Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/65802AFA3A589A07637F32B017F67FDE17419D66.cer
File:                     65802AFA3A589A07637F32B017F67FDE17419D66.cer (raw, json)
Hash identifier:          FTSmV2yjwrcCKx2j7nGRX3MSmvIntZcRaD/ZtjfBBDY=
Subject key identifier:   65:80:2A:FA:3A:58:9A:07:63:7F:32:B0:17:F6:7F:DE:17:41:9D:66
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       1907E692DE5D95943698D7DE1EB708C7E2346DD6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:48:07 +0000
Certificate not after:    Mon 10 May 2027 15:53:07 +0000
Subordinate resources:    IP: 138.252.54.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:07:e6:92:de:5d:95:94:36:98:d7:de:1e:b7:08:c7:e2:34:6d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:48:07 2026 GMT
            Not After : May 10 15:53:07 2027 GMT
        Subject: CN=65802AFA3A589A07637F32B017F67FDE17419D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:73:1f:18:84:dc:4b:3d:9a:3d:be:aa:c6:
                    7c:ed:2c:2a:63:b1:52:34:46:c1:44:2b:18:89:a2:
                    14:2e:41:89:ed:50:f6:ec:fb:04:e8:b0:a4:55:e9:
                    dc:ba:d5:5f:43:9d:01:78:a6:60:bc:61:00:6f:37:
                    0c:68:43:a6:23:c4:5d:5b:2a:e4:07:58:a9:a8:b1:
                    6d:f0:4e:de:8e:21:e7:27:45:aa:42:18:d2:73:f9:
                    6e:af:eb:f4:05:de:55:da:82:0e:b0:81:e5:e2:f0:
                    e1:f6:d7:db:e6:81:1a:8c:72:3b:e8:1c:e2:db:24:
                    69:9d:d3:27:58:b4:61:75:2c:a0:43:b5:92:79:e8:
                    08:3d:f3:c5:83:60:09:a5:5d:a8:6a:2a:0c:d5:f1:
                    4b:b9:06:6a:09:99:fe:7a:84:33:a5:ee:53:b6:ec:
                    45:e7:e2:de:ef:f9:ab:78:91:74:cf:02:9b:98:24:
                    df:79:8e:57:df:22:14:ba:ce:51:45:27:cd:1e:47:
                    a0:e6:8f:96:7b:98:f6:01:cf:d8:4f:16:70:25:f5:
                    85:18:b2:70:f4:02:18:f5:4f:7f:cf:ad:ab:f9:63:
                    0d:d5:f6:44:51:4a:a3:a0:d6:ac:9c:9b:c9:68:e3:
                    7b:27:bd:32:64:3c:8e:6a:13:b1:5e:dd:90:19:7f:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:80:2A:FA:3A:58:9A:07:63:7F:32:B0:17:F6:7F:DE:17:41:9D:66
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:35:bd:a5:ec:7a:b5:c1:3e:df:ab:ef:4d:a0:57:1c:90:69:
         7b:bb:77:23:64:18:f1:86:63:a4:c4:06:b8:5b:c9:b8:9b:d0:
         7c:1b:ec:9d:7b:33:b2:3e:a6:9b:3e:c7:bf:c6:7c:0e:18:ff:
         c1:f7:81:84:40:7d:b8:0d:7d:ac:9b:4a:7f:a6:55:52:e9:30:
         7d:de:2b:cf:c0:01:52:14:f6:9c:bc:94:32:b1:3f:01:0f:9c:
         60:53:2d:71:6c:87:63:db:ad:0d:66:1f:ab:a6:d2:7a:bf:47:
         b2:df:da:7b:eb:d1:80:3d:30:47:76:77:9c:f2:51:69:5a:36:
         88:f2:32:8d:90:95:de:e4:57:5c:db:33:fc:bb:1c:39:7c:62:
         51:7c:52:e8:72:b2:0d:c3:dc:75:06:c0:e8:a0:ce:33:0f:54:
         44:67:5e:e0:57:11:96:08:57:07:35:87:9b:b7:de:35:00:23:
         6f:94:07:8d:17:5a:d8:70:d6:3b:16:f6:83:37:f9:f4:59:9c:
         86:72:93:b6:e7:bf:47:0d:9b:a7:2f:76:0b:43:2a:1e:72:d3:
         f4:19:fe:83:5f:55:de:a4:49:ae:ef:3f:5a:6a:82:77:fa:ba:
         11:5d:af:8d:08:35:4b:bb:d0:43:0b:24:75:f5:d5:be:c9:30:
         14:93:3e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:07 2026 by rpki-client