Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
File: D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer (raw, json)
Hash identifier: UC78tB80vWeguiSk6nOjcKqHVFd+9o9y3WI8yhACoWM=
Subject key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer: /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial: 29836F345D3B1B66E25AF8FF58524164616A5C3F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
caRepository: rsync://rpkica.twnic.tw/rpki/NCIC/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:49:02 +0000
Certificate not after: Mon 10 May 2027 15:54:02 +0000
Subordinate resources: IP: 139.175.0.0/16
IP: 192.72.3.0 -- 192.72.252.255
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:83:6f:34:5d:3b:1b:66:e2:5a:f8:ff:58:52:41:64:61:6a:5c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Validity
Not Before: May 11 15:49:02 2026 GMT
Not After : May 10 15:54:02 2027 GMT
Subject: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:9d:b0:aa:fc:d7:31:09:d1:5c:e4:4e:0c:
c2:4d:ef:f3:98:ce:13:97:d8:d9:47:f5:1b:57:ca:
03:08:4f:f2:31:0e:a8:5a:55:16:20:57:d7:5e:2f:
13:ba:5c:36:04:4f:b6:b0:74:b3:5e:5c:ab:cd:cc:
fa:7b:76:f4:89:09:3e:eb:27:20:ed:37:0c:85:09:
4e:f6:54:81:fc:dc:bc:df:c0:3f:60:00:b2:3c:23:
5e:eb:e4:00:bf:de:1b:51:2a:74:e5:74:ce:19:20:
46:36:87:e5:70:bb:42:41:41:46:95:a1:54:a0:9e:
75:9d:11:8b:21:ba:cc:2c:93:43:19:29:4f:f7:12:
f2:42:c8:51:80:99:de:c0:e8:08:53:4f:d4:2b:dc:
5f:55:96:30:80:fe:dd:0b:e0:ae:10:84:82:b1:0a:
a6:e7:c0:9e:1e:0d:89:25:a0:d9:a4:63:1b:b5:c4:
7b:ba:07:0a:7b:1b:2f:32:b4:53:df:91:54:8e:55:
59:5f:d9:08:03:8f:cc:e8:c7:91:7a:9b:ec:66:d9:
b4:50:b6:1f:41:d0:68:85:be:89:86:50:73:3a:9c:
d9:22:54:42:3b:bc:dc:54:80:7b:63:70:4a:d2:16:
72:9d:99:5a:bf:3c:18:2b:08:3f:43:e4:cc:5e:d2:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Authority Key Identifier:
keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.175.0.0/16
192.72.3.0-192.72.252.255
Signature Algorithm: sha256WithRSAEncryption
5c:73:5c:01:d1:53:c9:2b:c8:49:88:6a:cb:e7:f0:1a:b4:95:
fb:21:78:25:84:6a:20:22:3e:75:ac:01:44:53:95:3a:db:28:
af:21:03:b5:d2:94:14:7b:a4:4f:e1:55:e4:8c:b2:96:cc:a5:
05:56:bd:1a:85:5d:46:1a:f0:33:cf:28:33:38:fa:cf:97:71:
4b:d5:1a:c2:7f:96:2a:ff:75:99:e3:98:fd:c1:6e:6a:55:55:
45:d6:68:89:0f:b5:bc:3f:af:59:78:80:85:7a:5c:ff:fd:5e:
08:87:c1:c1:d6:c7:ba:e3:de:20:bf:35:0b:75:c9:4f:5b:05:
92:ed:c2:4c:77:3e:89:3f:4c:fb:58:e5:ff:25:ec:9d:7b:00:
82:a1:43:08:4f:d9:bb:9c:96:e2:92:9c:c9:b6:c3:fd:13:f1:
9b:2c:67:e8:48:c3:2d:e8:55:28:83:79:7b:76:37:68:fa:1e:
19:ac:be:cf:39:d0:63:8a:fe:92:80:35:ab:38:a1:d9:c3:22:
74:3e:65:c6:0f:be:b8:84:52:b1:c6:86:df:33:09:04:16:dc:
55:4f:66:43:90:13:78:80:a9:11:ab:8e:dc:f9:e5:24:19:d7:
c4:d3:5c:76:d2:01:e0:35:cd:e9:99:9f:28:34:79:aa:a3:ea:
ed:f4:56:01
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIUKYNvNF07G2biWvj/WFJBZGFqXD8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDM0YyN0FCQkE0
MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzMB4XDTI2MDUxMTE1NDkwMloX
DTI3MDUxMDE1NTQwMlowMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3
QzNDOTQ4RUU4ODU5NjEyQzczQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKXPnbCq/NcxCdFc5E4Mwk3v85jOE5fY2Uf1G1fKAwhP8jEOqFpVFiBX114v
E7pcNgRPtrB0s15cq83M+nt29IkJPusnIO03DIUJTvZUgfzcvN/AP2AAsjwjXuvk
AL/eG1EqdOV0zhkgRjaH5XC7QkFBRpWhVKCedZ0RiyG6zCyTQxkpT/cS8kLIUYCZ
3sDoCFNP1CvcX1WWMID+3QvgrhCEgrEKpufAnh4NiSWg2aRjG7XEe7oHCnsbLzK0
U9+RVI5VWV/ZCAOPzOjHkXqb7GbZtFC2H0HQaIW+iYZQczqc2SJUQju83FSAe2Nw
StIWcp2ZWr88GCsIP0PkzF7S4rkCAwEAAaOCAm8wggJrMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFNXJkBbQHt3gpNR8PJSO6IWWEsc7MB8GA1UdIwQYMBaAFMPy
erukDQwUbmWZ4xmy+LeWVqbzMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMC9DM0Yy
N0FCQkE0MEQwQzE0NkU2NTk5RTMxOUIyRjhCNzk2NTZBNkYzLmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi93X0o2dTZR
TkRCUnVaWm5qR2JMNHQ1Wldwdk0uY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr
BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ0lDLzEvMFwG
CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS9E
NUM5OTAxNkQwMUVEREUwQTRENDdDM0M5NDhFRTg4NTk2MTJDNzNCLm1mdDA3Bggr
BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u
LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0w
GzAZBAIAATATAwMAi68wDAMEAMBIAwMEAMBI/DANBgkqhkiG9w0BAQsFAAOCAQEA
XHNcAdFTySvISYhqy+fwGrSV+yF4JYRqICI+dawBRFOVOtsoryEDtdKUFHukT+FV
5IyylsylBVa9GoVdRhrwM88oMzj6z5dxS9Uawn+WKv91meOY/cFualVVRdZoiQ+1
vD+vWXiAhXpc//1eCIfBwdbHuuPeIL81C3XJT1sFku3CTHc+iT9M+1jl/yXsnXsA
gqFDCE/Zu5yW4pKcybbD/RPxmyxn6EjDLehVKIN5e3Y3aPoeGay+zznQY4r+koA1
qzih2cMidD5lxg++uIRSscaG3zMJBBbcVU9mQ5ATeICpEauO3PnlJBnXxNNcdtIB
4DXN6ZmfKDR5qqPq7fRWAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:20:16 2026 by rpki-client