Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-Cq3lxJINbGrEumPs2_yfJiDQNc.cer
File:                     -Cq3lxJINbGrEumPs2_yfJiDQNc.cer (raw, json)
Hash identifier:          AC9efpYKnQ9tn2bA67AlBb0cVeUX5gSD4G+kdJT1W0Y=
Subject key identifier:   F8:2A:B7:97:12:48:35:B1:AB:12:E9:8F:B3:6F:F2:7C:98:83:40:D7
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2AEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/-Cq3lxJINbGrEumPs2_yfJiDQNc.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Wed 27 Dec 2023 09:15:32 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 150773
                          IP: 2001:44f0::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10991 (0x2aef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Dec 27 09:15:32 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F82AB797124835B1AB12E98FB36FF27C988340D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:ab:48:c8:6e:f4:79:a3:a1:1e:1c:f6:77:
                    ac:ad:ff:9c:ae:b6:39:47:94:3c:df:2b:d8:d0:a9:
                    65:4d:1a:4f:b1:0a:dc:e2:b4:52:61:1d:41:f6:1c:
                    a2:15:79:1d:55:3e:f9:27:92:8c:00:f2:69:c7:08:
                    51:34:c8:66:8a:e0:9e:5b:8c:53:85:11:70:e8:1a:
                    4d:82:04:32:9c:bf:7c:c8:0c:13:a9:81:88:1e:2b:
                    bf:d1:70:e2:54:ee:64:b9:b7:8a:0a:da:1f:9a:25:
                    67:89:aa:cf:18:e2:65:db:a1:d1:f8:b6:ed:4e:e6:
                    9f:de:60:ec:12:bd:7a:6d:bc:51:75:37:80:f9:10:
                    96:a6:29:83:99:67:c8:b4:78:83:38:63:d3:13:fb:
                    f2:64:77:c5:1f:1a:b4:b9:bf:af:94:98:c5:37:3e:
                    78:0c:d7:34:16:32:68:cf:54:5b:f7:0c:94:fb:b6:
                    a4:b9:e8:d7:23:1b:4a:07:6d:2a:7f:2b:04:06:14:
                    64:b1:76:34:70:bf:de:d7:79:03:0d:6a:40:b7:0e:
                    d7:88:3f:8d:76:60:f0:77:a1:2b:d5:68:19:ee:b6:
                    da:f5:b5:ce:72:4f:0c:26:ec:a1:0c:98:7f:4c:54:
                    df:3b:df:68:29:0c:b6:a9:f1:10:05:54:ef:f0:98:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2A:B7:97:12:48:35:B1:AB:12:E9:8F:B3:6F:F2:7C:98:83:40:D7
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/-Cq3lxJINbGrEumPs2_yfJiDQNc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150773

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:44f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:cc:d2:f7:7a:f4:95:da:65:9e:ec:ce:24:1d:8b:f2:53:
         3f:89:39:f5:51:51:7f:2a:ce:b6:8f:06:b8:3d:16:74:70:a3:
         fc:50:39:5b:f8:9a:97:11:9b:3e:43:11:55:e5:90:50:16:a8:
         70:be:25:2a:53:13:31:ee:1d:68:67:37:56:90:87:fe:db:fd:
         90:2f:11:40:c3:b3:21:39:a2:ef:3d:87:61:e0:af:74:24:be:
         1f:4b:31:94:51:c5:63:5f:6b:f4:c9:bc:73:06:86:c0:ab:c0:
         f6:4b:a4:ba:ba:dc:da:0e:ce:d3:3f:e0:bf:e4:c5:75:e3:da:
         2a:0b:0c:cb:c7:c9:95:a1:be:1f:1f:6e:0c:e9:49:18:0b:50:
         49:77:65:14:54:11:51:53:9d:f4:cc:df:73:aa:94:9b:f8:a7:
         d6:97:44:c1:30:c6:6a:c7:07:4f:82:0d:ba:02:80:66:3e:bf:
         9e:a4:91:57:99:85:51:25:39:6e:32:ec:db:4d:e2:a0:a5:16:
         33:a8:d3:48:d6:9b:a1:b1:fe:e8:ea:22:3a:85:5a:0f:4d:eb:
         3a:86:13:d0:a0:d5:44:10:ce:a3:50:43:c8:02:79:71:73:d5:
         79:a0:56:17:28:20:90:65:4f:cb:3e:d6:5e:4c:81:0e:c7:30:
         69:b8:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----