Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer
File:                     203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer (raw, json)
Hash identifier:          pxlmzRE4rcwcbEoeILx37SJQQJ88d732el5/bFDh+Rg=
Subject key identifier:   20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       12ADC38F7D1DF38B74A0633259D20954112D8847
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/ARCHE/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:42:54 +0000
Certificate not after:    Mon 10 May 2027 15:47:54 +0000
Subordinate resources:    IP: 157.15.32.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ad:c3:8f:7d:1d:f3:8b:74:a0:63:32:59:d2:09:54:11:2d:88:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:42:54 2026 GMT
            Not After : May 10 15:47:54 2027 GMT
        Subject: CN=203A90FB4F5E8AC12A1C8F72215AD26095C49252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:ea:ed:f1:23:53:81:cf:1b:35:f0:3b:b1:
                    f5:e5:31:0f:bc:b1:d4:20:aa:a0:0b:4a:92:b8:64:
                    26:7d:ef:97:06:15:65:c4:14:55:5e:22:b0:8c:89:
                    e4:ea:aa:cd:e0:3b:58:bd:32:5e:75:48:9a:60:64:
                    0f:c1:79:f6:5f:6d:ad:d0:21:81:79:77:7b:44:1a:
                    37:1b:66:71:6e:e1:da:fb:d7:c4:19:66:01:a0:b7:
                    f8:3f:a1:5d:5f:c0:de:d1:a3:96:f8:ec:86:60:e8:
                    1c:03:dc:24:75:c5:b8:0f:ca:bb:2c:ba:4f:f7:b3:
                    f9:fe:ec:4d:f9:b9:8d:d8:14:7a:54:61:d8:5a:b3:
                    15:5e:e8:34:75:54:2c:c1:27:10:51:38:f0:57:24:
                    54:84:f8:50:14:4e:95:77:8d:49:00:4d:e7:c1:dc:
                    84:02:de:95:9f:da:9c:14:1a:7d:d6:3e:fc:72:c6:
                    d1:64:51:8e:ad:4d:ba:e2:97:e9:98:1a:e8:8b:cc:
                    fe:b0:70:0f:23:8c:b6:a3:80:f0:4d:2b:0c:8d:3c:
                    9c:30:b7:81:bd:9f:3c:4f:e8:06:6a:36:ed:66:83:
                    03:90:75:31:68:73:9a:7c:c9:bf:d5:8b:31:be:32:
                    fb:ca:20:df:bf:0a:83:99:90:de:e7:89:91:9a:27:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:04:1c:30:24:50:c2:d1:e5:83:b3:d5:f2:c4:a0:02:60:
         4b:dc:1b:cc:9c:60:99:ed:1f:58:73:ae:e3:83:98:13:3e:78:
         79:ee:9d:ff:3a:65:26:b8:34:ae:41:6c:02:33:9d:b1:36:64:
         31:59:42:0a:13:bc:fd:0a:ac:89:2c:d8:0b:78:f1:fc:2a:0c:
         fa:cd:99:7a:f9:32:b7:bb:d3:a2:01:d3:cd:a0:74:77:3b:90:
         48:56:af:61:51:af:5c:26:50:7a:b8:79:de:75:a8:9a:72:7d:
         bc:a9:e2:91:99:f3:4b:f9:02:56:31:34:cb:75:0e:09:8a:73:
         f4:1c:f3:a5:62:e4:7e:67:f4:bf:0c:36:3d:e0:71:28:0b:dd:
         c0:de:31:a7:f9:d3:1a:10:3e:e3:33:4a:27:cb:64:6e:b4:46:
         6a:73:c6:00:3d:bc:15:cf:04:6e:80:78:b0:d2:5e:01:ab:ea:
         99:10:47:ca:aa:e4:65:a3:bd:13:2c:55:c7:68:7d:00:00:92:
         2c:d0:c0:e2:b2:5b:f9:e7:00:0b:60:96:8c:9a:2d:f1:0b:39:
         1a:6b:43:5e:76:28:a1:de:a2:f1:41:9f:28:62:30:25:67:8e:
         f9:9d:7a:2f:60:57:09:65:f4:ba:02:ad:06:67:5d:17:1a:82:
         bd:c6:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:06 2026 by rpki-client