Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer
File: 9F397B838061280C2F2A887AC9D64012310492D8.cer (raw, json)
Hash identifier: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=
Subject key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 757CB883B6B090910C4C93D6B6EFA4A18EF3616B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Manifest: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft
caRepository: rsync://rpkica.twnic.tw/rpki/BHIS/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:43:16 +0000
Certificate not after: Mon 10 May 2027 15:48:16 +0000
Subordinate resources: IP: 151.158.6.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7c:b8:83:b6:b0:90:91:0c:4c:93:d6:b6:ef:a4:a1:8e:f3:61:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: May 11 15:43:16 2026 GMT
Not After : May 10 15:48:16 2027 GMT
Subject: CN=9F397B838061280C2F2A887AC9D64012310492D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:e7:bc:8e:5e:5c:31:83:a8:52:01:8a:20:
ee:ce:f2:9b:6b:ff:ee:32:9e:b3:22:fa:43:f2:0e:
ab:48:b2:c9:12:ce:d2:40:94:3f:b9:98:7d:3e:c0:
d6:2d:a2:c1:9f:6e:b2:c8:4a:bd:01:b0:3e:73:46:
17:b6:83:ac:52:15:7f:dd:50:c9:92:6a:2f:64:ce:
14:f8:2f:5d:26:a2:36:d4:be:fe:7f:4d:c7:98:9b:
93:a4:63:53:9f:60:b9:0e:b7:a6:0b:ea:a0:71:78:
6a:b6:f9:ff:5d:5c:91:52:63:1c:96:a4:b5:72:ab:
cc:89:25:1b:79:d9:9d:25:a5:71:c0:9b:b1:2a:da:
6f:f2:1b:6d:41:9e:c3:12:0c:55:71:b3:f4:3d:f3:
e5:0a:ab:2e:ec:4b:8a:ae:7c:fa:fe:00:9a:34:df:
d1:9f:23:c3:45:97:10:8f:40:7f:d0:54:c8:c2:82:
ea:42:26:79:35:49:06:ef:3e:08:4c:75:45:f8:5c:
36:d3:52:fc:c1:cf:fb:74:8c:24:8b:cc:a8:fd:c4:
30:ec:08:15:19:0b:66:43:51:df:8b:03:62:63:5b:
4b:ac:39:30:cc:cc:ef:0c:77:29:75:82:dd:6f:92:
1d:70:89:68:02:0d:a4:b0:22:82:eb:99:20:9a:f2:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.6.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e3:b3:bf:ad:4b:ce:65:78:b8:45:01:6b:a9:fb:d9:be:1f:
3b:c1:83:56:9c:d3:44:75:cf:5b:13:01:3f:1e:a5:a5:50:1b:
ab:c6:29:b6:d9:48:0d:ed:0c:15:5a:da:c6:a8:31:9a:ff:1a:
92:b6:91:d7:e1:77:99:15:e0:21:5d:9c:42:18:00:57:e0:20:
04:4e:c8:cf:c4:73:19:ba:b6:05:11:5e:a3:cd:dc:59:59:dc:
f5:d7:6d:ed:f8:e0:a7:33:33:cc:6c:02:22:1d:bc:cf:64:28:
dc:d6:a3:6d:df:e5:66:65:3b:51:ae:5c:14:ae:75:11:5b:3a:
1d:b5:34:b4:a2:52:f9:9d:c1:9e:b4:cb:d5:38:5c:71:95:39:
dd:89:63:e2:6d:7c:8f:44:96:6b:5d:47:45:e9:80:c0:dc:7f:
77:39:cb:76:dc:f4:7c:07:8f:8d:08:c8:ac:05:36:81:ee:c1:
31:99:52:14:b4:83:0d:0b:87:67:3c:fe:06:e2:cc:5f:9c:b3:
24:50:ac:bb:cb:39:2d:c2:05:30:fa:e9:77:38:53:20:58:47:
6f:0a:6c:92:b3:23:2f:c9:0c:0d:58:64:aa:10:0b:42:ff:9d:
36:2b:67:7b:e9:e5:a5:91:57:de:ef:5f:ae:82:87:41:a6:2b:
55:9b:b2:8e
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUdXy4g7awkJEMTJPWtu+koY7zYWswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDNDlCQUUyNDMw
QkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1MB4XDTI2MDUxMTE1NDMxNloX
DTI3MDUxMDE1NDgxNlowMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4
ODdBQzlENjQwMTIzMTA0OTJEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrF57yOXlwxg6hSAYog7s7ym2v/7jKesyL6Q/IOq0iyyRLO0kCUP7mYfT7A
1i2iwZ9usshKvQGwPnNGF7aDrFIVf91QyZJqL2TOFPgvXSaiNtS+/n9Nx5ibk6Rj
U59guQ63pgvqoHF4arb5/11ckVJjHJaktXKrzIklG3nZnSWlccCbsSrab/IbbUGe
wxIMVXGz9D3z5QqrLuxLiq58+v4AmjTf0Z8jw0WXEI9Af9BUyMKC6kImeTVJBu8+
CEx1RfhcNtNS/MHP+3SMJIvMqP3EMOwIFRkLZkNR34sDYmNbS6w5MMzM7wx3KXWC
3W+SHXCJaAINpLAiguuZIJrylH8CAwEAAaOCAmIwggJeMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJ85e4OAYSgMLyqIesnWQBIxBJLYMB8GA1UdIwQYMBaAFMSb
riQwvuw1TBsU8ibnYfyb3PAFMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMy9DNDlC
QUUyNDMwQkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1LmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi94SnV1SkRD
LTdEVk1HeFR5SnVkaF9KdmM4QVUuY2VyMIHZBggrBgEFBQcBCwSBzDCByTAwBggr
BgEFBQcwBYYkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9CSElTLzEvMFwG
CCsGAQUFBzAKhlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85
RjM5N0I4MzgwNjEyODBDMkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDA3Bggr
BgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZpY2F0aW9u
LnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBl54GMA0GCSqGSIb3DQEBCwUAA4IBAQAp47O/rUvOZXi4RQFr
qfvZvh87wYNWnNNEdc9bEwE/HqWlUBurxim22UgN7QwVWtrGqDGa/xqStpHX4XeZ
FeAhXZxCGABX4CAETsjPxHMZurYFEV6jzdxZWdz1123t+OCnMzPMbAIiHbzPZCjc
1qNt3+VmZTtRrlwUrnURWzodtTS0olL5ncGetMvVOFxxlTndiWPibXyPRJZrXUdF
6YDA3H93Oct23PR8B4+NCMisBTaB7sExmVIUtIMNC4dnPP4G4sxfnLMkUKy7yzkt
wgUw+ul3OFMgWEdvCmySsyMvyQwNWGSqEAtC/502K2d76eWlkVfe71+ugodBpitV
m7KO
-----END CERTIFICATE-----
Generated at Wed May 13 01:37:35 2026 by rpki-client