Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/5EF4BADF13E9F33273E1938087ECE053621D1621.cer
File:                     5EF4BADF13E9F33273E1938087ECE053621D1621.cer (raw, json)
Hash identifier:          YPV3jfMFzVgZldLjwGPq1oUOimfIxkrjQEDLpek1NNs=
Subject key identifier:   5E:F4:BA:DF:13:E9:F3:32:73:E1:93:80:87:EC:E0:53:62:1D:16:21
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       6E6959DFFD4E8751B1F412B9DFC3ADA1A8D7E06D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/SHELLFANS/0/5EF4BADF13E9F33273E1938087ECE053621D1621.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/SHELLFANS/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:56:32 +0000
Certificate not after:    Mon 10 May 2027 16:01:32 +0000
Subordinate resources:    IP: 163.223.206.0/23
                          IP: 2401:fa20::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:69:59:df:fd:4e:87:51:b1:f4:12:b9:df:c3:ad:a1:a8:d7:e0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:56:32 2026 GMT
            Not After : May 10 16:01:32 2027 GMT
        Subject: CN=5EF4BADF13E9F33273E1938087ECE053621D1621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:df:65:d8:1b:86:12:c6:e4:d7:63:c9:ac:
                    71:1c:7e:87:68:3e:8c:fa:5d:b5:6a:c9:98:c7:ce:
                    d3:d7:de:98:2c:aa:ea:ff:0b:25:60:c6:eb:4d:b1:
                    90:43:56:a2:ac:90:49:99:42:48:bb:9b:f2:cb:a7:
                    40:2f:18:02:5d:79:32:49:35:92:9d:a3:3e:3d:e3:
                    f7:08:57:00:52:db:51:2e:70:05:8a:e5:7a:32:0f:
                    63:8b:c8:af:fa:f2:9b:d8:63:7f:0c:af:49:ce:c8:
                    0a:4c:75:02:c5:65:6d:9a:6c:c8:33:90:2a:cd:51:
                    e0:40:7b:d7:3a:58:f9:38:75:8f:9f:b6:58:7a:ad:
                    b0:14:e7:d9:4c:cd:a6:56:6d:d7:81:49:30:d8:74:
                    d7:ec:f2:de:35:29:63:93:d3:90:04:56:36:53:31:
                    b9:c9:4f:21:9c:5c:87:97:93:63:3f:18:28:eb:87:
                    48:7d:79:ec:19:fb:88:5f:8c:fc:f0:4c:88:6e:de:
                    a8:a3:4d:b1:4d:bb:3a:57:0e:b8:8c:80:40:51:5f:
                    15:aa:7d:94:3c:fd:f0:f8:cb:4f:51:6d:54:46:a3:
                    ef:eb:d7:79:9e:e5:36:84:1e:b7:40:3c:83:0f:f5:
                    58:93:9e:e5:f5:02:84:48:23:dd:d4:12:f4:88:b4:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:F4:BA:DF:13:E9:F3:32:73:E1:93:80:87:EC:E0:53:62:1D:16:21
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/SHELLFANS/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/SHELLFANS/0/5EF4BADF13E9F33273E1938087ECE053621D1621.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.206.0/23
                IPv6:
                  2401:fa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:34:cb:5f:96:a8:c0:88:09:78:44:ca:cb:31:80:3e:6a:8c:
         4f:bd:c8:db:56:4d:8f:2f:7c:f9:be:96:11:b7:c6:cf:d8:7d:
         86:d9:30:3b:5e:6d:ad:e9:f8:e3:2e:78:04:ab:c2:5e:33:78:
         12:d7:50:b5:4e:1c:e3:97:66:55:9d:aa:05:4e:7b:bf:c9:95:
         35:6f:f9:9f:b8:09:b4:4c:d5:ee:08:13:bc:5e:42:2b:0d:ac:
         be:13:7e:b5:a6:f3:68:ec:66:f3:f7:1d:b1:88:d6:dc:00:df:
         4d:c5:c0:2a:8e:8a:3d:4f:71:79:28:62:f6:78:37:90:25:6b:
         0c:c0:d8:d4:ca:a7:74:a5:dd:22:f6:73:4e:7c:87:aa:09:e3:
         ff:91:f1:ee:2f:6f:6f:0d:93:b7:e3:42:3d:03:fb:2a:9c:34:
         83:3c:dd:9a:1e:c7:1c:ce:d6:b4:03:53:41:99:d4:ad:f7:87:
         99:e0:37:2f:55:eb:61:eb:b2:cf:16:d8:72:f9:79:7b:4f:69:
         79:2a:93:6c:90:21:14:58:79:2c:23:4f:12:ae:81:13:13:3b:
         38:37:ca:78:14:01:d1:6a:cd:7a:30:55:73:98:aa:35:2b:bb:
         94:cc:0d:22:7c:4d:45:6f:79:67:6b:f7:e9:ee:d3:d9:55:81:
         b5:ea:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----