Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
File:                     2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer (raw, json)
Hash identifier:          wjiHROAQKjP3eOl+pTObgxD20XG5V+MaoIRDux3IM8w=
Subject key identifier:   21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       0E1F3963C6CFB92D43E46FE017813F1BB20F257A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/GRONEXT/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:46:12 +0000
Certificate not after:    Mon 10 May 2027 15:51:12 +0000
Subordinate resources:    AS: 131667
                          IP: 103.146.210.0/23
                          IP: 2405:a040::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:39:63:c6:cf:b9:2d:43:e4:6f:e0:17:81:3f:1b:b2:0f:25:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:46:12 2026 GMT
            Not After : May 10 15:51:12 2027 GMT
        Subject: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:89:9f:10:2f:ce:2c:91:ee:fc:36:0e:25:
                    ba:82:57:60:7f:f2:23:31:a2:79:c9:e9:15:ac:20:
                    c2:bc:12:fd:e7:7f:93:65:b1:db:f5:01:f1:18:f2:
                    de:09:ca:90:1d:de:cc:58:ac:af:84:b6:cb:55:46:
                    b0:f8:0c:ed:42:17:f7:f5:38:ed:f7:34:4d:f8:8f:
                    2f:1a:d3:32:ab:49:15:aa:33:88:e8:8a:74:5b:82:
                    6d:f7:7d:a2:dc:59:cc:e7:35:1a:b9:3a:eb:b1:cb:
                    b2:cd:56:73:62:ff:09:a0:70:cb:d1:17:e1:00:cb:
                    33:3e:4a:c6:b1:e4:ca:ee:8e:81:a4:4a:b1:aa:9e:
                    5a:c5:c4:9c:67:e7:f0:4c:ce:b1:cf:c5:33:67:2b:
                    93:46:81:b3:22:39:b0:30:ed:e4:55:fe:cf:09:41:
                    37:34:ff:f3:aa:07:6e:ae:4b:2c:35:2b:27:e0:6d:
                    28:26:59:f0:23:23:61:a1:b1:c6:6e:8c:77:33:55:
                    a8:b8:c0:40:df:6e:60:1d:9e:f0:f7:69:fd:5a:29:
                    de:8a:09:58:96:50:bd:18:91:2f:cd:d8:3b:68:fb:
                    5f:ce:a6:37:11:cc:22:59:3c:a2:89:66:5d:fa:1a:
                    93:86:e9:16:f7:4a:d8:95:34:d4:df:5f:0f:ac:a9:
                    44:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.210.0/23
                IPv6:
                  2405:a040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131667

    Signature Algorithm: sha256WithRSAEncryption
         08:04:fc:31:53:ab:10:a0:2a:9e:e5:49:6b:71:5e:a6:2b:e7:
         55:25:43:94:58:93:ee:cd:b1:83:94:3c:9c:2f:0e:7d:e4:37:
         5d:92:25:b3:6b:0d:fe:ca:c4:ec:78:69:e9:4e:22:02:56:96:
         c7:ec:55:dc:fd:b1:f5:79:23:6a:32:31:36:5e:ce:98:6b:27:
         9e:b8:e8:d8:15:39:f4:eb:5a:d4:f1:ad:0f:f6:5c:cb:73:af:
         74:d2:18:b3:d0:f9:41:96:b8:4b:50:50:40:d3:b7:f1:7d:8e:
         ce:45:ca:d0:48:a8:a4:d9:b5:63:57:c6:80:e8:a3:72:da:fc:
         22:6f:5c:3f:46:fd:b1:cc:7e:26:98:68:b2:1c:93:d5:d1:a4:
         ae:e7:a8:03:7f:5d:ea:d4:24:06:88:84:37:72:c1:e6:39:13:
         10:dd:6a:7e:b3:47:79:d2:2c:36:0e:6c:6a:d9:c9:12:83:74:
         b2:e2:34:a6:46:91:f9:8f:f6:32:37:11:df:87:49:13:97:bf:
         73:1e:70:cd:83:11:be:35:c0:72:1e:20:f4:28:08:84:38:c6:
         05:ed:23:96:cc:6f:97:85:52:93:1b:c1:72:c6:f8:fa:71:b9:
         52:89:26:ad:3d:90:cf:54:e0:6b:20:b0:72:b6:40:5d:91:1d:
         2d:d7:09:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:01 2026 by rpki-client