Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
File: B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer (raw, json)
Hash identifier: 3biHXfzBYtasSH0i+C0S0g31404XMyT2VduXQ5XTPvA=
Subject key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial: 3FDBEA4303AB6E00175C9286F31F5D545F09CD9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TANET/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 20:52:09 +0000
Certificate not after: Mon 10 May 2027 20:57:09 +0000
Subordinate resources: IP: 134.208.0.0/16
IP: 140.109.0.0 -- 140.138.255.255
IP: 192.83.166.0 -- 192.83.196.255
IP: 192.192.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:db:ea:43:03:ab:6e:00:17:5c:92:86:f3:1f:5d:54:5f:09:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Validity
Not Before: May 11 20:52:09 2026 GMT
Not After : May 10 20:57:09 2027 GMT
Subject: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:ee:b3:e9:85:13:a4:70:5f:97:3c:cd:87:
25:68:61:b5:d3:30:9b:fb:da:9d:e5:88:9e:0b:2e:
09:bb:81:83:b7:c5:0a:a7:de:0a:50:8d:b1:dc:e0:
5a:c6:2d:af:67:15:4e:6e:5e:6b:6d:4c:af:ac:8a:
7a:7e:f5:9e:34:a8:41:c5:5d:d7:f5:e4:92:85:98:
ce:d9:c9:9d:fe:cd:ff:5a:76:70:e4:a6:61:97:d6:
63:d3:bb:86:d9:37:ca:1a:6c:49:77:5e:ec:6b:c7:
8a:56:46:57:2c:23:e4:f3:b5:08:9f:f9:0a:98:44:
f8:78:f9:34:99:51:36:e0:c2:a8:b9:6c:c5:fd:69:
4f:67:cd:8b:d2:f4:a8:d1:be:29:68:90:67:eb:72:
be:e8:3a:da:d5:a6:b3:32:ed:4d:87:cd:01:d2:1b:
92:7b:6e:a1:1f:50:96:c0:1c:56:fb:ff:5b:ca:f2:
90:9d:98:73:4e:a7:8f:60:22:c4:6c:b8:41:3a:f4:
b0:ea:85:cb:42:fd:14:43:5a:38:04:82:7d:78:d6:
e1:d1:68:d5:03:6a:17:b9:73:34:5b:cf:77:96:b2:
74:b1:a6:fb:bb:c5:c4:44:4c:a7:74:17:e3:8a:80:
31:a3:c6:1c:e5:74:b7:fd:3d:92:94:1d:29:9a:96:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Authority Key Identifier:
keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
140.109.0.0-140.138.255.255
192.83.166.0-192.83.196.255
192.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:ac:82:ca:ac:05:53:b7:07:ee:73:e9:7f:49:1a:5a:8c:3c:
ad:21:d4:b5:0d:a2:8f:a8:7e:39:a7:d3:c3:91:3b:e0:d0:26:
44:be:a0:62:8e:25:9b:5a:61:e9:23:61:23:81:0e:47:69:6c:
73:ef:36:74:f6:22:2d:d6:71:39:73:a6:90:9c:90:94:83:0b:
29:83:25:a9:8a:10:5f:14:66:f1:61:5c:17:70:ac:f9:52:f6:
a2:41:c0:76:f6:cd:26:9e:91:87:25:53:1f:6a:e4:26:e6:fb:
aa:33:b5:a0:2d:ce:df:fd:14:a0:2d:ab:0e:19:4f:24:40:e0:
d9:24:38:b9:51:61:80:e4:61:89:a1:b3:cc:3a:37:61:b0:ff:
77:ba:38:53:3e:2e:e8:5c:ad:1b:dd:00:eb:af:69:09:4c:56:
aa:d7:ae:ea:43:40:95:90:5c:7e:d8:b7:62:26:40:ac:ac:49:
ac:dd:02:50:ef:30:09:67:b1:24:96:a1:7f:c4:ea:f6:b6:a8:
d3:6f:c1:69:66:6c:c5:0b:eb:61:88:1d:ba:45:37:8d:f6:db:
05:8e:27:8d:8e:f8:f1:8d:ee:9a:5d:20:29:7e:06:19:27:a6:
35:fc:eb:13:e5:6d:cf:e0:86:93:4c:73:10:ab:6c:b4:ea:45:
e5:d9:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:11 2026 by rpki-client