Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
File:                     lMbd_dS6pQQA86EZpYM84AIb2y4.cer (raw, json)
Hash identifier:          RKNKep3oQ/y0WfV7QwH62QtvPkPHqdfhtEKU7G8SgS0=
Subject key identifier:   94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3C9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 22 Aug 2025 08:15:03 +0000
Certificate not after:    Sat 22 Aug 2026 08:14:28 +0000
Subordinate resources:    AS: 18411
                          IP: 61.56.16.0/20
                          IP: 119.30.16.0/20
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15518 (0x3c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 22 08:15:03 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2b:8e:ab:14:55:f2:2c:6b:40:4c:3c:3b:f4:
                    08:d9:83:0d:c8:ed:58:f8:41:7f:c9:3e:48:bf:79:
                    59:af:76:9a:6c:31:71:14:d6:1e:15:57:fc:34:21:
                    79:cc:c0:fd:39:a9:f3:83:ec:69:9e:fc:80:83:bf:
                    d9:56:64:45:5a:aa:ad:97:5f:23:75:e1:2f:be:63:
                    b4:54:9d:80:d8:05:ed:b2:21:d8:0d:87:ac:33:59:
                    44:a6:32:2a:3e:34:7d:47:2d:36:fc:67:4f:27:3b:
                    24:75:fd:32:75:14:cf:d4:a8:5e:99:e4:11:bf:ac:
                    d3:30:7b:bd:9e:08:35:e5:f4:10:15:68:b3:96:4c:
                    70:77:12:ca:dc:bc:b3:a4:da:1b:50:cf:6d:f7:d9:
                    ba:73:21:f7:23:6c:cc:c3:62:a3:46:c6:2a:62:46:
                    a9:9e:74:cb:e7:c5:26:a2:85:e8:22:29:56:c0:5c:
                    77:ef:60:cd:92:52:4e:0a:32:1f:79:14:ee:66:97:
                    58:d3:a2:8a:d1:b3:da:f3:fd:7d:8d:89:e3:4e:fc:
                    7e:84:5c:f7:04:8e:ff:b8:06:97:b3:ef:cf:b5:26:
                    2f:97:dd:c1:ae:6b:91:e9:ee:16:52:50:fe:e2:27:
                    0d:1a:cc:cf:7c:ea:37:e0:b5:d3:4d:0d:68:db:a2:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18411

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.16.0/20
                  119.30.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:84:5c:62:52:1b:c8:76:a6:da:17:be:33:b2:5c:25:65:0e:
         ea:5e:15:14:eb:4a:75:37:f3:c3:ce:fd:51:21:98:b8:6d:1d:
         a6:a7:c7:dd:0a:77:cf:02:a7:2f:54:c2:ad:ea:f5:d1:21:02:
         59:3b:2f:23:2c:b7:f7:be:b5:46:9c:ff:5a:b3:8e:87:83:37:
         88:a8:aa:5e:b6:e8:4b:cf:e2:ac:8a:45:56:7b:e4:d3:57:3e:
         4c:c9:a2:22:74:f1:1a:5f:b2:db:a7:39:ac:ec:8b:7b:b8:20:
         9a:71:d9:19:95:54:d1:80:2d:f6:19:da:93:64:7f:84:29:e0:
         fd:d5:bd:62:33:ca:f4:4f:cd:a3:c8:e0:2c:5c:a4:c9:fb:85:
         d3:4f:8e:00:53:d7:ed:46:2b:7d:f7:98:59:97:85:f7:8e:51:
         f5:5f:c6:cc:85:ad:df:59:45:90:35:ec:2d:02:0f:4d:62:08:
         76:e6:75:d0:26:db:17:3f:10:6a:4a:34:01:c4:05:68:64:74:
         8c:16:f9:f1:5d:17:67:97:08:6b:4b:ca:c3:1b:1c:ed:d2:8e:
         2f:ec:84:fd:ce:92:77:bc:da:d5:0a:f8:a0:37:83:d3:14:ab:
         9d:98:77:f9:7f:c5:d9:41:e4:be:ff:14:4a:97:9c:bb:35:47:
         fa:fc:de:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:54:08 2025 by rpki-client