Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
File: XR4_PIuoncExBBA0X1DBAHYYEmE.cer (raw, json)
Hash identifier: HO9zNM0cAfv5+5Bggg+3ZQl0zNoYsFF6w96hf0+HD44=
Subject key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3B8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:50 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: IP: 27.147.0.0/18
IP: 45.64.232.0/22
IP: 61.57.128.0/19
IP: 103.224.200.0/22
IP: 123.50.32.0/19
IP: 124.155.160.0/19
IP: 2407:4900::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15244 (0x3b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:50 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:ff:0b:b4:da:00:3a:7d:8f:40:fb:df:8d:
03:81:68:36:64:bf:d3:5c:3b:26:23:08:ea:2d:4c:
40:99:b5:87:a4:8b:fb:66:93:73:d1:30:62:19:2f:
53:01:1b:b3:1f:dc:35:8a:91:07:30:3c:d0:9a:fe:
cb:f5:b4:9e:34:c1:5f:d9:62:26:c1:dd:9c:7c:b4:
e6:fc:69:b9:94:bb:bd:5d:1c:cf:25:5a:0a:ac:84:
f5:b0:b0:9c:e8:27:54:05:66:2e:b6:90:fd:84:aa:
38:8f:2d:7e:64:d2:bb:af:f2:2c:45:a5:be:34:5c:
6f:01:06:a4:72:ea:c7:5a:45:b2:39:f6:ed:0e:56:
a7:48:85:8a:a9:1d:1b:00:28:14:92:f4:2d:98:65:
45:e2:25:23:75:8b:95:ec:79:89:54:51:56:a5:70:
cc:ac:a2:47:79:40:9b:bb:fd:17:cc:65:b7:dd:04:
14:ca:bb:33:37:ec:7c:39:64:67:ad:05:5b:d5:a7:
21:98:cc:24:ee:c1:8a:31:1b:d3:4e:74:7a:66:66:
f0:e8:22:20:c8:57:31:2a:d1:fc:39:59:b5:bc:1e:
30:e9:77:96:7d:62:53:71:ca:c0:ad:a1:3f:4e:5f:
ab:1e:bd:23:13:d0:7b:6f:6e:78:51:68:99:f7:0b:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.0.0/18
45.64.232.0/22
61.57.128.0/19
103.224.200.0/22
123.50.32.0/19
124.155.160.0/19
IPv6:
2407:4900::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ff:76:fa:d0:8c:ed:54:7f:f4:2f:64:43:a2:cb:7c:b2:c0:
e8:b9:d9:3f:80:25:d7:54:23:6e:6a:81:a0:35:8a:07:1c:17:
3c:49:b7:d1:e5:34:8f:2c:49:6c:c0:8b:57:a8:80:dd:ef:18:
02:2b:b1:8c:63:06:d3:68:4e:05:1a:df:42:97:a2:24:37:cd:
5e:e2:56:49:89:1e:22:c1:e0:40:88:fe:f5:3f:0a:ab:0a:32:
39:b1:93:34:31:ee:40:8c:0f:d0:18:7b:da:41:95:69:f0:9b:
33:85:bb:52:de:5b:63:ee:ee:a3:ac:8b:e2:6c:54:17:81:cf:
61:a0:3d:0e:6c:74:76:11:ab:f5:10:36:9a:d0:33:f3:29:41:
96:1a:8d:6e:2f:f3:3a:d0:dc:2f:91:20:5e:05:ab:53:ab:c3:
bd:14:97:f8:73:a7:73:b0:fa:d5:c7:db:ec:62:7a:59:41:fe:
f3:18:a0:46:47:0e:33:0f:df:0f:a8:9c:09:29:70:b2:a5:4f:
af:4c:66:41:1e:7c:2c:29:5a:6e:81:c1:c4:e8:d4:a8:0b:61:
7e:3b:a9:e7:51:e6:c6:f4:d6:68:64:70:55:2f:a2:e7:cd:08:
fc:94:11:ce:df:9c:b0:59:c5:3a:f8:a5:14:92:60:f4:15:2f:
b3:43:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:17 2025 by rpki-client