Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RSRakK7HUmertXm7_50HRHxwvpA.cer
File:                     RSRakK7HUmertXm7_50HRHxwvpA.cer (raw, json)
Hash identifier:          5YIXtQ5imObxCjW2HHvWbeFjSmUgaYHx7IoMnP+14QM=
Subject key identifier:   45:24:5A:90:AE:C7:52:67:AB:B5:79:BB:FF:9D:07:44:7C:70:BE:90
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2854
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/RSRakK7HUmertXm7_50HRHxwvpA.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 01 Sep 2023 03:11:18 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 7534
                          IP: 202.160.64.0/19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10324 (0x2854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  1 03:11:18 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=45245A90AEC75267ABB579BBFF9D07447C70BE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:de:1e:d8:73:c5:c1:9e:36:42:a5:66:78:
                    83:02:f6:11:d3:e8:78:89:fb:61:c7:94:b4:a4:73:
                    e5:1c:a6:7d:27:b6:01:58:f0:2b:ae:60:f2:c9:32:
                    61:75:a0:ee:37:09:cb:c8:3a:e8:c4:72:f0:1e:0c:
                    da:1e:33:91:54:e9:1a:85:1b:75:ef:e9:07:cb:9b:
                    e1:9d:6c:f2:65:49:e9:e2:c2:2f:3b:59:c2:d5:34:
                    16:b3:bf:88:50:97:5f:14:60:4a:20:83:82:a2:e2:
                    ae:45:35:fb:0f:03:b7:cf:40:21:a5:c0:b3:85:ed:
                    d7:1a:9d:01:e2:47:dc:88:e9:e9:b7:6a:d9:45:2e:
                    ed:f8:8a:9c:fb:fe:df:e0:31:68:a0:12:41:88:61:
                    e0:bc:db:f6:f8:91:24:43:f4:88:e2:64:45:eb:59:
                    07:59:04:3b:e5:a7:7f:78:5b:83:f0:82:57:f0:11:
                    d9:1b:57:e4:14:ce:00:cd:d3:14:ff:35:f1:cb:01:
                    c7:6e:91:d2:b8:08:db:46:43:2b:ee:00:73:3a:54:
                    12:2e:d2:51:60:cd:a4:17:38:d8:bb:d5:01:74:85:
                    3d:1c:98:9b:ca:a8:65:a3:e3:ae:6a:2a:9d:e1:2e:
                    9d:8b:8f:9f:9e:50:17:8c:79:36:bb:d8:28:0d:d5:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:24:5A:90:AE:C7:52:67:AB:B5:79:BB:FF:9D:07:44:7C:70:BE:90
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/RSRakK7HUmertXm7_50HRHxwvpA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7534

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:9d:f3:f1:e3:3e:d3:db:0c:86:a8:a3:9b:fa:30:61:dc:
         c0:be:5e:72:ee:3f:3f:a6:ab:03:45:7f:75:62:0c:50:73:10:
         42:4b:55:5e:5c:f0:45:9c:ca:c6:8a:c0:7c:0f:58:8a:03:e3:
         4e:f8:29:d4:f0:cb:cb:05:65:ca:ac:5a:ad:05:73:40:72:b9:
         8b:16:03:21:c5:2a:ae:67:f2:4e:7c:5e:28:bc:b1:b6:82:a2:
         b8:95:a5:33:b8:ad:b7:ef:4b:dc:92:2f:e1:54:a5:e7:a1:9d:
         e1:07:55:9d:f1:0e:2b:87:bf:c8:d6:62:da:60:7a:71:9f:09:
         da:79:71:0c:c4:4c:43:29:45:42:d8:fd:64:a3:6c:05:93:b2:
         25:f5:9b:ed:c6:36:49:27:d1:03:d4:79:f4:c1:5d:60:21:fb:
         95:8c:6a:de:91:9d:4f:0a:af:e8:ed:6a:31:d1:04:23:4a:a7:
         0d:ad:20:c0:a4:7b:be:2b:12:ef:d5:a0:bf:63:4b:4a:38:76:
         04:33:35:34:45:04:a5:f0:04:e9:fe:12:36:7d:7f:a2:a9:61:
         10:74:40:42:11:93:f4:82:97:37:f7:c8:7e:57:9d:f1:34:67:
         5c:65:6a:2e:d0:99:9e:2c:27:34:d9:fa:33:9d:69:e4:46:e7:
         c4:46:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 09:12:11 2023 by rpki-client on console-fra.rpki-client.org