Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
File:                     BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (raw, json)
Hash identifier:          mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=
Subject key identifier:   BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05
Certificate issuer:       /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
Certificate serial:       0513F73EAAA313DDF1175F34E8D5C41E6F636D9C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/HOSTIN/1/
Notify URL:               https://rrdp.twnic.tw/rrdp/notification.xml
Certificate not before:   Mon 11 May 2026 15:46:42 +0000
Certificate not after:    Mon 10 May 2027 15:51:42 +0000
Subordinate resources:    IP: 2.58.240.0/22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:f7:3e:aa:a3:13:dd:f1:17:5f:34:e8:d5:c4:1e:6f:63:6d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005
        Validity
            Not Before: May 11 15:46:42 2026 GMT
            Not After : May 10 15:51:42 2027 GMT
        Subject: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:bb:00:a9:6a:2a:78:8d:64:b1:b8:cc:27:
                    56:f7:4b:62:fc:ce:d1:9c:ac:21:af:5b:32:70:a2:
                    48:6b:1b:f4:bd:2b:9e:46:f7:2a:30:2b:41:fa:bd:
                    b1:f6:fd:84:6b:f1:30:51:26:31:80:a0:5a:5d:59:
                    36:04:e7:7d:16:a0:c3:d4:5e:6e:46:92:76:41:e8:
                    cd:c5:4f:1c:e8:83:cb:2d:63:fd:1b:57:ab:83:53:
                    0d:dd:53:79:74:d4:2f:21:84:1a:6c:6c:98:23:2d:
                    39:91:31:0a:2f:65:ab:cd:b1:5b:02:52:96:8c:e6:
                    63:65:69:c5:86:b7:2f:e6:10:81:de:b6:14:47:29:
                    62:e8:1e:f6:a4:68:79:e0:8e:67:01:a4:b6:8a:fc:
                    0e:47:b0:94:66:57:50:ba:6f:03:63:51:0e:43:f9:
                    32:9c:75:45:fd:5a:d3:13:d0:ba:d3:b8:33:c7:c7:
                    a1:ce:5a:73:bd:3a:f7:10:1d:bd:10:c4:e1:c5:53:
                    fa:b5:63:8c:33:60:65:c3:a7:af:8c:f0:89:70:51:
                    d5:3d:4a:22:ea:66:28:9b:3a:0c:8b:b7:e8:bf:67:
                    34:12:a0:3a:dc:f1:9a:aa:da:9a:08:de:90:cb:1b:
                    3c:dd:67:4f:cf:42:81:84:b2:de:16:5c:1f:8b:00:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
            X509v3 Authority Key Identifier:
                keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:72:b3:c9:ec:09:fd:b3:c3:fe:bc:fd:b8:7e:1b:5c:a2:29:
         87:0c:11:e1:22:b4:3a:4f:8b:89:da:b6:f7:c7:c8:40:51:47:
         8a:7d:79:3d:b5:63:27:b0:3c:7b:ea:58:3c:c0:cc:cf:33:85:
         c7:ea:9f:fc:92:ff:d7:e6:9e:c8:98:ea:a4:22:bc:33:72:cc:
         0c:2c:46:36:75:8d:6b:e3:06:c0:0e:17:87:02:48:97:52:7e:
         36:0b:a6:a1:3b:58:f6:25:4c:d6:f1:b7:a9:39:de:fa:c7:97:
         76:e2:c7:5c:98:62:db:36:1b:20:d7:4a:c5:e8:b3:c0:7a:8f:
         86:71:50:2c:25:2f:d3:40:c7:20:c7:00:5e:6a:16:e6:a7:2d:
         e2:44:c4:67:c4:60:5c:84:01:43:fc:d7:d1:c5:5d:4a:74:81:
         92:9b:b6:75:0b:81:3a:f3:b8:b2:c9:35:5b:cd:50:5c:f1:a4:
         d3:a6:1f:58:cd:d8:50:b8:20:8a:13:a1:30:44:c5:7b:73:ef:
         c6:13:19:e6:b8:bc:28:bb:3f:79:22:8a:bf:8e:70:73:26:78:
         00:86:5f:55:cd:87:77:cf:d7:f6:b8:af:80:c8:f1:c2:bb:47:
         28:d4:50:62:fc:19:7f:73:6b:ac:f2:b7:5e:67:9f:83:cc:bd:
         29:29:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:07 2026 by rpki-client