Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
File:                     4592562459B88E861D7E40B269B64ECC6927CDE5.cer (raw, json)
Hash identifier:          QGkBakR9RyWCar4O6ys0ii6ec6sY9UrJtntKZHthhZw=
Subject key identifier:   45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       11D342F856DAE038F9C2F4F4AE33D61511576342
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:58:05 +0000
Certificate not after:    Mon 10 May 2027 16:03:05 +0000
Subordinate resources:    IP: 211.76.182.0/23
                          IP: 2405:fbc0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d3:42:f8:56:da:e0:38:f9:c2:f4:f4:ae:33:d6:15:11:57:63:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:58:05 2026 GMT
            Not After : May 10 16:03:05 2027 GMT
        Subject: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:e8:97:5b:9a:f8:4a:b4:23:d4:f4:f6:5a:
                    95:9e:2e:87:f2:a5:67:d3:d0:d9:79:db:25:74:33:
                    94:f2:78:9a:4b:78:c0:77:77:aa:05:87:22:2e:b3:
                    e5:1b:4f:95:33:5e:07:83:6c:e1:36:86:77:cb:f6:
                    34:48:d4:e8:05:28:b6:8f:bc:1b:d0:2c:4d:1f:3d:
                    f7:6e:ba:c3:83:52:55:a0:a7:f1:25:2b:6e:7b:c4:
                    c1:7d:3e:d2:5f:ee:ae:3f:a9:03:79:f0:df:c2:bc:
                    76:11:fe:40:03:2e:46:0e:2c:0f:b6:90:87:2c:25:
                    1f:5f:58:6d:de:e4:1e:dc:b7:f5:98:0c:22:3e:a6:
                    d8:9f:5b:1f:5c:a3:ff:53:00:57:f4:ec:7f:38:7f:
                    a4:94:68:71:7c:f7:1a:a8:68:41:82:c3:e8:fa:6f:
                    65:f2:93:13:2c:61:dc:1e:ad:26:43:92:c1:e6:a2:
                    1c:b2:85:56:71:26:fb:a4:bf:59:6d:4d:16:9a:e5:
                    f5:d6:e6:49:5e:25:4b:9f:35:3c:de:80:0a:c5:e2:
                    ee:a2:5b:dd:7d:23:24:da:ce:3f:52:aa:18:a0:c5:
                    73:21:f1:0c:35:50:84:0e:26:97:7e:6c:d3:b8:1a:
                    d2:ef:cd:74:4a:e3:75:15:1b:d4:a4:bb:be:70:f2:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.182.0/23
                IPv6:
                  2405:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:18:28:d0:9e:ca:73:25:10:44:af:08:44:37:2a:22:93:80:
         e7:30:e5:af:d0:14:4c:06:ab:b9:3b:1c:8c:58:5b:fe:8a:40:
         49:a9:a6:f7:99:6a:ce:77:58:39:7d:e6:7d:53:dc:4b:c7:0b:
         fc:8d:f7:e7:c6:f6:88:b9:7a:2b:7d:f9:3c:b6:06:71:43:ea:
         42:1c:78:0d:5e:1f:81:86:c0:b4:0e:b6:da:0c:bc:96:d0:a8:
         9d:fd:e5:a4:82:4d:a2:2f:94:b2:ae:4e:0f:2b:22:29:04:fd:
         b2:35:e0:f3:80:fd:ec:0d:28:d3:e8:ef:a8:35:64:75:b8:5d:
         29:23:51:7d:50:2c:d0:e3:64:08:2c:c6:91:fa:b6:ab:2e:6c:
         f9:f3:5d:b7:60:f2:f9:ff:6e:71:c7:da:43:e8:01:10:a9:c2:
         d4:f0:ce:3e:f0:81:83:47:3e:ec:52:01:fb:69:1c:3a:51:ff:
         b7:b9:95:c1:e6:7e:31:11:22:98:c3:60:7e:c1:e2:df:80:d5:
         cf:29:1c:8d:06:98:a2:6e:64:86:4a:0f:5e:d1:41:c3:09:9e:
         16:f6:db:8e:87:e7:42:3c:39:53:e7:7f:15:e7:41:58:fd:49:
         6c:96:9a:84:b2:4e:e4:b9:e4:7e:f6:3f:e6:c3:8b:32:08:c7:
         60:eb:b8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----