Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer
File:                     5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (raw, json)
Hash identifier:          wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=
Subject key identifier:   5F:22:59:58:DB:67:E3:41:8B:FB:E2:93:BF:D2:5E:6F:6A:93:46:B9
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer:       /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial:       5D9159FEAE084CCD3B382E829D4385EE41BE2464
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 16:01:06 +0000
Certificate not after:    Mon 10 May 2027 16:06:06 +0000
Subordinate resources:    IP: 151.158.160.0/23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:91:59:fe:ae:08:4c:cd:3b:38:2e:82:9d:43:85:ee:41:be:24:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
        Validity
            Not Before: May 11 16:01:06 2026 GMT
            Not After : May 10 16:06:06 2027 GMT
        Subject: CN=5F225958DB67E3418BFBE293BFD25E6F6A9346B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:69:34:dc:77:26:ac:d2:5d:59:39:35:88:
                    05:d3:72:04:fc:e4:57:8d:28:cd:d0:09:d8:fb:3f:
                    28:0f:13:7b:70:40:a3:4b:c4:2a:1a:2b:5c:71:7a:
                    31:84:ac:68:00:bf:d1:19:60:e3:08:de:8e:37:88:
                    0a:1b:91:53:71:9e:c1:8d:ec:24:4e:59:ae:df:d5:
                    64:a5:5c:71:a5:89:db:30:cc:6a:06:7e:2a:06:e6:
                    1a:ca:bb:33:88:12:b5:3c:e0:90:0d:55:ef:b1:96:
                    3c:fe:dc:b9:56:f8:39:e6:75:a1:dc:b7:85:d6:6e:
                    a4:f6:0c:c3:05:f2:f0:26:ae:94:f8:35:a4:93:c9:
                    08:fc:db:13:d0:b1:be:e1:38:89:12:cb:33:8b:d3:
                    72:fa:73:c5:04:4a:26:26:d9:ff:3d:60:54:1f:7c:
                    67:b5:bf:24:17:14:29:cf:41:35:d0:66:43:95:63:
                    03:71:0a:03:5f:a5:dc:c6:35:18:46:0d:5f:f1:83:
                    87:45:b7:5c:03:bb:3d:3a:ae:04:b5:d1:ea:a9:5a:
                    92:8c:3f:80:7f:90:36:9e:a7:a1:ba:db:44:22:fb:
                    5f:85:b7:41:c7:3b:a9:ad:bb:65:41:83:2e:9d:f4:
                    52:40:7c:a2:75:d2:a1:ce:8f:9d:40:e0:a0:85:71:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:22:59:58:DB:67:E3:41:8B:FB:E2:93:BF:D2:5E:6F:6A:93:46:B9
            X509v3 Authority Key Identifier:
                keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:41:06:91:e9:f3:b0:f5:5c:4c:dd:1e:a3:23:df:78:de:b3:
         7f:61:9e:53:e3:43:83:1e:1d:2b:96:7b:89:48:4b:5a:4e:9c:
         b3:46:d6:64:5c:66:95:8d:49:2f:23:4b:6a:fa:44:a5:b9:17:
         38:2c:a6:ee:43:bb:fd:25:10:22:90:f9:ba:86:8d:83:74:13:
         82:af:93:ca:f3:1d:aa:1c:0a:48:39:81:90:23:f2:38:fc:09:
         96:9f:41:56:b7:ec:a1:bd:09:97:2c:c3:32:f7:1b:83:02:e5:
         f9:b7:59:73:f6:a3:e6:36:09:03:01:22:c6:f1:64:db:22:08:
         a9:e4:fa:35:14:e1:90:fa:35:7e:0f:5b:41:a4:7a:28:3a:ef:
         b6:b5:af:ec:2e:89:4c:f5:6e:9f:25:5e:7b:80:b4:87:8d:5c:
         26:56:46:d3:48:6c:ea:93:cd:cf:b6:e6:74:a2:de:b5:6c:fc:
         d3:5c:f4:2e:f1:0d:72:90:8a:dc:dc:67:31:91:49:38:36:12:
         55:f0:3b:36:ac:6b:5e:d4:28:cf:48:c4:1d:90:34:c0:e2:3c:
         7e:ba:38:f2:14:65:e9:c6:2c:f9:fe:83:a6:8e:58:79:e4:fe:
         a8:3f:78:64:a4:a7:5b:8e:0f:f5:28:04:5e:b1:d7:6f:53:63:
         56:e3:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:03 2026 by rpki-client