Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer
File:                     76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer (raw, json)
Hash identifier:          DQj88hHeo+KrLDzoW+t7fPzN2blXVpYVI9XSb2/9fsI=
Subject key identifier:   76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       6A1AD95B5EA217D77ADBA1C86CC4587C1EFF25E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/JCA/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:47:14 +0000
Certificate not after:    Mon 10 May 2027 15:52:14 +0000
Subordinate resources:    IP: 103.254.212.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1a:d9:5b:5e:a2:17:d7:7a:db:a1:c8:6c:c4:58:7c:1e:ff:25:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:47:14 2026 GMT
            Not After : May 10 15:52:14 2027 GMT
        Subject: CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:89:e7:02:9d:1e:a4:52:1d:1d:35:c5:d2:fe:
                    a0:f3:08:32:51:57:3f:5e:87:cb:f5:14:6f:a4:e8:
                    01:79:c1:11:00:98:ab:df:f9:b6:0b:3b:31:fd:83:
                    7c:b4:a0:17:49:ed:60:ca:5b:99:16:cb:2d:6c:bd:
                    b1:dd:93:7e:f5:50:ea:e3:7e:a3:37:2a:57:2d:55:
                    21:66:13:df:c7:96:b9:8b:d5:d3:23:5a:22:8d:73:
                    2f:f8:ec:65:6e:80:0a:f8:65:aa:f9:c0:0f:8e:26:
                    e9:35:08:c1:1a:05:fd:ae:52:8e:28:b2:ee:04:15:
                    cd:7f:de:66:c9:4c:69:48:08:18:b4:92:19:66:ef:
                    a2:7f:7d:4f:de:42:c3:dc:2e:2e:d0:83:5d:ed:95:
                    ff:7b:94:9d:4a:a7:55:ff:09:e4:7d:50:4e:5f:b2:
                    72:12:ac:3d:13:78:99:0c:85:90:7d:9b:df:93:3f:
                    6a:88:f7:23:96:e1:42:cc:0a:84:f7:96:c4:d4:26:
                    89:be:25:fd:60:3c:45:49:8d:f5:aa:e3:6e:78:04:
                    66:1f:bb:59:8f:b4:80:d1:17:80:f1:ca:1f:78:a3:
                    0c:3d:fd:33:3b:36:91:7f:1e:07:06:ce:19:21:89:
                    5d:19:4d:3f:83:94:6b:e5:33:27:c9:87:9c:5e:2b:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/JCA/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:46:4f:2d:07:a8:71:93:0f:d1:75:9c:22:e3:a3:74:3f:
         b5:2f:4f:4e:40:44:58:69:65:f8:7c:19:e5:f3:c9:55:8d:e5:
         c0:28:60:ab:be:da:e4:5f:91:74:f4:8f:f0:bf:9b:7c:e3:1b:
         db:69:a2:90:f2:c3:5f:27:53:25:fe:a7:59:93:51:d2:ed:4b:
         09:b5:5d:17:4c:73:01:bd:4b:1b:00:e4:da:6a:df:ae:e4:3f:
         04:cd:63:d9:39:81:32:0f:3f:ad:dc:a9:2f:ac:f7:49:9e:10:
         fc:88:29:85:a4:1b:6c:a8:f1:0a:0c:ed:10:b1:b8:45:c8:73:
         d0:ed:28:52:cb:7a:e8:a8:80:5c:e8:24:93:8f:6c:4b:0b:25:
         a6:7b:18:95:bf:ac:42:c0:9f:69:c8:40:a0:8e:10:03:ac:ba:
         c5:13:06:46:b7:c5:c5:c5:51:36:07:42:c0:32:49:5d:01:23:
         d8:2c:e6:c5:9a:14:42:22:4b:c3:cc:a8:80:07:35:b1:42:93:
         04:41:c5:c6:f5:3e:ba:5f:0a:b7:6c:78:e5:c9:71:a4:a4:56:
         25:8c:6e:62:1c:fb:c8:65:cd:d0:b1:b8:9e:2c:b8:2a:0b:43:
         18:81:22:02:b7:ed:d7:4d:b9:e7:40:a7:0e:8f:4a:e4:10:76:
         b9:be:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:48 2026 by rpki-client