Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/O4VtA4nyi3mwj2fUn-XbWSTXzqo.cer
File:                     O4VtA4nyi3mwj2fUn-XbWSTXzqo.cer (raw, json)
Hash identifier:          YUC/iTVBxe14W3BsBsdaWG6sRM8hxZVgq6N5800klfQ=
Subject key identifier:   3B:85:6D:03:89:F2:8B:79:B0:8F:67:D4:9F:E5:DB:59:24:D7:CE:AA
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1932
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/AMBIT/O4VtA4nyi3mwj2fUn-XbWSTXzqo.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/AMBIT/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:27 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    AS: 131591
                          IP: 103.231.48.0/22
                          IP: 2400:fc80::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6450 (0x1932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3B856D0389F28B79B08F67D49FE5DB5924D7CEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:9b:14:f9:c0:ea:51:fa:9b:e2:9a:21:26:
                    bf:ca:ee:79:07:36:c8:df:00:ca:48:b1:bb:dc:d6:
                    4c:3c:f8:39:f4:15:4b:6c:a2:6f:d6:06:f9:01:67:
                    68:da:fb:dc:6f:2c:41:d2:d1:5d:5a:28:b1:4e:dc:
                    e4:ab:37:3e:54:f0:f6:24:a9:b2:df:d3:d4:a0:d5:
                    17:47:8b:bb:a8:50:fe:e0:36:d9:00:0a:86:5b:5a:
                    5a:40:3a:37:40:42:37:a4:94:47:72:45:af:11:1a:
                    b9:67:de:28:03:9d:a8:e6:f7:cb:75:24:44:83:c1:
                    70:14:5a:5f:ec:56:0e:2f:bf:f5:18:bb:31:8e:2b:
                    f3:8a:f2:f2:73:21:27:e8:8a:6c:c0:65:18:55:14:
                    f7:4c:52:87:c7:de:35:37:c4:67:7b:10:d2:70:dc:
                    8b:4a:40:48:26:56:f5:25:b6:e8:c4:1c:17:86:71:
                    30:71:2d:16:8f:0c:5b:2e:12:c7:18:96:39:74:7e:
                    5f:2c:51:d6:87:4e:37:eb:4f:af:2c:60:d1:54:07:
                    ad:47:75:2e:e9:24:47:85:a3:d8:35:92:f8:5e:45:
                    4d:f5:cf:90:9d:93:d4:72:d5:c9:e4:83:37:5b:6f:
                    78:50:5f:9b:f3:a9:26:c6:f3:1a:e8:f4:0d:c1:86:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:85:6D:03:89:F2:8B:79:B0:8F:67:D4:9F:E5:DB:59:24:D7:CE:AA
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AMBIT/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AMBIT/O4VtA4nyi3mwj2fUn-XbWSTXzqo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131591

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.48.0/22
                IPv6:
                  2400:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:39:b2:11:31:17:2b:8f:11:e6:23:1b:d8:aa:36:6a:c1:
         51:17:65:52:a4:68:3f:85:23:92:8f:86:5c:1e:b1:4d:f1:37:
         a8:72:10:09:80:d4:6a:fe:b2:bd:19:b3:cc:17:67:ab:f9:24:
         8f:e8:d9:8a:95:84:af:79:54:15:f2:36:a6:e0:82:4a:41:7e:
         6b:58:13:a9:dc:e7:e5:4a:6f:ce:d5:9b:15:6f:15:98:a1:02:
         2f:a1:8e:4e:28:e0:f8:ea:50:05:55:1c:85:a3:ce:7d:71:f6:
         a4:10:6c:5e:c5:ba:8a:3e:af:80:20:67:23:0d:9e:f2:66:a9:
         cd:90:6a:fe:64:47:31:a9:e6:3d:18:9d:07:4c:4c:97:a8:e2:
         30:6b:86:33:f9:fc:dd:7e:5d:9a:12:57:c2:0c:25:02:79:13:
         d4:fa:b7:ec:f7:a7:22:30:e9:ce:d9:db:00:56:ee:55:91:64:
         ce:b4:f0:77:25:26:65:9f:21:1a:cf:dc:70:43:15:22:a9:66:
         0a:ff:ae:26:7e:a4:ba:4d:3a:0f:d6:21:ef:40:2e:fc:71:de:
         08:ff:75:b1:1a:09:74:fa:8b:e7:76:8f:64:81:0b:c6:de:36:
         97:bf:25:a6:f4:11:3a:ee:ec:f7:dd:f1:a9:91:11:f7:90:1d:
         aa:9b:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----