Certificate
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
File: THcKx8Jx2lspFcoBuVmI0EFPQHw.cer (raw, json)
Hash identifier: 5qCf8vHI5s/dj0yKzjCNRNXUgeg0JeJVje+vNlO2L2Y=
Subject key identifier: 4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Certificate serial: 2038
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/
Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before: Fri 13 Feb 2026 01:49:02 +0000
Certificate not after: Wed 10 Feb 2027 15:30:20 +0000
Subordinate resources: IP: 151.158.168.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8248 (0x2038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Validity
Not Before: Feb 13 01:49:02 2026 GMT
Not After : Feb 10 15:30:20 2027 GMT
Subject: CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:73:ca:c1:0f:81:23:44:02:91:79:b5:1f:
38:87:93:66:7c:be:46:bc:17:b9:5b:61:7d:ef:cb:
32:f4:0b:3c:45:20:ec:97:2e:25:db:64:84:91:7f:
b7:63:4e:ae:48:3f:87:b7:bd:70:cd:97:6d:20:ee:
f6:d3:a0:98:73:c8:3a:9b:b5:0f:55:f2:22:eb:1d:
3c:76:9c:0e:2f:46:13:72:0b:1e:ea:c4:8d:ab:4a:
fe:44:51:fa:a0:c8:4f:b9:e5:8a:40:1a:a7:d3:34:
05:bb:8c:83:6b:57:c8:ba:93:2d:4e:2c:f2:b0:24:
f7:c3:e4:27:e0:f6:7d:90:a0:ba:c8:03:cd:d7:ad:
e1:4d:6c:af:7f:5c:6d:60:ba:3e:b7:0a:de:b9:5b:
b9:57:96:6f:db:c5:94:d1:f8:01:4b:43:bc:be:b8:
d1:ed:35:d7:d9:4c:74:a8:fd:78:61:54:25:c2:7e:
8a:79:c0:b8:3d:00:df:54:8e:6d:37:cc:d6:8d:ba:
8b:b7:75:68:a2:39:54:8c:cd:eb:88:15:ea:38:8a:
9f:7f:96:ac:b3:63:cf:d7:99:6c:fe:5a:0a:ae:23:
71:98:13:7f:63:a5:be:69:91:d5:4b:5f:44:bc:59:
06:96:28:f4:f7:d8:6e:b0:7e:31:37:37:34:b8:f8:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
X509v3 Authority Key Identifier:
keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/
RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.168.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a6:fa:8d:b2:a4:4a:94:1d:40:72:09:43:2b:f1:17:90:d4:
2a:75:77:9e:49:ae:67:c9:c2:db:28:1a:d3:98:30:cc:30:85:
f8:5f:a2:84:b0:38:d6:c5:36:06:28:cc:bc:ae:c6:f3:e4:2f:
a2:d0:7c:ea:54:8d:5b:0e:a1:8d:0d:0e:b7:f1:11:be:20:65:
eb:f8:79:b3:d2:86:a8:fd:22:22:1e:33:bd:5d:4a:db:c8:50:
e0:88:a9:5d:55:17:b7:7c:f4:ae:83:6b:21:68:43:72:21:ea:
a0:83:f2:27:78:2f:03:0b:de:0e:4e:05:18:d4:72:cf:0f:e9:
50:46:b1:0c:4a:9f:b8:c0:ac:7b:31:14:77:f1:e5:b9:05:51:
73:9f:fa:c9:8f:25:69:7a:99:4e:78:16:98:f4:e5:83:9d:fd:
91:15:e0:cc:06:8e:25:74:c7:d6:ec:72:44:ae:0c:cc:b3:79:
b7:5b:38:39:1b:bb:93:27:bf:e6:7a:11:db:88:29:bc:c4:c0:
2e:8d:0f:87:9c:e7:69:bc:81:74:8e:74:2e:a1:0d:de:19:90:
47:a6:36:ab:9e:10:df:0a:a9:aa:a7:b6:3d:50:97:54:e4:df:
4f:e5:9c:4f:23:ed:6a:c8:3d:b4:6e:64:ce:8b:22:28:1d:13:
a6:f3:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:57 2026 by rpki-client