Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer
File:                     7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer (raw, json)
Hash identifier:          kErOOwSYwdTLl1Tdta1/gUEuAB0YB94BRxWUQJNrKm0=
Subject key identifier:   7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55
Authority key identifier: DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D
Certificate issuer:       /CN=A91BDB290000/serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
Certificate serial:       505660A6F645B43F5D595AB2FE56299D3CC08018
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/OPEN/0/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:55:38 +0000
Certificate not after:    Mon 10 May 2027 16:00:38 +0000
Subordinate resources:    IP: 202.66.184.0/23
                          IP: 2402:28e0::/32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:56:60:a6:f6:45:b4:3f:5d:59:5a:b2:fe:56:29:9d:3c:c0:80:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=DA632505767413A1409A3E33B99D256CDFB1901D
        Validity
            Not Before: May 11 15:55:38 2026 GMT
            Not After : May 10 16:00:38 2027 GMT
        Subject: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:1a:c3:4e:31:82:e3:62:f7:b9:e0:79:a2:
                    fe:fb:93:f7:19:8e:76:a1:04:cf:ec:88:90:b4:12:
                    47:d8:a2:8a:a1:7a:a0:c5:2e:29:00:1b:6f:fa:b8:
                    90:9f:da:41:c5:fd:0a:b4:de:d7:d6:0c:ac:a4:b7:
                    a3:f8:fe:38:c5:8a:aa:85:b4:20:97:05:4a:ac:d4:
                    04:b0:c8:0c:4a:6e:c8:1b:cb:28:0e:62:ca:94:96:
                    e4:30:5f:ef:ab:12:47:4e:eb:28:d8:1e:20:68:39:
                    ce:dd:92:bd:92:8d:13:69:b1:0b:f7:1a:43:29:13:
                    47:89:f5:96:df:1b:22:fd:6c:5d:6d:91:82:11:7b:
                    0e:38:d5:43:44:ac:e6:0a:5d:a0:95:d3:09:ba:20:
                    22:59:50:ca:05:d6:97:f9:f6:e1:7e:78:9c:52:a8:
                    c5:0e:9d:77:0d:d5:ba:9b:0c:89:df:09:ab:5e:4d:
                    26:e8:cb:21:c4:e3:b3:86:c1:59:d5:18:a9:a7:f9:
                    18:86:00:05:5e:d4:a7:e5:94:a6:e4:51:17:87:a4:
                    8f:d5:ab:e5:6b:82:ef:18:72:04:b5:3e:82:93:2c:
                    31:5d:48:fc:a4:a8:4d:5e:d5:41:2f:30:93:b2:d5:
                    84:89:94:95:26:09:9d:f6:2c:84:de:67:0e:71:b0:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55
            X509v3 Authority Key Identifier:
                keyid:DA:63:25:05:76:74:13:A1:40:9A:3E:33:B9:9D:25:6C:DF:B1:90:1D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.66.184.0/23
                IPv6:
                  2402:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:cb:08:ef:c6:4c:2d:3e:5c:23:e0:07:4b:c5:86:ec:7e:
         ce:14:99:14:60:42:9f:f3:64:e4:b0:b9:b1:5e:36:2e:4a:bd:
         e6:b5:2d:ad:06:46:3a:3a:96:b7:c8:3f:d7:54:9b:ee:13:38:
         e4:28:b5:dd:df:44:73:cf:bb:83:33:fc:20:f0:c2:65:4c:35:
         75:e1:af:2c:f5:0c:67:37:a5:bb:08:79:6c:1d:ed:cb:5f:50:
         e5:cc:26:27:bd:98:de:33:bd:18:03:92:da:b3:0c:e4:2e:6c:
         d8:bd:d0:42:d6:78:b5:4a:2b:83:0d:87:c0:1e:28:ae:9c:8e:
         14:d3:ba:fd:f7:87:8f:96:4e:7a:b5:86:81:28:69:fa:0c:d1:
         09:29:e3:b1:4e:99:b1:fc:80:a2:06:b9:16:4f:7d:e9:eb:92:
         48:57:6b:d6:fe:59:26:02:f2:17:b5:29:11:6b:6a:1d:85:54:
         54:a5:d3:48:91:3a:e1:2b:28:5a:5c:b3:ee:95:64:1d:6a:67:
         42:0e:c6:99:81:80:76:04:23:01:39:1e:72:b8:aa:61:d7:f3:
         e4:01:53:f4:ca:7b:6d:d2:d9:1e:d9:ab:50:e5:79:2b:cd:5d:
         0d:d5:7f:4c:35:ee:d8:c3:91:74:cf:db:71:4f:39:a3:d8:cc:
         f5:0d:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:27 2026 by rpki-client