Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
File:                     YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer (raw, json)
Hash identifier:          BcpvRiUmb/gFHBsdGRGZ/J9llbv3LVfvlVSLBMXeYCg=
Subject key identifier:   61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2D09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:11 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.137.22.0/23
                          IP: 2404:a3c0::/32

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 08:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11529 (0x2d09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:11 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:cb:14:e4:24:55:e6:c1:aa:c9:bc:46:b1:
                    94:33:fd:8f:46:45:eb:ae:a3:65:a2:1f:0c:26:ca:
                    d2:e0:a9:bb:63:a1:7e:99:6f:45:88:37:8a:18:92:
                    a2:f2:8a:79:4d:3c:96:69:cc:34:9b:28:4a:8f:5e:
                    aa:57:b4:b1:79:3d:e7:ac:2e:fd:e0:db:7b:b1:9d:
                    54:7b:20:6d:59:97:8c:65:47:95:82:e6:35:e2:42:
                    2e:f5:8a:1d:07:54:4e:15:88:5d:e1:3b:be:20:ed:
                    2c:18:34:24:c0:37:ca:6e:10:5c:6f:5f:c4:e0:7e:
                    00:f5:47:a9:d2:d7:01:ba:2b:19:ab:83:c0:8f:fb:
                    8f:fd:ae:da:a1:31:cc:36:a9:13:e2:f6:43:c1:4e:
                    b9:81:52:f0:ed:16:e5:90:24:70:e4:c2:c1:6f:9e:
                    60:d3:ce:48:e7:e9:0a:1c:9f:94:99:ab:47:3e:9a:
                    01:d5:e6:08:bf:69:c4:ab:e3:99:e1:5f:d1:dd:8f:
                    60:a3:90:7c:0c:93:6c:d1:82:27:ad:cc:f0:e4:71:
                    41:b4:bd:eb:fd:74:bc:20:62:69:b9:8f:c1:87:04:
                    4f:f7:79:b3:8c:27:f1:a3:1a:1f:af:68:c0:c8:10:
                    0f:5c:da:b6:13:ab:d8:1b:b2:b7:90:d4:c1:57:bf:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.22.0/23
                IPv6:
                  2404:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:6d:56:0f:fa:15:5c:a6:8a:4d:66:96:c0:b1:b6:46:03:
         81:39:0b:43:b4:ea:36:d0:6e:a7:9a:94:96:67:53:88:c9:47:
         e0:52:48:1f:83:40:c3:43:0a:33:8a:98:71:26:0e:69:98:3a:
         1b:46:e5:44:45:5d:fd:f2:4b:7a:47:c0:e6:00:0c:1e:b5:20:
         da:3b:0d:ca:aa:51:9a:fd:4e:d4:aa:9f:1e:24:1f:c4:55:9a:
         99:97:cd:70:ad:0b:fb:4b:3e:e4:c0:2c:70:70:65:0f:69:5c:
         73:c9:be:3e:fe:0e:35:a8:0c:02:85:ce:f4:83:b4:07:c8:73:
         2a:a9:b7:2f:b6:f4:e9:82:15:50:2f:07:00:f8:86:dc:1a:3c:
         47:47:d1:7a:09:0a:74:32:85:96:1b:79:45:06:3d:58:1f:3f:
         d2:64:a8:24:7f:9e:18:69:45:28:a0:1d:57:48:34:c5:cc:1e:
         bf:55:9b:bc:76:4f:c8:ee:66:a0:60:6b:a7:cd:3b:5f:8c:96:
         82:8b:dc:e1:4a:67:17:d4:c0:2a:43:4e:b8:e9:6f:89:3d:b2:
         d4:e3:76:e1:e8:be:c5:7d:18:e0:24:d4:3b:9f:16:31:a3:36:
         dc:f1:90:96:54:c4:73:0d:b2:aa:5d:c7:bf:18:4e:4d:f2:5e:
         6c:a4:6f:32
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICLQkwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI0MDgyNjAxNTcxMVoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoNjFFMEVFNzk0MjhCODVFREFCQjVGNkVCOTU3OEVGQjE5RTYzQzk4
RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbbyxTkJFXmwarJvEax
lDP9j0ZF666jZaIfDCbK0uCpu2OhfplvRYg3ihiSovKKeU08lmnMNJsoSo9eqle0
sXk956wu/eDbe7GdVHsgbVmXjGVHlYLmNeJCLvWKHQdUThWIXeE7viDtLBg0JMA3
ym4QXG9fxOB+APVHqdLXAborGauDwI/7j/2u2qExzDapE+L2Q8FOuYFS8O0W5ZAk
cOTCwW+eYNPOSOfpChyflJmrRz6aAdXmCL9pxKvjmeFf0d2PYKOQfAyTbNGCJ63M
8ORxQbS96/10vCBiabmPwYcET/d5s4wn8aMaH69owMgQD1zathOr2Buyt5DUwVe/
MxsCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRh4O55QouF7au19uuVeO+xnmPJjzAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF
hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9VRC8w
WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9JTUNMT1VEL1llRHVlVUtMaGUycnRmYnJsWGp2c1o1anlZOC5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI
KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFniRYwDQQCAAIwBwMFACQEo8AwDQYJ
KoZIhvcNAQELBQADggEBAGlebVYP+hVcpopNZpbAsbZGA4E5C0O06jbQbqealJZn
U4jJR+BSSB+DQMNDCjOKmHEmDmmYOhtG5URFXf3yS3pHwOYADB61INo7DcqqUZr9
TtSqnx4kH8RVmpmXzXCtC/tLPuTALHBwZQ9pXHPJvj7+DjWoDAKFzvSDtAfIcyqp
ty+29OmCFVAvBwD4htwaPEdH0XoJCnQyhZYbeUUGPVgfP9JkqCR/nhhpRSigHVdI
NMXMHr9Vm7x2T8juZqBga6fNO1+MloKL3OFKZxfUwCpDTrjpb4k9stTjduHovsV9
GOAk1DufFjGjNtzxkJZUxHMNsqpdx78YTk3yXmykbzI=
-----END CERTIFICATE-----
Generated at Fri Sep 13 09:47:09 2024 by rpki-client on console-ams.rpki-client.org