Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
File:                     Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer (raw, json)
Hash identifier:          DAFWx8WjL+Rz7uCIFiEppu7z0XS1s2uQuvxko9Gi6iA=
Subject key identifier:   36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       259E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Wed 14 Sep 2022 23:01:34 +0000
Certificate not after:    Wed 06 Sep 2023 03:00:35 +0000
Subordinate resources:    AS: 131669 -- 131670

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9630 (0x259e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 14 23:01:34 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:b4:ed:cf:a1:a5:fe:cf:4f:15:99:e6:7d:
                    7e:0f:b8:5b:09:42:5a:2b:6e:79:e0:fa:c9:c0:87:
                    b4:46:9d:1c:da:78:ed:19:28:94:31:b2:94:70:1d:
                    0d:a2:24:73:09:d5:e1:5c:cf:84:47:53:51:fb:5d:
                    d6:d5:ac:ee:27:03:5e:30:85:71:b6:66:9f:66:50:
                    d0:2d:12:3b:99:0a:a5:a9:2e:89:8e:33:44:cc:23:
                    d5:d6:35:ca:12:a4:06:82:32:78:d3:d0:06:5b:7c:
                    c9:6a:a3:cc:71:72:92:03:88:36:c1:bb:eb:af:be:
                    36:c8:1e:d0:03:ba:b5:e6:a5:f3:f7:9f:65:53:5b:
                    7d:bb:e4:96:69:ca:62:11:ad:03:31:e7:9a:46:bd:
                    66:2f:a8:0e:e8:4b:9f:62:d2:e9:a5:cd:f4:06:7c:
                    b7:1e:b0:0b:69:af:06:b1:4d:dc:53:49:88:55:5b:
                    89:f4:6e:f9:7d:53:45:fd:c3:7a:00:ab:7a:0d:c3:
                    aa:77:68:5d:5d:61:96:27:87:5d:1e:0e:cc:17:02:
                    b2:05:2f:97:68:5e:f8:6f:4e:e3:91:68:3b:a3:d4:
                    bc:08:4f:58:df:53:54:8f:ae:32:8d:38:c2:41:2a:
                    8c:4b:18:8a:54:72:b9:a8:0d:ce:4f:07:fc:b5:5a:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131669-131670

    Signature Algorithm: sha256WithRSAEncryption
         92:a2:88:30:11:5c:d3:e7:03:91:e2:fc:d2:1b:59:cf:d3:a9:
         14:39:97:1c:29:f8:73:84:23:33:21:4e:5a:31:ff:99:9f:0c:
         9b:62:8d:24:2f:7c:35:73:f6:5c:36:ed:af:7f:54:ff:8f:a1:
         eb:b3:77:78:32:6e:f3:cb:7a:f2:56:cc:68:8a:a5:c2:5a:c4:
         48:80:13:bd:21:7f:6c:dd:81:c0:94:15:2a:78:7b:6f:87:02:
         56:b5:5c:ad:07:fe:d5:2b:05:b1:90:f4:8d:d3:c8:4a:e8:29:
         e6:79:f1:6e:66:f6:3f:9b:b9:20:f7:14:d1:7a:7b:c3:a9:ef:
         b3:49:eb:87:a3:b9:57:8f:f5:80:b6:64:0b:2b:d7:74:d3:be:
         2e:5c:81:6a:7b:92:23:ec:ee:b9:03:61:13:d8:c9:9c:21:78:
         bb:d5:c3:1b:d3:6f:34:60:a7:ce:ca:25:9a:97:64:df:56:b8:
         8e:f4:b0:cf:3e:f4:e3:e8:1d:d6:9c:9d:a8:b4:d7:df:b3:f4:
         0b:d4:d9:4c:1f:57:d0:e7:34:e3:9e:4b:f4:70:06:32:a4:04:
         60:18:76:06:6d:cd:ae:a3:00:8c:57:6d:71:35:3d:e9:8b:6e:
         96:59:a0:d8:fa:97:95:dd:c3:de:41:24:7c:6f:a9:78:d8:68:
         94:ec:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org