4f:91:20:ee:54:2a:f2:ef:df:d2:
         11:a1:23:01:1b:95:45:df:2f:68:b5:6b:e8:f3:c8:b7:f6:23:
         ff:46:9b:97:51:23:4a:49:78:be:86:3a:37:a8:86:91:fa:05:
         4d:89:f1:46:09:ee:bc:e9:43:71:5c:56:eb:a6:67:d7:bd:48:
         52:e2:d7:bc:8b:d9:e2:bc:89:84:a7:52:3e:53:26:8c:30:c4:
         92:36:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----