Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
File: mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer (raw, json)
Hash identifier: feyj7iPxqJ1d+ZhDMxeZi3DkrSinFw51HpYjt+C8xQ4=
Subject key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Wed 07 May 2025 03:52:40 +0000
Certificate not after: Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources: AS: 131633
IP: 103.122.20.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14369 (0x3821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: May 7 03:52:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:31:53:4b:52:ab:84:b3:fb:61:c4:22:2f:
05:f0:77:27:4f:76:e7:b1:39:0d:eb:7f:67:74:6e:
4f:44:f6:7a:a9:58:6a:1f:72:02:a7:b1:f8:3e:41:
42:9b:78:9b:9a:35:24:fe:df:cc:a1:cd:37:79:c4:
0b:a5:37:8b:ab:44:1f:7a:3b:f4:3e:1c:07:bb:fe:
66:0c:ed:5f:8b:e7:1e:a1:ea:8d:87:d9:2b:d3:d2:
ae:20:67:f7:4c:72:33:b8:6c:2c:9b:fb:bc:5a:e5:
48:99:83:49:a3:6e:91:73:a0:82:d7:76:af:f0:01:
46:62:f0:7e:fe:50:68:ec:4d:3c:d1:c6:4e:7c:89:
04:e2:55:53:86:81:d0:20:50:57:1b:96:12:0b:57:
b5:2a:7e:bd:11:d6:18:59:eb:2b:5e:9d:51:9e:5d:
c3:18:60:09:66:01:f4:5e:48:b6:01:8a:85:ee:07:
6e:6d:c9:bc:94:8d:09:6a:b5:9e:45:7e:52:a1:06:
ed:8c:9e:f9:ea:55:42:2e:55:14:0c:0e:1a:95:85:
54:97:ca:a5:0d:75:06:54:eb:5d:3c:fd:34:30:d4:
97:d5:41:93:70:8f:8a:76:dc:b1:17:eb:b2:ef:15:
b4:4a:87:53:46:21:76:52:c2:39:3f:06:3d:39:07:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131633
sbgp-ipAddrBlock: critical
IPv4:
103.122.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:4f:12:a6:c5:3e:ca:73:05:68:cb:97:9c:52:55:5d:dd:50:
23:dd:ae:5e:13:ca:30:53:dd:2c:78:51:34:96:9a:a4:ae:ed:
e0:1a:ad:98:7d:f8:7b:b1:3a:a8:0e:1e:ff:61:2d:ab:5d:5b:
cb:7b:59:f9:05:92:ef:c0:e4:96:fa:85:fb:62:2c:df:2a:ed:
8f:02:4f:a2:a4:cb:9b:29:3b:6d:f7:f3:0d:20:16:b0:76:4d:
94:31:3d:c4:df:24:f6:b2:26:7d:23:a3:d0:99:bd:96:cf:cd:
58:07:17:e2:eb:cd:3b:91:ca:a4:13:90:ab:78:a8:2a:ee:bb:
c6:36:07:e9:69:b2:93:40:f1:a2:fa:6d:c3:9e:cf:46:ce:1e:
36:12:22:8f:17:0a:c3:f2:5f:13:25:9e:a2:9f:0d:9b:a4:c1:
dc:1c:92:22:83:30:dd:0e:7e:eb:5a:ab:51:d1:70:47:23:d9:
4b:3b:96:e6:cd:f7:fe:fb:56:24:a1:f1:41:78:e8:91:0f:b9:
c5:f1:93:f5:c8:6f:c7:7c:c7:b7:d0:fd:8f:df:f4:54:64:c5:
6e:86:d3:8d:ce:8f:b6:e6:18:9d:f1:1e:d9:e8:8f:30:db:ca:
a3:38:a6:1d:aa:19:1e:a2:f7:88:eb:b9:c5:87:2d:b0:22:d5:
c7:0d:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:32:58 2025 by rpki-client