Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/334FCE79EA1C224FEDE0A15962C5536E18D15714.cer
File:                     334FCE79EA1C224FEDE0A15962C5536E18D15714.cer (raw, json)
Hash identifier:          jME2aVrssqVV7QyTLD7egdnEiUnupCfW61QOiObo+0s=
Subject key identifier:   33:4F:CE:79:EA:1C:22:4F:ED:E0:A1:59:62:C5:53:6E:18:D1:57:14
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       6B11BAAEEA23A9C09386D6E6CB56BCF576A872D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/WOLFNET/0/334FCE79EA1C224FEDE0A15962C5536E18D15714.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/WOLFNET/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:00:54 +0000
Certificate not after:    Mon 10 May 2027 16:05:54 +0000
Subordinate resources:    AS: 38846
                          AS: 150759
                          IP: 103.169.126.0/23
                          IP: 2407:a0c0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:11:ba:ae:ea:23:a9:c0:93:86:d6:e6:cb:56:bc:f5:76:a8:72:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 16:00:54 2026 GMT
            Not After : May 10 16:05:54 2027 GMT
        Subject: CN=334FCE79EA1C224FEDE0A15962C5536E18D15714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:6b:33:43:16:65:8d:35:d7:b7:ce:17:71:
                    04:7f:6d:c5:41:11:2a:bb:a1:47:29:b7:84:54:29:
                    64:72:7d:7b:13:ea:95:a0:26:0a:bd:69:96:5e:5d:
                    4d:65:59:c3:a3:c5:44:6d:3f:99:e7:07:61:f1:f3:
                    4c:f1:c2:e5:11:16:9c:a2:a0:28:35:79:fd:da:be:
                    d9:db:21:ff:72:93:ef:4e:e2:86:e0:16:88:7f:a4:
                    ea:ae:af:31:e2:3e:3f:ac:05:14:cf:99:43:a9:90:
                    fc:f1:51:2f:43:7c:b4:0b:31:c2:ef:ba:9c:63:45:
                    90:cb:0e:95:76:50:58:28:fd:5a:11:20:b5:bf:45:
                    4b:02:d2:f7:24:8a:cb:d9:98:e5:2c:ce:5c:35:24:
                    58:70:c4:bc:88:c5:82:76:be:c4:96:f9:66:ac:aa:
                    85:c7:ed:b2:08:8e:fa:2e:bd:06:f0:15:1b:fb:ec:
                    d2:6f:bb:46:c9:c7:2a:8e:90:2e:47:3c:3f:38:87:
                    81:34:9d:d8:42:fc:70:64:52:17:42:7f:96:04:1d:
                    44:f7:18:16:88:59:b8:2b:a9:a0:3b:b0:f7:a2:91:
                    2d:60:86:3a:c5:de:f5:18:88:f8:af:32:dd:5e:7a:
                    a6:80:7b:2b:d8:83:09:51:cf:a2:f2:81:a4:99:3c:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:4F:CE:79:EA:1C:22:4F:ED:E0:A1:59:62:C5:53:6E:18:D1:57:14
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WOLFNET/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WOLFNET/0/334FCE79EA1C224FEDE0A15962C5536E18D15714.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.126.0/23
                IPv6:
                  2407:a0c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38846
                  150759

    Signature Algorithm: sha256WithRSAEncryption
         b4:18:41:89:d3:55:06:47:a7:62:2e:bc:21:e7:b1:d1:6c:7e:
         9c:2f:8b:97:1e:bf:4c:c1:6f:14:4a:17:01:da:70:34:d0:9f:
         b7:04:3e:28:ee:c4:c2:43:13:79:f3:bf:71:93:0c:53:9e:bf:
         66:ab:48:f3:fe:27:b0:63:45:f1:91:49:41:32:0f:0e:eb:47:
         69:db:41:6c:c0:0e:68:ab:e2:0b:c0:2b:8b:b8:ff:d9:b4:75:
         f2:68:82:7f:6e:3e:ce:0c:61:52:97:e8:77:1f:62:fa:bd:a7:
         18:b9:82:00:7e:48:16:fa:03:8e:5e:1f:10:a9:57:5e:74:f4:
         09:3a:29:ee:e6:5b:b1:1e:ae:20:bf:eb:97:51:cf:9e:31:77:
         26:23:74:f3:c0:0c:a5:26:e5:9d:e4:ae:b3:b5:27:92:2b:89:
         65:3a:45:f9:75:eb:cc:f9:2e:36:4c:0f:d7:9c:6e:75:f6:eb:
         97:25:99:85:6d:03:ad:55:09:c2:4a:1e:12:ec:eb:f7:60:d1:
         ad:87:f5:a8:43:a0:45:0a:7e:e5:1c:21:77:5a:33:5e:08:cd:
         09:43:03:d8:f6:e9:ae:10:29:7f:68:19:32:09:07:ac:fb:c4:
         13:7a:2a:18:51:9d:37:f5:76:9b:3d:66:72:4a:73:26:0d:8c:
         7f:22:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----