Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer
File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer (raw, json)
Hash identifier: DQPN2c0JDFhRCPGp8pkgXnIvIRU9CuQRkDEWVGko0OE=
Subject key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial: 30063356024A0171CC01B952E522ADC29F784B0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft
caRepository: rsync://rpkica.twnic.tw/rpki/ZUSO/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 16:01:15 +0000
Certificate not after: Mon 10 May 2027 16:06:15 +0000
Subordinate resources: IP: 138.252.12.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:06:33:56:02:4a:01:71:cc:01:b9:52:e5:22:ad:c2:9f:78:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Validity
Not Before: May 11 16:01:15 2026 GMT
Not After : May 10 16:06:15 2027 GMT
Subject: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:78:d3:41:b7:d1:6c:74:f1:06:83:cf:09:
51:3d:a9:a2:db:a6:19:1b:f9:67:be:bc:e0:68:f1:
cf:39:57:fa:bc:57:33:61:b7:14:68:8a:d1:b6:1d:
53:d1:22:87:6d:2f:ba:ce:6a:d2:34:2d:1d:24:76:
79:ad:d1:2e:ab:c6:29:d1:4d:37:58:be:3c:4c:30:
e3:aa:ba:b9:53:50:19:eb:79:23:52:26:19:54:a3:
e6:6d:66:e8:d1:15:c4:83:7a:c6:50:74:c7:da:fe:
5b:8e:83:ab:a6:81:a5:d5:dc:de:de:3c:c8:44:e7:
55:b7:b7:29:d1:9c:d6:1f:3a:b9:2e:e8:4c:79:04:
26:82:9c:16:2e:33:d2:5a:25:a9:de:05:4b:8a:2f:
82:c3:d4:77:92:7f:de:0e:a5:70:18:37:82:32:4b:
64:13:91:19:ac:08:5b:68:54:b4:56:1a:01:8a:a8:
7e:4d:79:f4:68:52:20:c4:47:42:4b:28:86:90:dc:
13:26:1e:e0:d7:98:63:b9:d5:95:61:b4:18:a6:4d:
aa:2e:5e:ba:a3:bb:93:07:58:69:a1:d6:ec:4e:f0:
f9:a7:fd:0c:7b:bf:8f:9b:b4:9d:db:43:f0:32:1d:
bd:5e:81:d3:9f:72:e4:60:17:88:4f:10:12:c3:e3:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3
X509v3 Authority Key Identifier:
keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.12.0/23
Signature Algorithm: sha256WithRSAEncryption
96:21:51:ae:1a:43:af:f5:08:6b:1c:79:8b:6c:85:58:e6:60:
41:d1:48:52:55:0e:45:d0:c5:27:49:e1:e1:65:bf:62:29:12:
26:13:5c:90:e3:f0:a7:f2:73:1c:b1:65:b3:f1:78:58:55:c5:
ad:53:de:fc:31:a1:c2:46:03:c1:97:8a:8b:fb:49:11:c6:85:
05:04:1c:2a:48:d4:6e:fa:77:b8:83:7c:b1:56:eb:14:2a:c6:
b8:0c:04:8f:88:98:ec:12:a4:31:98:a3:53:39:da:bf:4d:13:
0e:23:14:cb:de:69:5d:7d:9f:3d:e4:cf:f8:52:7b:e8:c8:cc:
b9:36:3e:f1:fc:d9:d4:f9:d2:76:06:e1:be:17:9c:03:07:30:
b6:50:47:17:11:f0:f3:49:e8:cd:af:da:77:37:5b:f6:b4:cc:
a5:15:58:9d:b2:15:0d:84:8c:42:ca:c6:f5:6a:91:55:94:1a:
a8:a2:e4:0d:a5:5d:2c:2a:b3:30:cb:ae:9f:ff:35:38:6f:f0:
a6:ee:c3:e5:2b:53:91:e3:16:54:90:94:80:2c:0d:88:91:eb:
93:28:09:fa:22:47:95:7e:d3:6d:91:fb:c7:ba:e4:f4:a4:6b:
bc:d4:7c:9f:0e:86:49:81:ef:76:e9:40:47:0e:08:3d:d7:2b:
7e:82:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:34 2026 by rpki-client