Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/322pw6cVLrHobRfMId4CDY_JbvM.cer
File:                     322pw6cVLrHobRfMId4CDY_JbvM.cer (raw, json)
Hash identifier:          SQlXfLTZV6wve8s3IcT1nwv5EdNw1hHmvZMxpYqXLFk=
Subject key identifier:   DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1A40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:40 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.129.180.0/22
                          IP: 2403:8340::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6720 (0x1a40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DF6DA9C3A7152EB1E86D17CC21DE020D8FC96EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:79:5c:01:2a:cf:11:6b:95:80:0b:cd:c0:
                    d3:cd:a7:81:98:db:4a:7d:52:5a:d7:60:66:9b:6e:
                    ee:db:ad:30:c2:2e:32:44:20:40:a8:99:89:bd:08:
                    1e:55:da:5d:d4:10:0f:89:b7:bb:e7:f5:44:26:11:
                    cd:de:a4:5b:5b:e4:a6:e3:ce:6f:08:49:a1:2b:1d:
                    e8:c1:35:bd:b2:bc:35:67:18:78:8c:27:79:1a:b4:
                    2a:66:0f:08:1f:98:8a:82:2c:fd:2a:f6:08:4c:17:
                    9a:f7:6f:ce:16:77:ee:e9:41:7c:d8:72:3f:20:32:
                    78:6b:d9:57:98:13:45:e8:59:eb:f0:67:98:92:34:
                    bb:ef:37:61:be:66:07:23:a6:3f:b7:57:f4:a8:4a:
                    7b:08:94:98:89:92:95:d4:0a:fc:24:e0:91:b2:8d:
                    c9:f4:51:47:8e:a3:62:a8:23:74:10:b0:0f:4d:a1:
                    d5:1f:ec:7d:4e:8f:d7:70:9d:67:9d:26:ab:48:07:
                    db:30:e8:4d:84:c7:fc:d6:57:3b:78:1c:c5:0f:62:
                    26:ce:f6:8c:e2:90:3a:73:88:cc:e4:50:e4:a5:f2:
                    16:ca:2b:e1:20:07:92:c2:a4:59:3a:9d:fd:e1:88:
                    7f:8d:03:a3:92:70:84:d1:4e:b1:74:c5:f3:a6:d5:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.180.0/22
                IPv6:
                  2403:8340::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:2a:3c:74:a6:e7:d7:84:e8:d9:54:4c:3b:34:cb:32:b2:5d:
         9d:70:e7:0a:41:61:13:f6:80:b9:42:09:f5:a3:cd:34:58:e5:
         83:88:38:e4:d3:06:e1:b5:7b:14:b6:a7:e4:b5:ce:a9:30:2f:
         17:bd:e6:fa:8d:56:c4:f7:d9:8d:6b:39:61:c1:42:3e:06:c8:
         90:d7:de:6c:6b:c0:d9:02:51:11:b4:82:36:e2:40:89:45:2d:
         43:fb:06:c9:60:d7:70:1f:97:63:82:e6:48:9c:6a:5c:11:5f:
         25:fc:f8:c8:7d:6f:ed:cf:cb:bd:b8:27:68:fb:25:bd:b1:ff:
         f4:40:85:ec:89:74:36:37:3e:de:01:43:92:15:43:a0:88:d3:
         cf:ac:f9:a1:97:c0:75:00:98:f1:55:90:42:1b:bf:09:72:61:
         38:c4:23:b6:27:48:80:7e:49:f1:bb:16:8f:83:a9:15:93:55:
         c2:97:37:6e:5e:81:29:99:4f:1a:13:97:95:52:6e:20:a5:d7:
         6c:e9:9f:16:f5:13:8b:58:be:bb:1b:1c:a1:82:61:82:5d:b3:
         fe:c1:de:eb:39:3b:04:d3:30:6d:1f:bf:40:74:99:8f:09:40:
         b3:7a:ac:02:aa:3a:35:1f:13:35:64:05:34:3b:d2:b6:be:81:
         ca:fa:62:44
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICGkAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIwMDkyOTA5NTM0MFoXDTIxMDkyOTA5NTEyM1owMzEx
MC8GA1UEAxMoREY2REE5QzNBNzE1MkVCMUU4NkQxN0NDMjFERTAyMEQ4RkM5NkVG
MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALOzeVwBKs8Ra5WAC83A
082ngZjbSn1SWtdgZptu7tutMMIuMkQgQKiZib0IHlXaXdQQD4m3u+f1RCYRzd6k
W1vkpuPObwhJoSsd6ME1vbK8NWcYeIwneRq0KmYPCB+YioIs/Sr2CEwXmvdvzhZ3
7ulBfNhyPyAyeGvZV5gTRehZ6/BnmJI0u+83Yb5mByOmP7dX9KhKewiUmImSldQK
/CTgkbKNyfRRR46jYqgjdBCwD02h1R/sfU6P13CdZ50mq0gH2zDoTYTH/NZXO3gc
xQ9iJs72jOKQOnOIzORQ5KXyFsor4SAHksKkWTqd/eGIf40Do5JwhNFOsXTF86bV
0GsCAwEAAaOCAlkwggJVMB0GA1UdDgQWBBTfbanDpxUusehtF8wh3gINj8lu8zAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdAGCCsGAQUFBwELBIHDMIHAMDUGCCsGAQUFBzAF
hilyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1hULzBUBggr
BgEFBQcwCoZIcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NY
VC8zMjJwdzZjVkxySG9iUmZNSWQ0Q0RZX0pidk0ubWZ0MDEGCCsGAQUFBzANhiVo
dHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCZ4G0MA0EAgACMAcDBQAkA4NAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYKjx0pufXhOjZVEw7NMsysl2dcOcKQWET9oC5Qgn1o800WOWDiDjk
0wbhtXsUtqfktc6pMC8Xveb6jVbE99mNazlhwUI+BsiQ195sa8DZAlERtII24kCJ
RS1D+wbJYNdwH5djguZInGpcEV8l/PjIfW/tz8u9uCdo+yW9sf/0QIXsiXQ2Nz7e
AUOSFUOgiNPPrPmhl8B1AJjxVZBCG78JcmE4xCO2J0iAfknxuxaPg6kVk1XClzdu
XoEpmU8aE5eVUm4gpdds6Z8W9ROLWL67GxyhgmGCXbP+wd7rOTsE0zBtH79AdJmP
CUCzeqwCqjo1HxM1ZAU0O9K2voHK+mJE
-----END CERTIFICATE-----