Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RroWTWlkT2n-xjKkO-itLyupeNQ.cer
File:                     RroWTWlkT2n-xjKkO-itLyupeNQ.cer (raw, json)
Hash identifier:          cehq+KNUGMPgSNOH2WjnPgn/Rqnok4kgcaog9i06HBA=
Subject key identifier:   46:BA:16:4D:69:64:4F:69:FE:C6:32:A4:3B:E8:AD:2F:2B:A9:78:D4
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       255B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/RroWTWlkT2n-xjKkO-itLyupeNQ.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 06 Sep 2022 03:09:03 +0000
Certificate not after:    Wed 06 Sep 2023 03:00:35 +0000
Subordinate resources:    IP: 103.130.248.0/22
                          IP: 2403:c1c0::/32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9563 (0x255b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  6 03:09:03 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=46BA164D69644F69FEC632A43BE8AD2F2BA978D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:11:93:68:16:56:e9:c6:37:6d:8b:4a:aa:
                    c6:4e:34:b4:d3:0f:bb:56:b5:be:06:72:72:09:0e:
                    6d:43:d9:18:ad:99:34:24:ba:46:0e:93:31:b6:c6:
                    4d:9f:80:1d:9f:70:c6:cd:52:94:05:df:50:1e:33:
                    c2:f7:ba:ea:b0:ec:23:18:96:7c:33:4d:d9:99:e6:
                    2a:05:05:f8:fc:85:ec:b3:6b:cd:58:8c:eb:34:09:
                    e2:45:42:43:ef:ff:53:dc:c8:d1:09:10:8e:f7:6b:
                    4a:18:73:b2:81:e8:52:5b:63:b2:27:6f:7a:c7:b5:
                    56:8b:95:9a:4d:d2:5b:84:3a:f3:d3:c0:61:aa:8c:
                    6b:16:95:96:f0:dd:ef:1a:39:15:19:73:42:1b:3d:
                    ea:bd:2d:3a:f6:f2:0f:9f:2f:48:44:b3:b2:cb:a3:
                    8a:09:34:26:48:3a:9f:9b:58:cc:03:b3:f4:16:f5:
                    06:9c:77:10:25:f8:f9:5e:78:cc:0a:ce:3f:d4:50:
                    54:72:35:8b:4f:9c:ac:54:cb:2c:82:03:bd:ca:96:
                    84:98:c1:cc:27:8c:57:0d:93:f4:e9:f5:07:67:30:
                    27:c7:28:7d:59:f8:fb:87:cd:69:b8:e9:41:e2:e2:
                    86:2c:f9:fa:11:64:dd:8d:a5:5e:4e:9d:a4:ee:6c:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:16:4D:69:64:4F:69:FE:C6:32:A4:3B:E8:AD:2F:2B:A9:78:D4
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/RroWTWlkT2n-xjKkO-itLyupeNQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.248.0/22
                IPv6:
                  2403:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:6e:f7:9d:e1:dd:d0:75:62:3b:8a:7e:59:3e:e8:dd:2f:
         a2:e3:5d:73:87:77:fa:5e:df:7a:58:39:a8:e4:4b:72:26:d1:
         96:26:eb:01:4a:ce:e9:e5:c0:74:64:6e:3e:19:b0:b9:34:13:
         2a:0b:86:7d:90:a6:b7:c8:a0:e5:6c:ba:a2:8f:f8:61:9a:8a:
         30:40:53:2b:2e:6e:2f:73:aa:cc:07:6e:e6:59:52:12:ee:d4:
         4a:3a:d9:9e:59:db:1d:10:9e:20:fb:41:f7:8f:8e:d2:e6:4f:
         7e:dc:75:bb:4e:a4:6b:e1:25:53:40:7e:c2:30:0a:12:90:08:
         8c:45:b8:b9:b7:d3:94:b9:a7:f5:13:ba:dc:3c:36:90:3c:80:
         87:ce:bd:f3:96:b4:02:e0:fe:54:e2:bf:9f:7c:ec:39:b9:9b:
         87:ec:f9:53:67:1b:98:0e:80:9c:6a:62:6a:d6:fc:64:7b:ff:
         1e:4c:21:81:c1:26:14:91:26:6a:ee:76:ec:c8:08:f3:b8:bf:
         18:e9:63:d9:2f:a7:94:e5:81:db:5e:2e:d2:1f:29:a2:4e:a4:
         4f:7a:3a:27:74:19:d5:a9:2b:48:50:06:16:7c:be:7c:b0:14:
         41:92:15:52:b4:e2:75:44:64:b3:dd:b0:99:60:49:6a:14:ba:
         3a:c9:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----