Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer
File: fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer (raw, json)
Hash identifier: 6uEVuIgm3hQI8YTONgjV8ur/hO5cJUAxapjLmbiCiVk=
Subject key identifier: 7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer: /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial: 3C2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 22 Aug 2025 08:14:57 +0000
Certificate not after: Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources: AS: 131678
IP: 103.149.66.0/23
IP: 2405:e540::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15406 (0x3c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Validity
Not Before: Aug 22 08:14:57 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:5b:4a:0c:b5:56:51:61:e8:7d:73:5b:83:
60:7d:bb:18:55:bd:c8:ef:42:d8:d6:c1:0d:5e:af:
5f:4e:ab:f2:67:79:8b:08:ed:6b:52:69:ea:01:09:
a4:f4:90:84:ed:91:54:de:b3:55:af:ff:6f:3d:d5:
39:4e:54:b8:78:fb:ad:9d:a5:6c:8f:c2:b7:99:2c:
55:ea:26:57:79:f7:e8:d1:da:fe:e5:e3:5f:b6:c0:
90:56:55:7d:97:29:93:23:58:6d:2a:eb:fa:98:a4:
35:5a:4e:8d:4c:4f:8d:d7:d4:8b:0c:1a:8f:6b:50:
33:f6:00:6f:06:85:1a:82:43:9a:46:28:7e:12:d0:
c3:c7:a4:80:11:b2:d8:f4:98:4c:7e:58:ac:c4:a1:
cf:34:81:53:e6:76:20:5e:57:39:21:a2:54:0d:a4:
98:b9:ad:76:1c:f5:cb:1b:e4:3f:af:14:ac:99:45:
5c:33:87:b7:50:24:e4:1d:63:3a:ac:61:19:42:24:
e8:02:9a:db:11:05:80:32:6e:36:c4:8d:a2:5b:f0:
17:a6:f0:33:fe:04:c2:03:e3:c7:e8:ff:30:66:6a:
fe:84:0c:2a:84:79:1f:03:99:c5:28:89:59:5b:2e:
7d:d5:56:4c:3a:b2:70:07:86:d8:20:7c:ce:1c:59:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D
X509v3 Authority Key Identifier:
keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131678
sbgp-ipAddrBlock: critical
IPv4:
103.149.66.0/23
IPv6:
2405:e540::/32
Signature Algorithm: sha256WithRSAEncryption
26:81:8b:77:43:ea:7c:ac:23:87:07:82:f7:05:75:8c:71:d3:
31:e6:90:62:71:c8:0d:4e:33:10:21:54:af:28:fa:34:e1:d7:
4b:12:b9:93:c6:7c:fa:15:cd:b1:af:98:e4:9c:82:c3:fd:a4:
da:f2:7d:4d:28:fa:07:ca:38:4a:22:52:b4:2a:90:8e:e7:b4:
ab:e8:b8:67:42:d9:e3:50:77:d7:52:25:b9:93:f2:08:83:d2:
1f:d1:c1:d2:ce:16:ba:4d:4f:5c:d8:f9:3c:ae:8e:67:0b:21:
e9:28:44:cb:0a:ab:e5:42:21:76:ae:18:88:b3:a6:2d:76:c6:
46:fe:32:7d:a5:e0:02:48:b1:2a:66:10:4d:57:2d:05:cf:fc:
c5:2b:7f:88:cd:fb:68:72:6a:f6:94:0b:b1:62:27:38:53:73:
6a:f1:34:42:7a:c0:b5:c2:74:7c:44:77:a7:bc:c7:97:57:6e:
3e:10:75:69:13:1c:01:f5:41:1f:18:52:d3:be:8b:f7:1f:cb:
72:c9:30:66:90:b2:c0:dc:a0:6b:74:c8:4d:f8:6c:79:2f:fd:
58:84:72:19:a0:8a:78:a2:85:d9:59:7b:3d:c2:c0:25:9b:31:
63:9e:79:26:87:cd:3d:c4:34:29:b1:b4:52:a0:1d:d9:4a:12:
50:91:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:57:25 2025 by rpki-client