Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer
File:                     9CF6ECD13FB5B2029770871AA6E5796104822624.cer (raw, json)
Hash identifier:          5g5MjLgvMK56xbDAFl22z4X7cFAXC3X+OtMAxAOQMlM=
Subject key identifier:   9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       1DCFC31B8C19D24D454E73202493846E19E40D1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:49:11 +0000
Certificate not after:    Mon 10 May 2027 15:54:11 +0000
Subordinate resources:    IP: 64.78.160.0/20
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:c3:1b:8c:19:d2:4d:45:4e:73:20:24:93:84:6e:19:e4:0d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:49:11 2026 GMT
            Not After : May 10 15:54:11 2027 GMT
        Subject: CN=9CF6ECD13FB5B2029770871AA6E5796104822624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:15:18:a9:2f:18:e3:56:59:3f:d4:da:c2:
                    a2:3b:ec:77:cd:f3:c5:49:93:aa:5b:44:3d:6d:f4:
                    f6:3c:13:db:f3:4d:21:88:e8:2f:0c:b8:8a:7f:e3:
                    f3:23:ba:a7:66:37:9c:c2:93:95:44:78:10:c6:d6:
                    d3:fc:f3:0b:2e:2f:ce:e0:67:e4:f9:33:fe:4d:3f:
                    13:a7:78:bf:84:5e:68:49:db:47:b2:c4:7a:a8:85:
                    8c:d4:cc:ca:d9:cc:28:f7:64:23:cc:e9:07:9e:d4:
                    01:3e:f9:41:b4:5e:0a:bc:d4:d4:eb:24:bd:04:92:
                    9e:8a:92:59:5e:29:2f:ec:ac:9a:e0:54:d0:e8:2e:
                    b9:6d:df:68:67:87:e9:93:20:85:25:bd:85:67:f9:
                    7c:4c:2c:52:f8:60:4c:42:30:4c:53:88:3f:7d:61:
                    07:7c:13:b4:89:29:80:67:6a:fd:ff:da:bf:53:06:
                    ab:63:8d:e8:77:cb:3d:04:46:95:32:f7:a2:7b:8d:
                    05:2b:43:ec:fd:4c:7d:40:cc:73:45:ab:ba:90:ce:
                    c1:cf:77:a3:d1:9d:4e:56:99:a0:88:52:fd:d9:89:
                    33:2f:42:01:27:10:2c:aa:1f:40:a3:ab:29:72:12:
                    ec:73:03:2c:d4:ab:7b:1a:bc:2a:0d:f8:f3:1f:0e:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.78.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:b7:c1:fc:02:b5:dd:0b:6a:24:bf:2a:8b:68:c2:66:0d:
         8a:d6:94:48:f2:fe:95:02:08:e2:7d:11:75:8c:48:43:b9:76:
         6b:a6:99:3a:2b:07:a2:8d:e4:8b:de:6d:e4:68:b7:13:d7:d1:
         42:24:2b:ff:53:70:e5:a7:94:3d:9b:a0:02:39:e3:ae:67:41:
         31:e4:67:c6:c7:73:30:dd:12:45:a1:7a:10:82:31:0e:fc:3a:
         3a:60:50:01:2c:e9:4b:fb:23:bd:33:88:6d:0a:86:69:5c:75:
         1d:5a:5f:9a:18:b9:39:a4:01:e8:60:81:d1:db:6c:00:3b:d2:
         23:40:5c:c6:e4:fd:37:79:5f:24:36:bd:fc:fe:42:11:c3:43:
         70:fb:58:24:b9:7d:31:e4:38:c8:d0:fe:b1:3c:4f:9b:26:4f:
         cc:52:b4:85:56:23:78:e6:dd:19:6a:f3:5e:29:75:f8:0e:ef:
         42:c6:27:57:f6:ac:e8:14:0f:d1:8f:d3:3e:f2:6a:e9:f5:55:
         8d:c9:13:0f:3f:5d:71:ad:72:bd:2b:4c:72:5d:e8:7c:2b:4a:
         44:63:73:52:cd:c7:8b:b2:a3:f6:e9:40:23:dd:07:24:97:38:
         6b:37:8d:cc:bd:b8:77:74:95:1f:2e:ac:19:80:4b:2f:b8:86:
         1c:e9:fa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:44 2026 by rpki-client