Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7C4B05009B03C631BB250FEFCDD706508130667B.cer
File:                     7C4B05009B03C631BB250FEFCDD706508130667B.cer (raw, json)
Hash identifier:          xEK8brSh2gzo9T+f/me0HfIWs2MekQJ+McNNOk03pYU=
Subject key identifier:   7C:4B:05:00:9B:03:C6:31:BB:25:0F:EF:CD:D7:06:50:81:30:66:7B
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       3D47ADDE90468D5571CCC18A2F3AF36CA6026852
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/WARNERLINK/0/7C4B05009B03C631BB250FEFCDD706508130667B.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/WARNERLINK/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:00:44 +0000
Certificate not after:    Mon 10 May 2027 16:05:44 +0000
Subordinate resources:    AS: 18427
                          IP: 122.50.12.0/23
                          IP: 2402:2860::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:47:ad:de:90:46:8d:55:71:cc:c1:8a:2f:3a:f3:6c:a6:02:68:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 16:00:44 2026 GMT
            Not After : May 10 16:05:44 2027 GMT
        Subject: CN=7C4B05009B03C631BB250FEFCDD706508130667B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:72:52:1e:7c:d3:72:d1:f8:26:1c:f1:86:
                    7f:36:91:d8:d8:ba:d1:52:f2:65:1f:00:08:a7:35:
                    ec:9b:c6:84:2e:0a:3a:a3:3a:c7:5c:6e:74:cc:96:
                    d0:0a:b9:b5:81:47:c6:02:f5:5a:c7:1c:17:91:d9:
                    5b:2a:5b:0a:07:c4:f4:03:7a:64:19:a8:61:8a:d5:
                    d8:42:71:af:1a:bb:f7:5f:76:40:af:6e:6f:45:c6:
                    f8:0c:f9:8d:59:0a:ab:1b:89:e5:76:de:07:c2:39:
                    86:e1:75:3f:dc:66:62:76:55:f9:fc:ce:bc:2d:f4:
                    ca:fd:66:4c:76:9e:16:04:90:a9:4b:4b:b2:c7:7d:
                    33:7e:b1:40:49:26:64:c1:27:ad:9e:f3:03:64:97:
                    48:f4:0c:d1:87:7a:b0:f2:ea:c8:37:c4:90:9e:a9:
                    ca:40:72:f8:26:e3:60:5d:2b:ef:c8:e9:05:3e:de:
                    df:85:e6:cd:49:11:b5:61:75:9f:5f:b8:5f:f5:06:
                    f5:60:cd:58:82:8e:0f:c8:ea:d6:22:d8:f5:7c:7c:
                    3b:be:73:1e:66:9e:6f:69:52:ca:fd:8d:a6:ca:12:
                    2e:77:26:0d:42:ab:3e:04:e8:12:1a:7b:3a:27:27:
                    15:bf:8c:eb:b2:1e:09:71:8e:47:1e:06:80:ff:98:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:4B:05:00:9B:03:C6:31:BB:25:0F:EF:CD:D7:06:50:81:30:66:7B
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/WARNERLINK/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/WARNERLINK/0/7C4B05009B03C631BB250FEFCDD706508130667B.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.12.0/23
                IPv6:
                  2402:2860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18427

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:51:26:e3:08:a7:e3:07:fb:19:b1:29:73:77:41:65:5b:
         76:97:ce:66:5e:ee:8b:c9:74:e8:c7:b6:03:ae:7c:77:ef:49:
         fc:1b:54:a0:49:0a:92:b8:65:e9:34:06:79:68:33:29:d3:e3:
         e9:c2:50:47:85:e5:dc:77:c7:68:3c:a2:e8:ec:b2:e9:23:52:
         9f:1a:3d:e6:e5:17:33:da:fb:05:86:dc:f7:c2:49:cc:61:89:
         44:5b:b3:bc:0e:9a:bf:9c:9e:be:84:28:ec:2b:ff:12:ac:1e:
         ac:8a:f8:c5:2f:de:58:9f:1e:0b:c4:56:bf:d5:f0:06:4f:92:
         27:de:7f:70:fa:d1:31:bf:9d:c4:9d:34:b2:a2:1b:1a:ac:4e:
         51:87:c5:aa:6a:d8:e0:27:36:72:84:59:e6:6b:a1:76:2f:41:
         7c:af:46:16:69:bd:a3:52:7d:f3:24:38:68:c5:cb:2d:68:0e:
         e6:db:17:c7:5f:af:0c:25:b0:9b:95:3e:20:11:26:9c:89:ad:
         64:ac:96:b9:95:fa:72:b8:48:e5:e7:11:a2:79:92:1a:9e:66:
         6f:7d:2d:db:0e:56:f5:79:2a:58:13:08:1e:7c:3f:2b:6b:ff:
         09:3a:28:5f:9b:e4:55:c5:9e:e7:9a:b0:e7:01:52:c1:5d:9d:
         5d:85:b1:09
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIUPUet3pBGjVVxzMGKLzrzbKYCaFIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhEQTYzMjUwNTc2
NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFEMB4XDTI2MDUxMTE2MDA0NFoX
DTI3MDUxMDE2MDU0NFowMzExMC8GA1UEAxMoN0M0QjA1MDA5QjAzQzYzMUJCMjUw
RkVGQ0RENzA2NTA4MTMwNjY3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALgQclIefNNy0fgmHPGGfzaR2Ni60VLyZR8ACKc17JvGhC4KOqM6x1xudMyW
0Aq5tYFHxgL1WsccF5HZWypbCgfE9AN6ZBmoYYrV2EJxrxq79192QK9ub0XG+Az5
jVkKqxuJ5XbeB8I5huF1P9xmYnZV+fzOvC30yv1mTHaeFgSQqUtLssd9M36xQEkm
ZMEnrZ7zA2SXSPQM0Yd6sPLqyDfEkJ6pykBy+CbjYF0r78jpBT7e34XmzUkRtWF1
n1+4X/UG9WDNWIKOD8jq1iLY9Xx8O75zHmaeb2lSyv2NpsoSLncmDUKrPgToEhp7
OicnFb+M67IeCXGORx4GgP+YCXcCAwEAAaOCApgwggKUMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHxLBQCbA8YxuyUP783XBlCBMGZ7MB8GA1UdIwQYMBaAFNpj
JQV2dBOhQJo+M7mdJWzfsZAdMA4GA1UdDwEB/wQEAwIBBjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS9EQTYz
MjUwNTc2NzQxM0ExNDA5QTNFMzNCOTlEMjU2Q0RGQjE5MDFELmNybDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8ybU1sQlha
MEU2RkFtajR6dVowbGJOLXhrQjAuY2VyMIHlBggrBgEFBQcBCwSB2DCB1TA2Bggr
BgEFBQcwBYYqcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQVJORVJMSU5L
LzAvMGIGCCsGAQUFBzAKhlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1dB
Uk5FUkxJTksvMC83QzRCMDUwMDlCMDNDNjMxQkIyNTBGRUZDREQ3MDY1MDgxMzA2
NjdCLm1mdDA3BggrBgEFBQcwDYYraHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG
AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBejIMMA0EAgACMAcDBQAkAihgMBkGCCsG
AQUFBwEIAQH/BAowCKAGMAQCAkf7MA0GCSqGSIb3DQEBCwUAA4IBAQAWO1Em4win
4wf7GbEpc3dBZVt2l85mXu6LyXTox7YDrnx370n8G1SgSQqSuGXpNAZ5aDMp0+Pp
wlBHheXcd8doPKLo7LLpI1KfGj3m5Rcz2vsFhtz3wknMYYlEW7O8Dpq/nJ6+hCjs
K/8SrB6sivjFL95Ynx4LxFa/1fAGT5In3n9w+tExv53EnTSyohsarE5Rh8Wqatjg
JzZyhFnma6F2L0F8r0YWab2jUn3zJDhoxcstaA7m2xfHX68MJbCblT4gESacia1k
rJa5lfpyuEjl5xGieZIanmZvfS3bDlb1eSpYEwgefD8ra/8JOihfm+RVxZ7nmrDn
AVLBXZ1dhbEJ
-----END CERTIFICATE-----
Generated at Wed May 13 02:39:49 2026 by rpki-client