Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
File:                     hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer (raw, json)
Hash identifier:          IyhUahs6SJQgAnRp3FrajPEvUO4GPG6aQg4+vH/4vG8=
Subject key identifier:   84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       287C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 01 Sep 2023 03:11:21 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    AS: 131638
                          IP: 103.133.152.0/22
                          IP: 2404:4fc0::/32

Validation:               Failed, certificate revoked on Wed 20 Mar 2024 02:05:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10364 (0x287c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  1 03:11:21 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:d3:e1:24:30:a9:0b:db:02:5d:b2:bd:e4:
                    4b:43:b2:4c:ad:1c:40:41:4e:ee:05:89:2c:7d:b7:
                    34:20:36:83:3c:91:60:dc:20:fc:59:1b:1a:ca:11:
                    ed:78:5c:3a:5b:fe:e1:67:f9:63:41:75:77:e5:e3:
                    29:af:b1:e8:d4:78:38:01:11:c6:0d:1a:b4:fb:21:
                    19:9b:57:13:19:0a:87:6c:93:11:ad:89:6d:e4:91:
                    4f:6b:47:5c:e5:01:45:44:e4:d9:90:e3:e9:0c:dd:
                    64:e4:8f:e3:e2:53:d8:db:69:ab:b0:2a:d9:1e:0f:
                    2c:2f:f8:aa:73:96:b7:27:c3:40:1d:4b:92:ab:92:
                    d1:4f:24:00:f5:16:3b:a0:f8:26:cf:65:17:c6:72:
                    7c:8b:47:9b:64:a1:4a:0d:b1:20:ba:24:c8:de:f0:
                    db:74:a8:79:61:99:90:5f:78:24:f5:7a:e7:66:08:
                    2d:fe:a6:a1:7c:14:27:07:dd:16:05:e1:f2:9f:12:
                    b4:14:35:58:d8:64:f6:69:15:68:66:6a:a3:ae:da:
                    45:28:51:da:e2:15:45:76:36:86:0e:86:6f:ff:48:
                    f3:58:67:38:c6:d3:de:29:43:46:3c:05:a2:3a:43:
                    f7:fd:1e:3e:ef:d0:3a:d3:55:14:36:91:a0:d6:47:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131638

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.152.0/22
                IPv6:
                  2404:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:55:6c:c3:6f:68:38:4d:61:80:d6:88:2f:24:e4:9c:0f:
         d8:2f:79:d9:1c:0c:ac:c1:4e:aa:bb:f3:0b:8f:48:36:eb:5c:
         97:f5:be:1a:5a:1d:8d:3d:b0:27:05:12:8f:5d:28:d8:e9:f0:
         e9:61:d5:1b:2d:68:62:f3:4c:62:28:1b:5a:79:70:8d:da:9e:
         fe:67:2b:38:5d:41:00:45:3f:65:c5:56:f1:f2:dc:e9:c1:0f:
         bb:9e:f2:fa:98:fb:09:65:12:d4:d3:a1:5c:c3:81:13:bd:0d:
         59:f2:47:b3:37:0a:29:59:52:71:88:d0:ba:3e:af:56:4d:8e:
         6e:08:a2:36:67:aa:72:4b:a2:ee:13:2f:8e:3c:49:5d:32:f6:
         62:b3:c8:f0:80:73:4c:33:72:7b:3c:76:58:7e:8a:a3:08:b7:
         e1:01:96:74:f1:f4:34:4c:ff:76:66:0e:d4:fe:da:25:c3:16:
         30:c5:1f:28:42:4f:74:18:f5:0c:f2:ee:05:a6:e8:71:52:56:
         7e:a6:61:80:38:1b:0a:e0:af:b7:ec:21:69:91:a4:12:f2:9f:
         4a:1c:a5:4a:6d:ad:d8:b4:1e:f3:1e:82:bd:68:fe:83:ba:fc:
         a7:10:25:ce:50:57:83:32:e9:e7:24:3d:b1:61:6b:f3:08:b6:
         f7:84:d7:a4
-----BEGIN CERTIFICATE-----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Generated at Wed Mar 20 04:23:28 2024 by rpki-client on console-fra.rpki-client.org