Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
File: 46AF3A717A403BC5489BF5532E8CB67721141841.cer (raw, json)
Hash identifier: ALw78X6ujMsNHSGxJly6mQiYc1xbGsOdLdk59E6Wk58=
Subject key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer: /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial: 4946A66DB0200467DBBEECC8708F8978C0045617
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:58:14 +0000
Certificate not after: Mon 10 May 2027 16:03:14 +0000
Subordinate resources: IP: 211.76.240.0/20
IP: 2001:f18::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:46:a6:6d:b0:20:04:67:db:be:ec:c8:70:8f:89:78:c0:04:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Validity
Not Before: May 11 15:58:14 2026 GMT
Not After : May 10 16:03:14 2027 GMT
Subject: CN=46AF3A717A403BC5489BF5532E8CB67721141841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:0d:34:81:cd:c6:3a:1d:f3:2e:a8:3d:a0:
75:2e:7c:8f:4e:c6:55:9c:44:60:aa:ea:0a:20:0c:
d6:fa:d9:f9:8c:c6:4e:1b:a9:11:78:3f:59:ed:eb:
23:f0:d6:e8:ef:bf:6b:34:bd:37:d8:8a:8f:f8:46:
02:5b:6f:cc:16:ce:97:8a:cd:4e:de:95:af:18:3f:
d1:0d:40:ae:8f:04:b4:22:75:4b:95:8f:98:51:ce:
7e:18:02:4c:b4:f1:de:a5:6b:a7:8f:d2:d7:dd:3b:
fa:10:f8:fb:eb:04:d1:92:a1:ed:e2:43:93:41:d3:
c6:0c:8e:21:99:13:58:bf:e3:3f:cf:0e:df:ca:86:
28:fc:f4:29:aa:52:ac:b2:8a:9e:e4:12:25:36:53:
8f:c1:0f:05:62:15:11:f7:09:96:d5:40:e5:d2:fe:
ab:1b:03:cc:84:2c:d9:46:46:dd:14:81:25:04:16:
bc:8f:1e:5b:22:9d:a2:05:f5:eb:71:bc:74:d4:c1:
ae:92:a0:ea:28:94:24:98:2a:c8:57:48:0f:d4:e4:
36:fb:d2:4f:98:ea:57:5d:01:51:de:44:a7:6a:f2:
bd:bd:0a:04:27:99:76:9c:f8:1e:0f:40:9a:22:20:
61:87:c4:41:55:dc:e7:05:ad:0a:0a:b4:46:6d:c9:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
X509v3 Authority Key Identifier:
keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.240.0/20
IPv6:
2001:f18::/32
Signature Algorithm: sha256WithRSAEncryption
45:03:d2:ce:46:c3:e2:68:9c:3a:da:47:75:8a:d6:a3:03:f5:
2f:0a:1c:10:64:50:c9:f4:63:66:63:1c:83:cb:c6:3a:e1:34:
5f:77:d5:b0:2e:8f:ea:84:9e:a1:47:09:a9:67:b1:87:84:79:
46:d3:07:76:12:8f:67:c4:39:8e:d5:f9:11:c6:9c:cb:e8:ff:
16:4f:a1:42:fb:4e:67:ca:54:22:22:d8:d7:52:fa:f6:f7:10:
20:16:3d:be:9f:12:a0:31:50:c4:bc:86:c0:48:ee:52:7e:fd:
4b:3a:6a:a4:2c:ab:6d:6c:70:a1:ec:07:a5:1a:ed:38:f4:51:
63:5b:da:4b:db:a2:0e:7b:f3:07:b6:a8:62:91:78:85:6e:2b:
cd:4a:ba:a7:a8:fe:80:a9:36:89:73:ed:aa:a6:6d:30:e1:08:
26:6f:8e:de:8a:f7:5d:79:5d:9b:70:9c:01:ae:d5:ec:6a:f5:
cc:64:a0:66:30:d3:82:82:8c:7a:a2:ac:ae:9a:be:6a:28:bc:
84:d9:7a:47:a7:49:54:06:b8:b5:4d:96:5c:3f:77:20:89:8e:
86:53:00:33:07:3b:d6:c8:75:da:49:d8:06:ee:c6:35:1f:21:
44:ae:e1:f8:6e:05:31:2b:86:13:bd:e4:d8:f4:64:2e:8f:43:
15:a1:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:30 2026 by rpki-client