Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
File: 3D576C4841082805B3CDBD7337F3963A8833174B.cer (raw, json)
Hash identifier: /9d0ID7FtsxwXTFIXW+Unq8ovnMbfVc04z1fohbHgbo=
Subject key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 0A54A3961EF6CB3635690EA6BC840D90CC9EE26B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft
caRepository: rsync://rpkica.twnic.tw/rpki/CKMATES/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:44:16 +0000
Certificate not after: Mon 10 May 2027 15:49:16 +0000
Subordinate resources: AS: 131629
IP: 103.119.212.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:54:a3:96:1e:f6:cb:36:35:69:0e:a6:bc:84:0d:90:cc:9e:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:44:16 2026 GMT
Not After : May 10 15:49:16 2027 GMT
Subject: CN=3D576C4841082805B3CDBD7337F3963A8833174B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:46:e6:df:39:ba:d7:da:19:b2:16:17:02:
82:c9:a4:77:8a:8a:82:08:c9:2a:73:e1:09:e5:21:
63:1f:7a:8a:ea:9f:6e:7e:d3:6f:b9:7d:79:06:50:
d9:6f:e6:0e:ee:ec:d9:96:91:a9:5d:32:ad:7d:37:
08:85:2e:68:ba:00:2f:e9:d2:15:49:99:47:42:a0:
40:6e:1b:a6:bc:7d:f7:03:41:b4:03:f6:5b:40:55:
85:00:46:cf:38:15:ab:0c:96:7f:ec:40:8e:74:cf:
f3:59:09:53:b6:e3:c1:48:c6:13:36:fb:48:d4:5e:
b2:f5:03:03:be:1a:b8:86:d1:f2:3b:e1:0e:df:38:
e7:af:b6:9d:1c:62:bd:de:1e:da:8d:ef:22:ff:5b:
59:30:da:55:cf:a0:a4:77:d2:20:07:79:b2:b5:1b:
d5:e7:e5:3c:03:87:e1:69:3a:63:b8:c2:32:9f:21:
fd:f1:31:54:ea:42:5a:1e:94:21:6d:85:0c:d8:ae:
9a:4c:32:f7:74:e2:4b:08:9c:15:0b:77:e9:42:c0:
4e:4f:9f:60:78:12:22:a8:fe:bf:0d:f5:29:58:d2:
e5:76:b8:d1:9e:fc:f9:1d:77:29:0a:e2:ae:64:8b:
6c:ca:55:8f:d7:ff:50:74:8f:d3:ce:96:f6:e5:68:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131629
Signature Algorithm: sha256WithRSAEncryption
a5:43:e5:c2:de:6a:80:e0:47:21:16:f0:a1:e2:d5:36:59:cc:
c3:e1:99:fb:65:35:d0:d9:b9:f1:49:e9:50:44:d4:08:fa:65:
2a:32:d3:1b:69:c6:93:86:dd:9b:38:c3:64:a6:e3:78:70:dd:
a8:32:25:29:c5:b9:70:15:12:d2:4a:bf:dc:15:a0:ec:80:16:
d7:8b:08:12:b3:32:d1:94:6c:8f:28:67:94:5b:39:a2:4a:bc:
33:78:8e:74:8e:d9:c7:5a:05:8f:4e:f6:ac:e9:3b:7e:b9:83:
b7:30:5b:23:ab:bb:00:1b:47:f6:d6:85:2c:53:72:f1:c9:c1:
dd:ad:11:9b:31:4b:83:6a:53:51:b5:d2:d1:e4:ff:c8:82:00:
a2:a2:2b:e2:1b:43:d4:82:e0:eb:c2:13:e8:64:62:3f:ca:52:
b4:f5:2c:65:50:b1:f2:ca:82:24:1d:de:75:08:f9:49:68:58:
f7:6e:5c:56:c0:c9:e2:5b:f9:84:60:20:54:b8:40:3b:ec:09:
01:3e:e5:d3:83:1e:31:6f:72:dd:82:5c:72:44:0a:fa:b3:52:
6d:7a:25:94:8f:fc:f5:df:12:fb:78:0f:52:fd:0a:4d:ac:15:
99:77:ed:23:87:98:9f:1b:9f:0d:5d:cb:15:c9:c1:c0:04:2b:
c4:1f:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:56 2026 by rpki-client