Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ODsu-CC-VSm_ObPEsuq69SNpd4s.cer
File: ODsu-CC-VSm_ObPEsuq69SNpd4s.cer (raw, json)
Hash identifier: 2T2IthrlOLsQx8iNXkAw4krk22wAW7HBCwt7Z8UfRYg=
Subject key identifier: 38:3B:2E:F8:20:BE:55:29:BF:39:B3:C4:B2:EA:BA:F5:23:69:77:8B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3D26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ODsu-CC-VSm_ObPEsuq69SNpd4s.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:50:52 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: IP: 2401:c620::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15654 (0x3d26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:50:52 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=383B2EF820BE5529BF39B3C4B2EABAF52369778B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:87:74:31:36:d2:a3:dd:e1:3b:89:00:05:
2e:94:e4:f6:41:19:94:6d:1a:b2:99:2f:e4:81:2d:
14:49:8d:14:a1:90:74:af:a9:27:66:c7:43:a6:5b:
0e:7d:d8:8d:43:c6:18:ad:af:39:41:01:2b:0a:46:
22:e9:de:3b:96:dc:20:99:d6:95:5d:b8:89:47:f1:
d4:ad:42:1b:b6:f5:d3:2e:1c:ae:ba:30:3e:ad:24:
07:a8:eb:f4:80:63:d4:5b:62:a8:5c:22:dc:76:12:
3a:6e:0b:c7:f1:d2:36:ff:b4:4b:8d:a0:c6:65:f8:
ac:1f:a3:6d:2a:f8:02:61:24:20:fc:78:8f:c1:0c:
7f:f2:9c:48:5e:3e:e2:93:c6:9b:5f:57:fd:61:7d:
b0:af:c8:20:b0:43:cd:53:04:9a:9b:e1:47:fb:16:
23:99:a8:a3:52:4e:b8:3f:7c:83:c4:f6:c0:63:d4:
d6:4f:b8:11:90:fb:90:fa:9a:75:7c:9c:f8:a6:82:
a6:c0:91:54:29:f9:b2:03:85:8d:72:09:9d:75:e3:
f7:44:9e:c2:55:2a:e9:57:f8:37:60:32:af:d0:f1:
a2:1f:4f:39:01:a0:67:95:bb:82:ed:b0:48:34:1a:
15:d0:bf:bc:19:e5:68:93:63:40:b1:4f:f0:59:f4:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:2E:F8:20:BE:55:29:BF:39:B3:C4:B2:EA:BA:F5:23:69:77:8B
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ODsu-CC-VSm_ObPEsuq69SNpd4s.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:c620::/32
Signature Algorithm: sha256WithRSAEncryption
9b:97:3b:6c:62:82:76:5f:63:bb:31:95:ab:a7:41:43:a3:79:
db:52:5b:76:99:d6:7e:83:55:ab:61:d9:b5:49:ba:25:69:05:
92:6a:a4:03:c0:82:c3:57:c5:1b:7d:03:80:f0:81:d8:36:14:
97:25:bf:fe:f9:fa:90:3b:b6:bb:e6:c3:e3:6d:db:69:8a:4a:
4f:90:4e:34:93:d2:ff:cf:ba:36:b8:a6:83:62:e8:28:0c:72:
3e:5e:6a:bc:98:15:4d:c9:ab:1f:7d:8b:93:e0:59:77:05:0c:
24:94:ac:e2:01:41:f1:09:d4:86:69:53:5c:f3:04:a1:6e:47:
24:07:31:ae:a3:0d:0e:6e:8b:7b:09:5b:5a:12:88:8e:7b:28:
56:26:95:24:e1:75:c8:84:56:fa:f7:43:87:c8:3e:37:6e:5b:
0f:09:e0:0d:2d:8b:68:b7:6c:d4:a1:4c:50:a2:b9:02:ea:1b:
db:27:56:c7:f9:c4:f3:9a:b1:ef:2f:cd:18:64:9e:b2:dc:64:
b7:32:53:87:f4:5c:a2:6f:92:ba:07:1f:0a:0d:93:01:25:f1:
5f:27:99:41:da:a3:65:c4:45:d1:ed:6d:69:a1:c3:c2:34:9a:
1e:35:b2:e3:b2:14:3e:7c:d1:c1:0b:76:db:a6:aa:51:2d:4f:
87:d5:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:54:51 2025 by rpki-client