Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
File: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (raw, json)
Hash identifier: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=
Subject key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 06727BD2BEC76533CBEA0125343271BC7C14046A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Manifest: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
caRepository: rsync://rpkica.twnic.tw/rpki/HINET/2/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:46:35 +0000
Certificate not after: Mon 10 May 2027 15:51:35 +0000
Subordinate resources: IP: 2001:7fa:1::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:72:7b:d2:be:c7:65:33:cb:ea:01:25:34:32:71:bc:7c:14:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: May 11 15:46:35 2026 GMT
Not After : May 10 15:51:35 2027 GMT
Subject: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:aa:b3:20:83:d6:df:d7:74:1a:99:ff:d7:
7e:65:0d:6a:4a:ae:24:3b:6b:9d:9e:27:b0:2d:11:
c5:7f:c1:60:1a:88:35:bd:0a:71:85:97:53:c5:5f:
13:a2:c8:cf:cd:fc:22:d0:ea:25:06:ec:4c:dc:62:
04:5e:7a:99:13:d0:ee:c4:ba:e1:12:bc:82:2a:20:
2c:fa:8c:5f:1f:fc:2a:7b:8e:05:6e:a4:ed:2a:cf:
3a:4f:f6:95:0b:16:3c:d5:76:36:a3:5d:6a:34:ba:
10:87:0d:1c:e4:b8:f0:6d:9a:f6:ae:50:f8:ce:54:
b5:38:68:ed:40:cf:67:a8:45:cc:cf:bf:b1:f7:6f:
67:22:ea:49:20:87:28:cd:82:5f:51:51:17:1d:4a:
9f:54:82:95:5a:51:68:07:39:03:3b:49:de:a5:2e:
77:84:ba:91:72:ae:02:51:cb:6b:a9:e7:92:30:57:
91:f1:9e:c1:f4:38:64:72:14:1b:f0:72:01:0b:67:
e9:81:ae:aa:10:45:4b:2a:14:77:f8:48:d4:33:f9:
6a:3c:ab:e8:49:8c:44:75:f2:90:cd:28:d8:8b:e7:
a3:94:11:75:ae:cf:21:02:87:46:11:a3:18:23:6b:
8d:22:45:15:ac:77:53:ab:33:e3:95:21:fb:24:a9:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:1::/48
Signature Algorithm: sha256WithRSAEncryption
49:48:45:02:07:6e:89:3d:fe:ec:6d:86:75:b4:71:03:bd:81:
78:e7:2d:e7:ed:02:99:fd:e8:ee:e8:18:6a:c1:92:50:f0:2d:
82:17:70:22:d7:5b:0c:16:57:16:e0:70:a4:15:d5:c8:fd:94:
29:2f:fe:5e:69:28:03:70:53:12:4d:3e:d2:57:d0:79:82:c1:
31:58:13:a1:ef:a1:5a:38:49:f3:32:fb:5f:e9:2a:af:8c:81:
b7:05:f5:ab:8a:ea:24:e0:26:10:a8:e6:85:d9:bb:de:69:de:
13:a1:c8:10:8c:72:aa:23:c3:ad:34:46:3f:ee:f8:19:fd:4c:
34:ac:1c:f4:58:11:9b:75:a8:01:dd:58:2b:bd:58:4c:65:f6:
33:c7:8f:1d:01:90:2d:38:d8:f3:c3:0c:d0:08:32:8e:27:48:
29:61:ce:ad:f0:6f:2b:29:f0:fa:ef:a6:fe:fd:87:ec:03:f2:
ad:64:eb:85:10:b3:68:5c:42:08:24:ef:54:cf:3a:97:4b:ee:
80:cd:a4:fd:03:63:0a:17:d7:1c:48:fe:c0:e6:81:f4:aa:6a:
39:2f:3a:65:e8:e0:9c:a9:63:6a:3e:87:01:7e:a2:31:91:19:
34:4b:61:2f:09:a9:94:c8:62:d1:f2:a1:66:20:5c:d3:b2:b7:
6c:cc:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:38 2026 by rpki-client