Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
File:                     1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (raw, json)
Hash identifier:          I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=
Subject key identifier:   16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer:       /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial:       4836FB0A4FFC72DB8B5DCFA2D67D4505A6B59E46
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:46:06 +0000
Certificate not after:    Mon 10 May 2027 15:51:06 +0000
Subordinate resources:    IP: 151.158.88.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:36:fb:0a:4f:fc:72:db:8b:5d:cf:a2:d6:7d:45:05:a6:b5:9e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
        Validity
            Not Before: May 11 15:46:06 2026 GMT
            Not After : May 10 15:51:06 2027 GMT
        Subject: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:c1:8d:d0:18:ee:14:92:22:a4:fb:a0:3f:
                    d1:16:d5:c2:e9:d8:43:9c:2f:98:b0:32:d2:5f:25:
                    7b:72:55:7d:9d:c8:40:96:87:3f:31:b6:84:08:c8:
                    10:11:07:00:a9:56:86:50:67:ff:0f:7d:c0:e4:c2:
                    25:23:85:77:d5:42:a2:c5:f7:c5:bd:3c:d7:8b:c7:
                    a5:ac:7f:d4:49:73:f0:f8:b1:ee:9c:06:5e:7a:10:
                    1f:bd:02:e9:fd:b2:a1:cc:c9:79:cb:ce:d3:f8:50:
                    c1:1d:33:e8:f5:6f:62:85:53:79:24:f8:ce:a4:8a:
                    d7:fc:e1:60:d4:9a:fe:64:d9:93:b5:ce:30:ad:1b:
                    fc:f4:6b:1b:f3:bd:af:85:ce:91:5c:84:ef:30:5c:
                    08:86:21:58:cf:76:68:ef:6f:a5:a9:78:98:db:59:
                    11:47:a1:89:e8:1f:a3:8c:ac:0b:a0:f3:ad:94:ba:
                    21:58:78:7e:e4:e0:84:51:19:ff:b5:89:02:5c:1e:
                    db:3f:e2:5e:25:fc:e5:b9:7c:bf:f1:9e:5b:21:83:
                    fa:27:5a:cb:5f:62:a8:fb:ad:b7:dd:e2:fa:dd:fd:
                    9c:79:f9:47:79:d6:c0:7c:a5:5a:e7:6b:6c:55:aa:
                    44:14:70:75:83:3a:30:90:a3:35:ea:73:08:71:68:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
            X509v3 Authority Key Identifier:
                keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:b0:98:51:a6:03:68:ec:a9:a3:49:28:ea:be:b7:d2:f0:9b:
         37:7b:50:55:06:0d:6d:62:ad:ad:7d:99:43:fe:08:65:67:3b:
         a0:82:5b:24:75:65:1f:6c:95:7a:b1:87:75:de:45:6e:c1:25:
         0e:42:87:aa:3e:ee:d6:c5:37:08:be:d0:60:bc:b9:70:f5:0c:
         58:53:67:43:f9:cc:6e:e7:3f:14:b6:ea:b1:f5:9b:ce:6c:db:
         84:97:97:3f:e7:19:1e:78:6b:e8:46:61:31:d4:64:9e:16:68:
         aa:c5:32:65:fb:43:a8:52:41:dc:98:ba:a7:9f:cf:c7:90:2b:
         8d:2b:70:4d:f1:cd:ab:eb:f8:bb:fa:32:bc:7b:a7:f1:ba:3b:
         7f:96:9d:19:a2:4a:6b:06:c1:1f:94:7d:b0:b0:cd:01:66:0d:
         69:61:48:39:3c:c5:7d:20:28:bd:87:ea:8e:1e:00:b2:d7:85:
         be:df:a7:35:09:f0:a0:be:b8:db:de:ff:af:f3:e3:ca:1c:1c:
         18:70:6e:ef:a6:a3:5b:db:1d:3a:db:bc:48:29:89:ff:72:2b:
         cc:8b:08:bd:73:68:7a:4c:9d:70:47:73:5d:e7:f2:0f:c7:52:
         f1:48:85:41:0c:d4:43:ce:a6:e7:47:07:60:42:b7:18:ce:a7:
         9d:6d:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:04 2026 by rpki-client