Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer
File:                     54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer (raw, json)
Hash identifier:          hOFmkL1RHG1YS5fBRXqKggxu/gq3siBOaE3tV4t0a2E=
Subject key identifier:   54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       54E0BAA40C1690DF4C87CC4870F3A2F5B7BEB9D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/MINGDING/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:48:27 +0000
Certificate not after:    Mon 10 May 2027 15:53:27 +0000
Subordinate resources:    IP: 165.101.86.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e0:ba:a4:0c:16:90:df:4c:87:cc:48:70:f3:a2:f5:b7:be:b9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:48:27 2026 GMT
            Not After : May 10 15:53:27 2027 GMT
        Subject: CN=54A767F70005E532FFA8B9DDE3FA21A08AB2071B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:9f:ae:bb:14:ee:32:94:67:c7:b6:1a:d6:
                    40:7c:d9:74:d2:3a:1d:d9:ff:96:93:d2:ad:61:3d:
                    58:c2:12:38:3f:04:00:26:a4:49:fd:61:54:3e:a2:
                    0f:56:63:af:9f:d1:83:18:1d:6e:db:73:27:35:23:
                    79:3b:53:00:a3:5b:4e:c5:05:e1:c3:23:e8:6d:5d:
                    b4:0d:8f:ca:c0:ef:aa:52:7c:9b:46:c9:4f:4f:9f:
                    8b:2e:0f:01:20:65:49:51:87:c2:e2:45:38:41:0b:
                    4f:77:8a:53:3a:bb:69:b3:91:28:08:af:df:f0:dc:
                    11:44:7d:7a:39:49:49:3a:f9:be:f8:1c:e6:69:68:
                    d7:32:83:0d:82:08:25:f8:c3:f0:7f:e4:61:5e:90:
                    2f:f7:21:48:f6:b1:8a:47:85:13:61:f7:ad:70:f0:
                    8e:f7:fb:b7:5b:54:a0:69:33:26:86:ae:ce:5e:b6:
                    5a:91:83:2b:21:e1:e0:af:8a:40:68:56:69:69:5c:
                    47:e1:19:34:62:c3:d4:8f:0a:c4:82:2d:d4:39:92:
                    09:f0:75:b7:92:e8:9e:5e:d5:4d:a4:ff:30:1f:1d:
                    c8:2b:e5:c2:a3:4d:36:66:42:7f:6f:2f:43:46:31:
                    20:68:fc:7d:0e:0d:18:41:9b:dc:c7:1d:4a:23:55:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:ed:f6:86:e3:e3:9a:6d:ee:db:0d:2e:cb:34:49:a8:a0:
         77:dc:82:8c:33:4e:69:58:c0:b7:4f:8d:d7:05:30:d9:df:cb:
         ab:6d:08:d7:6e:4c:d5:89:44:03:1f:7f:a1:b4:ea:d4:cb:93:
         a5:8a:f8:36:eb:bd:04:91:c6:44:9b:04:e9:18:71:98:24:4f:
         05:26:ef:0d:37:09:3a:35:40:9d:2a:a6:19:01:9d:e8:a0:d6:
         d5:76:52:fd:41:10:1b:9f:d6:0d:24:46:c1:ed:32:4a:5d:e6:
         80:45:8b:76:57:39:95:b9:12:97:5d:af:e7:dd:4a:bf:3b:48:
         bd:cd:cd:92:d9:65:e0:58:9b:2e:7d:81:59:5c:4d:37:7e:e7:
         f2:16:d0:7d:34:0b:c4:1d:80:9a:04:d6:9d:97:8b:37:73:79:
         b5:e0:81:fb:2b:80:37:e4:24:48:e4:2d:fe:89:b0:9f:24:82:
         34:0a:d6:2f:9e:ce:42:c1:04:bc:ce:8b:6b:5e:56:64:77:dd:
         ec:6f:5b:34:8b:ef:67:c0:a7:05:ab:51:f3:1f:10:5b:57:a3:
         3e:44:37:0f:a7:aa:fa:30:df:64:b0:4a:f6:f1:2b:d7:a6:f5:
         b9:5a:14:0c:4e:4c:86:06:e4:4f:a6:4b:0c:00:af:09:0e:22:
         b6:0c:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:39 2026 by rpki-client