Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/74CF5922D91D16D06182EEC67054A199489F9173.cer
File:                     74CF5922D91D16D06182EEC67054A199489F9173.cer (raw, json)
Hash identifier:          /v5W3E39VkV6SFFp5omsxK8vvpdqfVypmAweRzhCbhY=
Subject key identifier:   74:CF:59:22:D9:1D:16:D0:61:82:EE:C6:70:54:A1:99:48:9F:91:73
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       30A80344976AC8B303F710C568590B6E0680917F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/PEARLABYSS/0/74CF5922D91D16D06182EEC67054A199489F9173.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/PEARLABYSS/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:55:46 +0000
Certificate not after:    Mon 10 May 2027 16:00:46 +0000
Subordinate resources:    IP: 103.97.48.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a8:03:44:97:6a:c8:b3:03:f7:10:c5:68:59:0b:6e:06:80:91:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:55:46 2026 GMT
            Not After : May 10 16:00:46 2027 GMT
        Subject: CN=74CF5922D91D16D06182EEC67054A199489F9173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:49:e6:79:da:5a:31:72:7d:a5:3c:9e:94:
                    5a:51:f2:13:6e:a3:6e:d2:e0:a4:92:fb:fe:88:24:
                    65:5f:0d:3e:b5:6d:21:17:ec:74:df:12:bb:1f:21:
                    5f:37:92:d4:f7:bf:8c:85:ad:0e:34:b3:da:fd:68:
                    3d:9f:a1:e2:27:59:c2:f2:c9:f4:01:38:7c:61:4f:
                    51:c2:ce:10:a7:53:3e:79:58:05:7e:0c:ec:2b:7a:
                    c7:2f:7f:af:96:76:33:34:74:95:24:3b:5f:ab:d2:
                    d8:06:ca:68:b3:e1:4a:d9:f3:b3:d4:9e:be:d9:2c:
                    eb:17:5e:34:2c:3c:bf:ed:c8:ed:c3:bb:0a:10:ec:
                    88:25:92:ad:71:53:5d:1f:e7:29:ad:7b:95:eb:8b:
                    56:6f:01:cb:f3:4d:cb:cf:9c:5b:33:23:ea:c3:14:
                    ca:a1:df:ae:31:da:45:e0:db:cd:02:ca:84:e6:dc:
                    7c:99:15:4c:83:b3:df:df:6e:af:4f:38:fc:f6:f5:
                    27:64:b0:cc:eb:4b:0f:3f:5e:9d:cb:3b:b6:86:34:
                    20:06:2b:54:43:07:b2:09:39:b9:cf:d8:84:7d:d0:
                    76:cb:78:98:1b:85:0a:d1:ac:19:73:81:73:00:15:
                    27:63:60:0f:b9:63:6d:37:74:14:e4:5c:24:03:cf:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:CF:59:22:D9:1D:16:D0:61:82:EE:C6:70:54:A1:99:48:9F:91:73
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/PEARLABYSS/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/PEARLABYSS/0/74CF5922D91D16D06182EEC67054A199489F9173.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:94:80:93:1f:4b:e3:5c:20:b0:77:ca:c1:86:ba:12:e9:
         3e:3e:c9:a4:64:a9:9e:02:d0:82:89:da:22:a9:1b:45:f1:dc:
         f3:f4:6b:35:9c:69:22:c6:9f:5d:6c:12:38:4e:30:18:64:0d:
         93:e7:bb:35:0b:85:66:4d:ae:2a:c8:18:f2:bc:5a:23:b2:3d:
         8a:a3:31:cf:2e:49:90:78:85:c8:5d:31:ed:74:c1:51:ac:b6:
         fc:aa:63:61:e4:8e:ec:25:b5:11:46:d2:b6:53:8b:82:66:95:
         38:43:3b:43:10:46:a9:07:1f:ec:fd:31:8c:b2:51:2e:14:5c:
         88:d6:9b:2c:b8:55:08:da:9b:4f:4e:89:12:02:2f:24:bb:13:
         8e:18:88:0b:b8:b6:a0:66:53:96:61:00:ed:7d:e5:17:43:c6:
         da:5c:d6:3e:e9:66:1d:b4:eb:17:8d:f8:18:a8:8c:c3:0c:6c:
         1a:19:0e:75:3f:bb:8c:db:10:a7:44:80:ae:30:1d:8b:a7:a6:
         cc:3e:0a:35:85:da:f2:b3:ca:ef:ec:4a:8b:73:37:1b:a8:29:
         d7:87:52:10:61:f0:3b:f4:be:7f:4f:16:c1:2f:e6:58:a1:e8:
         2a:91:2b:ea:e5:6b:20:0f:cd:80:4c:8c:7f:41:b9:07:2f:e3:
         03:b2:4a:24
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUMKgDRJdqyLMD9xDFaFkLbgaAkX8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE1NTU0NloX
DTI3MDUxMDE2MDA0NlowMzExMC8GA1UEAxMoNzRDRjU5MjJEOTFEMTZEMDYxODJF
RUM2NzA1NEExOTk0ODlGOTE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMmdSeZ52loxcn2lPJ6UWlHyE26jbtLgpJL7/ogkZV8NPrVtIRfsdN8Sux8h
XzeS1Pe/jIWtDjSz2v1oPZ+h4idZwvLJ9AE4fGFPUcLOEKdTPnlYBX4M7Ct6xy9/
r5Z2MzR0lSQ7X6vS2AbKaLPhStnzs9Sevtks6xdeNCw8v+3I7cO7ChDsiCWSrXFT
XR/nKa17leuLVm8By/NNy8+cWzMj6sMUyqHfrjHaReDbzQLKhObcfJkVTIOz399u
r084/Pb1J2SwzOtLDz9encs7toY0IAYrVEMHsgk5uc/YhH3Qdst4mBuFCtGsGXOB
cwAVJ2NgD7ljbTd0FORcJAPPVscCAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHTPWSLZHRbQYYLuxnBUoZlIn5FzMB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr
BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QRUFSTEFCWVNT
LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BF
QVJMQUJZU1MvMC83NENGNTkyMkQ5MUQxNkQwNjE4MkVFQzY3MDU0QTE5OTQ4OUY5
MTczLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2EwMA0GCSqGSIb3DQEBCwUAA4IBAQB+
UpSAkx9L41wgsHfKwYa6Euk+PsmkZKmeAtCCidoiqRtF8dzz9Gs1nGkixp9dbBI4
TjAYZA2T57s1C4VmTa4qyBjyvFojsj2KozHPLkmQeIXIXTHtdMFRrLb8qmNh5I7s
JbURRtK2U4uCZpU4QztDEEapBx/s/TGMslEuFFyI1pssuFUI2ptPTokSAi8kuxOO
GIgLuLagZlOWYQDtfeUXQ8baXNY+6WYdtOsXjfgYqIzDDGwaGQ51P7uM2xCnRICu
MB2Lp6bMPgo1hdrys8rv7EqLczcbqCnXh1IQYfA79L5/TxbBL+ZYoegqkSvq5Wsg
D82ATIx/QbkHL+MDskok
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:35 2026 by rpki-client