Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer
File: 86E5C9C6D878819F10BEC976A116DB8148A15794.cer (raw, json)
Hash identifier: +mrSGbT/oqs1Iyd51HiS9twUP7o0KmIO6k9JTJdAUVA=
Subject key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial: 4D5121E268FE6DF41E9302968178495A94D7808D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft
caRepository: rsync://rpkica.twnic.tw/rpki/III/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:46:52 +0000
Certificate not after: Mon 10 May 2027 15:51:52 +0000
Subordinate resources: IP: 140.92.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:51:21:e2:68:fe:6d:f4:1e:93:02:96:81:78:49:5a:94:d7:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Validity
Not Before: May 11 15:46:52 2026 GMT
Not After : May 10 15:51:52 2027 GMT
Subject: CN=86E5C9C6D878819F10BEC976A116DB8148A15794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:b3:8e:03:c7:2e:cd:4f:e1:d8:7f:3d:fa:
49:73:7b:02:43:6d:b4:7f:56:12:6d:87:12:3d:90:
44:86:02:1d:b8:c6:83:b5:1c:f6:ee:d4:b2:11:80:
29:f2:2e:82:b2:a8:22:b5:f1:a6:00:ea:82:85:30:
1c:06:7f:b7:0e:53:8a:96:95:0f:88:d9:b1:e9:f3:
ba:9a:28:29:82:81:b8:54:3d:c5:32:36:ab:b0:1c:
59:57:ef:d3:41:f2:79:c7:84:53:f0:6d:42:aa:63:
68:5c:c4:1e:4d:88:bf:7c:77:ec:87:02:0a:94:ea:
c9:b6:86:1b:ac:23:9e:75:bf:f1:2e:68:b0:b0:03:
d6:bf:e2:58:b0:fa:3f:03:79:52:70:f7:56:bb:34:
f9:1a:19:c0:67:b1:42:8d:10:f4:e1:c4:b8:af:cd:
94:2f:d9:9f:96:0a:06:c8:bb:66:9a:77:bd:de:e8:
3e:c3:35:58:a0:32:f9:cb:43:95:1a:72:ba:48:5f:
d9:08:25:f6:c2:88:ce:b7:e3:f8:1a:e3:bc:b1:ca:
f5:7e:b1:3f:0a:66:61:84:44:18:e6:72:85:4d:4d:
6f:e8:32:40:c6:a9:b6:9b:ee:e7:ad:d8:df:59:89:
a5:7f:7f:c5:d2:2c:67:1e:22:7e:90:91:d2:46:f5:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94
X509v3 Authority Key Identifier:
keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/III/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:6f:92:1e:03:77:b1:3a:4e:b4:5f:14:47:81:64:ef:2b:92:
19:cf:03:ee:c2:6c:1a:5a:e2:be:40:20:80:e2:17:2d:5c:16:
b5:a0:47:31:90:77:0d:69:c7:f6:4e:87:b9:7b:27:bd:4e:a0:
60:ed:40:c9:ac:7f:11:d9:ac:8d:8d:e5:6d:5c:b1:40:b8:36:
06:e4:61:0a:bb:dd:12:94:d1:80:e1:b9:bf:6e:c2:8c:60:57:
8e:5f:4f:97:9e:99:ff:b9:39:54:07:1d:86:4b:56:32:32:48:
ec:a2:e5:fb:a3:d0:59:10:6d:bd:12:e1:32:e1:c8:47:5f:f0:
87:4c:bf:67:a0:28:46:f2:46:b6:e2:13:ac:01:92:92:90:e1:
72:eb:6d:f1:fd:53:74:af:32:22:4a:0e:26:ab:f4:6f:5b:30:
0a:f6:d2:d9:33:34:28:4b:d2:5d:12:d0:88:e0:7c:c4:f4:36:
1b:ab:2d:f5:62:b2:aa:d6:04:a2:80:68:c3:67:1b:e8:31:e2:
8a:4d:cf:f4:46:a3:fd:f6:b1:96:be:8a:2a:d7:30:5e:68:a6:
33:b5:2e:7b:87:42:d1:0a:07:06:50:97:a7:cf:cf:c1:20:7e:
10:16:15:68:11:07:ef:9d:f6:8f:fc:33:7e:61:6f:09:e8:bc:
03:bf:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:36 2026 by rpki-client