Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer
File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (raw, json)
Hash identifier: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=
Subject key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial: 4AEFA58E428C7CE956EC20B7DE3D85E9BE4069A2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Manifest: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft
caRepository: rsync://rpkica.twnic.tw/rpki/LAZCO/1/
Notify URL: https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 15:47:42 +0000
Certificate not after: Mon 10 May 2027 15:52:42 +0000
Subordinate resources: IP: 151.158.224.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ef:a5:8e:42:8c:7c:e9:56:ec:20:b7:de:3d:85:e9:be:40:69:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Validity
Not Before: May 11 15:47:42 2026 GMT
Not After : May 10 15:52:42 2027 GMT
Subject: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:bc:e8:f4:67:12:48:2b:e0:c6:80:e9:ba:
35:87:ca:3d:5d:12:b1:11:36:3d:bf:d3:2d:65:13:
67:08:7d:19:92:1e:bf:b2:98:a2:82:98:94:3c:21:
c2:35:ec:4a:92:e0:f1:17:d3:04:9b:3e:81:86:c4:
c6:59:7e:00:ed:ed:cf:48:9a:13:f4:87:5b:70:22:
3e:f9:b7:9c:db:3e:bc:e6:ec:78:9b:5d:69:24:60:
8e:b5:27:11:0f:3e:48:2b:dd:cb:73:f2:ed:61:8e:
fd:26:e1:f0:1a:c2:1b:15:e1:a8:9a:3b:4d:2e:96:
2c:50:d3:8e:6a:ad:4b:24:a8:47:3b:89:a6:42:eb:
e2:32:c7:eb:41:66:31:d3:bb:a8:5c:d5:61:f8:1a:
e0:7e:43:00:97:79:8c:43:c5:0b:f2:b0:2d:f0:94:
e3:15:4d:fa:e9:72:0c:34:eb:31:83:e3:5a:a2:86:
6c:63:1d:d2:03:02:a1:6c:1b:02:1d:11:23:f1:1e:
a6:fc:30:8d:2d:35:99:25:14:2a:c3:f5:09:b4:bf:
ae:38:94:de:98:4a:db:6a:68:02:7e:9f:39:57:e6:
61:97:8b:69:6f:a7:01:45:92:73:e6:97:3e:05:54:
b2:e0:46:81:1b:aa:9c:f5:46:8f:b2:8d:fc:e9:03:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05
X509v3 Authority Key Identifier:
keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.224.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:0c:61:6d:82:b6:d1:da:c9:6d:f5:a6:03:5e:42:0c:3b:60:
83:d3:28:b9:46:b6:44:90:a4:4c:36:03:f0:3a:99:a6:49:f0:
62:20:1e:cb:b9:32:b8:de:c1:55:97:ce:1f:a1:cd:96:c5:b9:
e9:d6:d4:b2:fa:5f:7e:2d:e2:ab:40:83:82:a4:04:5e:1d:95:
34:68:71:f2:e2:a4:42:97:3f:8b:26:40:2b:84:3f:6e:db:6d:
9c:fe:e6:b3:b2:ce:65:a2:38:a0:71:fb:f8:b1:0d:83:a7:ea:
0b:df:11:6a:d9:c2:1d:8f:29:60:b2:2c:f3:21:d0:47:8a:0f:
66:95:06:d8:7b:d0:c1:9b:76:dd:d9:1a:27:1f:29:05:8b:f8:
e7:ab:53:c6:1d:4f:6b:c6:8e:0b:08:a1:f2:7c:4c:73:2e:ea:
86:c5:0b:b8:52:82:e2:1d:c4:e3:e4:26:5f:dc:3c:08:f8:63:
10:d4:14:d7:44:95:ac:64:13:bf:f7:cf:57:e6:cb:cb:cf:b1:
14:ba:70:0e:9b:55:b3:e7:86:1b:65:a6:19:e3:e3:a3:36:e5:
96:cb:90:d3:cc:a4:52:69:be:74:50:c2:f8:0b:62:28:ee:9b:
de:9a:fc:c1:c4:67:ca:02:be:f9:64:84:18:9f:7f:af:85:c1:
ff:ba:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:40 2026 by rpki-client