
Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
File: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (raw, json)
Hash identifier: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=
Subject key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 4836FB0A4FFC72DB8B5DCFA2D67D4505A6B59E46
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Manifest: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
caRepository: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:46:06 +0000
Certificate not after: Mon 10 May 2027 15:51:06 +0000
Subordinate resources: IP: 151.158.88.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:36:fb:0a:4f:fc:72:db:8b:5d:cf:a2:d6:7d:45:05:a6:b5:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: May 11 15:46:06 2026 GMT
Not After : May 10 15:51:06 2027 GMT
Subject: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:c1:8d:d0:18:ee:14:92:22:a4:fb:a0:3f:
d1:16:d5:c2:e9:d8:43:9c:2f:98:b0:32:d2:5f:25:
7b:72:55:7d:9d:c8:40:96:87:3f:31:b6:84:08:c8:
10:11:07:00:a9:56:86:50:67:ff:0f:7d:c0:e4:c2:
25:23:85:77:d5:42:a2:c5:f7:c5:bd:3c:d7:8b:c7:
a5:ac:7f:d4:49:73:f0:f8:b1:ee:9c:06:5e:7a:10:
1f:bd:02:e9:fd:b2:a1:cc:c9:79:cb:ce:d3:f8:50:
c1:1d:33:e8:f5:6f:62:85:53:79:24:f8:ce:a4:8a:
d7:fc:e1:60:d4:9a:fe:64:d9:93:b5:ce:30:ad:1b:
fc:f4:6b:1b:f3:bd:af:85:ce:91:5c:84:ef:30:5c:
08:86:21:58:cf:76:68:ef:6f:a5:a9:78:98:db:59:
11:47:a1:89:e8:1f:a3:8c:ac:0b:a0:f3:ad:94:ba:
21:58:78:7e:e4:e0:84:51:19:ff:b5:89:02:5c:1e:
db:3f:e2:5e:25:fc:e5:b9:7c:bf:f1:9e:5b:21:83:
fa:27:5a:cb:5f:62:a8:fb:ad:b7:dd:e2:fa:dd:fd:
9c:79:f9:47:79:d6:c0:7c:a5:5a:e7:6b:6c:55:aa:
44:14:70:75:83:3a:30:90:a3:35:ea:73:08:71:68:
2b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.88.0/23
Signature Algorithm: sha256WithRSAEncryption
28:b0:98:51:a6:03:68:ec:a9:a3:49:28:ea:be:b7:d2:f0:9b:
37:7b:50:55:06:0d:6d:62:ad:ad:7d:99:43:fe:08:65:67:3b:
a0:82:5b:24:75:65:1f:6c:95:7a:b1:87:75:de:45:6e:c1:25:
0e:42:87:aa:3e:ee:d6:c5:37:08:be:d0:60:bc:b9:70:f5:0c:
58:53:67:43:f9:cc:6e:e7:3f:14:b6:ea:b1:f5:9b:ce:6c:db:
84:97:97:3f:e7:19:1e:78:6b:e8:46:61:31:d4:64:9e:16:68:
aa:c5:32:65:fb:43:a8:52:41:dc:98:ba:a7:9f:cf:c7:90:2b:
8d:2b:70:4d:f1:cd:ab:eb:f8:bb:fa:32:bc:7b:a7:f1:ba:3b:
7f:96:9d:19:a2:4a:6b:06:c1:1f:94:7d:b0:b0:cd:01:66:0d:
69:61:48:39:3c:c5:7d:20:28:bd:87:ea:8e:1e:00:b2:d7:85:
be:df:a7:35:09:f0:a0:be:b8:db:de:ff:af:f3:e3:ca:1c:1c:
18:70:6e:ef:a6:a3:5b:db:1d:3a:db:bc:48:29:89:ff:72:2b:
cc:8b:08:bd:73:68:7a:4c:9d:70:47:73:5d:e7:f2:0f:c7:52:
f1:48:85:41:0c:d4:43:ce:a6:e7:47:07:60:42:b7:18:ce:a7:
9d:6d:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:04 2026 by rpki-client