Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
File:                     C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer (raw, json)
Hash identifier:          S5hluwwpCDYD0peHD34k8PKJGv1SNrM1o2n00GGy/Ow=
Subject key identifier:   C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB
Authority key identifier: C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3
Certificate issuer:       /CN=A91BDB290000/serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
Certificate serial:       32958B738CBCA9042808AB8FF1C20FE133DC35B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/KKGAME/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:47:31 +0000
Certificate not after:    Mon 10 May 2027 15:52:31 +0000
Subordinate resources:    IP: 138.252.10.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:95:8b:73:8c:bc:a9:04:28:08:ab:8f:f1:c2:0f:e1:33:dc:35:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C3F27ABBA40D0C146E6599E319B2F8B79656A6F3
        Validity
            Not Before: May 11 15:47:31 2026 GMT
            Not After : May 10 15:52:31 2027 GMT
        Subject: CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:41:40:21:e1:2c:e7:45:23:cd:32:32:1c:
                    43:85:58:9b:8b:56:9f:bf:88:58:47:55:60:b2:58:
                    ed:50:55:66:6c:dc:70:ca:00:ff:1b:86:65:b9:a8:
                    30:58:b2:c2:6a:4c:73:11:6d:1d:b2:b8:38:55:ef:
                    52:4e:57:ee:0a:d8:08:95:ff:46:c5:af:3e:79:af:
                    99:7c:5b:c3:dc:fc:b9:9a:f2:e4:d8:3f:80:85:9f:
                    7d:68:d5:90:6a:8d:59:1d:6c:2a:84:1f:6b:3a:46:
                    b3:0a:61:85:da:af:f7:4a:9f:d2:5a:ad:8b:17:05:
                    83:64:e4:f0:30:21:c2:be:e1:0a:51:57:6b:7b:3a:
                    64:e2:5d:b2:9b:b9:8c:d2:52:94:fe:96:19:e1:cf:
                    5c:ef:c3:30:4d:b8:41:15:62:68:fe:06:4e:04:5b:
                    5b:6e:26:e1:f5:5d:fe:48:06:06:49:06:1b:7e:9b:
                    93:c0:a6:01:a5:cb:60:0f:ba:c0:5e:80:a2:26:73:
                    21:e9:c2:c4:2f:17:d2:0b:28:00:37:f3:13:d8:13:
                    32:98:eb:3e:cf:88:b1:41:fe:a3:60:69:e3:27:93:
                    18:b8:ce:9d:06:eb:f7:6c:0f:c6:b8:86:81:d3:4b:
                    7d:f2:1e:c7:d0:5c:04:ab:e5:fb:cd:4e:ec:d0:f4:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB
            X509v3 Authority Key Identifier:
                keyid:C3:F2:7A:BB:A4:0D:0C:14:6E:65:99:E3:19:B2:F8:B7:96:56:A6:F3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:cd:c2:eb:d2:8f:e8:31:96:f6:25:12:b6:a3:6b:b4:a0:d9:
         43:9c:44:d2:a2:e0:fa:ca:a8:1a:89:b6:b9:56:ca:60:49:fa:
         73:36:68:02:02:57:39:e0:5c:18:7d:28:5f:92:d7:b0:3c:25:
         32:96:a7:f3:ae:d9:b8:50:57:2f:13:c7:97:67:a9:b2:cb:2e:
         0f:d4:96:ea:b7:4a:3c:bd:98:bd:7b:7d:89:72:52:08:db:96:
         29:9b:44:42:e7:36:ed:15:2f:e1:c0:86:dd:c2:c5:fa:e6:0c:
         11:cc:72:52:72:b8:b6:b5:0a:f4:07:75:0d:3e:3b:17:34:2a:
         e7:5e:af:3b:19:e1:ed:7d:db:62:93:22:e9:d4:00:13:4c:d6:
         d8:f3:4d:2b:67:a2:fe:42:c5:11:62:d5:01:2f:01:0f:98:9f:
         a7:23:bb:69:05:fb:81:a5:c3:47:3d:5b:c5:7c:2f:cb:d5:dd:
         fa:5f:89:8b:8f:83:d3:f3:ca:ee:97:f7:6c:e7:29:32:c2:ec:
         9c:49:c7:19:15:eb:8c:e9:ec:0e:ca:92:83:6a:80:c0:54:f4:
         85:2f:1e:32:b9:76:6f:e9:cd:1e:11:76:5a:ea:9c:0a:1b:1c:
         e6:d8:75:2c:5f:c2:76:d9:c0:06:f3:f0:b9:9a:37:db:bf:b5:
         6f:fd:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:39 2026 by rpki-client