Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/3E6938BA00070CF3245F2491B7C88740A397A2D6.cer
File:                     3E6938BA00070CF3245F2491B7C88740A397A2D6.cer (raw, json)
Hash identifier:          vTFYCc3FC6b2RCLxWa3DPVeih+MWg0xW2J92JA7PaBQ=
Subject key identifier:   3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       171B14B6D879B9EBF90C500EF065F27C58D5086A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TCSKY/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:57:41 +0000
Certificate not after:    Mon 10 May 2027 16:02:41 +0000
Subordinate resources:    IP: 160.191.202.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1b:14:b6:d8:79:b9:eb:f9:0c:50:0e:f0:65:f2:7c:58:d5:08:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:57:41 2026 GMT
            Not After : May 10 16:02:41 2027 GMT
        Subject: CN=3E6938BA00070CF3245F2491B7C88740A397A2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2e:f8:67:a8:3f:b2:db:89:66:c0:b0:d0:44:
                    8f:57:d5:d2:6d:0c:f6:a7:24:82:89:56:f7:61:a2:
                    36:44:45:a5:c6:85:d8:8e:dc:2f:1d:be:21:cc:f9:
                    45:bd:f3:13:f0:c3:60:05:c5:dc:3d:1d:9f:c9:ed:
                    bd:be:12:38:7e:fd:37:08:63:b2:e4:4e:77:15:d1:
                    3a:ec:61:ff:e1:c8:70:ce:fc:b9:e6:8f:ad:cc:00:
                    4d:e9:3d:1a:ae:82:2f:28:e1:0f:76:5b:69:e7:8f:
                    ef:4d:6a:4f:15:13:a6:3c:37:a2:4c:c9:fa:b2:04:
                    bc:33:ff:c6:78:15:2a:7b:21:0d:8d:9b:a9:5a:30:
                    cd:f4:18:a2:fa:42:a4:82:be:53:a9:89:07:f5:b8:
                    eb:6e:d2:a1:d1:e4:52:6d:21:92:08:1d:91:bd:95:
                    6b:84:c3:22:77:b7:2a:2a:0b:a2:b6:cd:93:17:38:
                    9d:4b:80:a8:21:75:3d:b3:80:fe:2e:84:cd:35:0c:
                    09:33:47:76:db:94:ef:fe:67:ca:cf:dd:97:a3:d3:
                    6f:e3:47:0b:27:ee:c6:0a:58:24:09:09:6e:e3:23:
                    2f:53:22:e9:61:46:15:78:3f:5b:22:f2:ad:aa:4c:
                    aa:11:eb:f6:a6:10:7e:1b:f1:58:bc:12:1a:9d:98:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:69:38:BA:00:07:0C:F3:24:5F:24:91:B7:C8:87:40:A3:97:A2:D6
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/1/3E6938BA00070CF3245F2491B7C88740A397A2D6.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:9c:2d:fb:68:de:02:04:13:2a:2a:2b:8e:11:95:5b:58:
         9b:39:38:39:78:71:bc:49:69:04:c6:7b:3a:a3:58:3d:25:f8:
         f8:0e:66:71:58:11:32:57:51:e1:ea:08:88:86:da:97:1a:53:
         50:ee:99:1a:36:62:7b:63:85:8a:39:bc:39:8c:62:ce:b6:22:
         f8:a3:76:2d:fc:0d:14:95:47:41:ee:db:f4:96:08:3f:97:39:
         d7:2e:a0:1f:75:4e:52:4d:f9:d6:22:a7:7e:07:38:69:ba:36:
         29:92:8f:f3:77:a2:84:c0:6c:be:28:8f:7c:ed:a3:e5:a1:8c:
         e8:1b:f6:0a:73:18:7e:f8:8c:44:85:05:e0:68:e5:44:91:6c:
         28:67:f4:cb:5b:51:eb:20:83:25:a2:e9:62:52:2f:e7:c0:b4:
         2f:76:38:28:dc:c6:24:25:f7:eb:dc:12:7a:4a:51:57:95:a4:
         4a:4a:00:4a:64:95:16:f7:23:f5:00:29:c1:63:a8:44:9c:e7:
         fd:ad:17:b2:44:3e:3c:5d:73:18:94:eb:66:ce:66:01:50:11:
         7d:4f:a7:37:2a:2f:f1:f3:e6:c0:3d:1f:9d:37:df:9b:bf:15:
         be:32:eb:76:5a:07:96:44:a9:71:1f:dc:2b:ff:c7:fd:d0:18:
         86:3d:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:04 2026 by rpki-client