Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
File:                     1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer (raw, json)
Hash identifier:          hXVObgeGOPHVL4EOq7RcaD+AaWigML4aIHFG1s3vYKc=
Subject key identifier:   1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       4B5746576FE33DF2C624B5B0E273589A5BCBF560
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/SAELW/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:56:17 +0000
Certificate not after:    Mon 10 May 2027 16:01:17 +0000
Subordinate resources:    IP: 160.19.90.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:57:46:57:6f:e3:3d:f2:c6:24:b5:b0:e2:73:58:9a:5b:cb:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:56:17 2026 GMT
            Not After : May 10 16:01:17 2027 GMT
        Subject: CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:50:97:f2:9f:0b:e3:57:b9:52:5b:70:b1:
                    3c:18:1f:5a:bd:62:31:a8:4d:eb:b4:7f:77:a2:3d:
                    5a:a3:80:21:5d:bd:07:ef:8a:2b:40:59:c2:4d:91:
                    f9:65:4a:b5:74:94:a2:2a:fa:fd:ff:5f:35:47:74:
                    38:c4:ce:01:5a:13:f4:28:80:9a:e1:90:e8:b0:71:
                    a7:bd:d6:1e:c7:0e:be:65:52:79:70:cc:d1:30:8e:
                    66:70:8b:02:cf:41:bf:64:ed:4f:a2:9a:34:8f:69:
                    78:b7:81:2b:ae:a3:57:35:75:08:fd:e5:71:dd:d9:
                    47:33:13:f6:d6:13:7e:5d:59:c1:db:15:7f:f5:fb:
                    4a:3e:52:44:25:ca:b7:0b:dd:94:94:f8:b8:a7:63:
                    ca:cd:cf:b0:9b:a2:53:92:9b:75:57:4c:3d:24:4d:
                    94:2b:69:58:40:bb:35:80:7b:58:c7:a3:fc:f5:c1:
                    be:38:2b:4c:29:47:84:8a:7e:1b:cb:f8:50:77:fa:
                    05:72:29:c1:33:bf:4b:9f:c3:84:3f:e2:55:4e:28:
                    9a:04:75:62:ca:5a:fb:a1:a1:7e:f9:a5:5b:3e:6c:
                    87:71:20:13:2d:14:38:c9:86:52:ff:20:2d:25:ad:
                    af:10:75:31:9e:08:01:59:d6:4b:93:56:b8:44:b8:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:68:c1:4e:02:82:88:11:89:78:02:c3:2e:a0:c0:f5:b8:
         62:e9:b7:51:37:17:db:c6:c7:a7:f7:4c:cb:d0:79:09:48:ac:
         b8:3f:98:cb:73:a1:3f:4f:96:20:e9:7e:14:09:04:15:d7:71:
         0d:a6:8a:14:48:93:c7:61:fa:f8:8b:6c:7c:e5:44:49:9d:29:
         d8:61:1a:88:4e:41:64:92:75:1f:e4:80:f1:c9:e2:00:d4:a2:
         48:d5:3f:12:09:c5:2a:5d:12:dc:63:3c:54:51:7c:41:4f:6a:
         f2:69:58:74:5d:4d:44:e5:1f:86:59:9a:b5:c6:e4:9f:86:7f:
         fb:3c:04:99:66:e4:18:21:86:06:e1:b6:70:c8:b5:75:3d:1b:
         8a:9e:e7:10:b7:63:bf:75:e8:3e:6e:2c:75:26:41:e3:d4:96:
         77:6f:18:0b:86:6d:6e:ef:58:59:6c:70:35:f0:e0:be:79:a4:
         6f:d6:98:42:ac:f2:c0:0c:cf:ff:42:32:00:58:5d:07:75:28:
         67:ac:28:23:0a:05:52:cd:e8:82:9e:1b:14:93:f6:34:08:6f:
         b6:2d:f8:1f:5f:fd:47:63:07:21:37:1d:ae:91:d5:45:6b:bc:
         20:c9:68:43:ed:08:34:03:dc:75:e6:e7:2e:96:86:a8:16:49:
         1a:65:bb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:49 2026 by rpki-client