Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer
File:                     lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer (raw, json)
Hash identifier:          zj/JN3y03GVjn8Ku5H7JrXV7ncH/dJm8zsbUOugmChI=
Subject key identifier:   95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2974
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/lYs0b7AxqD2i9D92H6AgQtUj9Q0.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 01 Sep 2023 03:11:34 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    IP: 103.130.0.0/22
                          IP: 2403:ad40::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10612 (0x2974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  1 03:11:34 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=958B346FB031A83DA2F43F761FA02042D523F50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:42:15:2b:55:82:bd:43:79:d0:88:f4:5d:
                    b3:64:81:36:9b:05:bb:31:d1:da:96:15:02:1a:9b:
                    4c:06:f7:b1:21:cd:12:91:8d:0c:d1:fd:aa:7c:66:
                    ce:57:b9:17:55:27:76:0e:b7:c6:48:34:0a:a1:de:
                    f4:e0:24:5b:11:4e:a6:95:58:26:35:b4:5e:a4:6e:
                    d3:96:c9:09:0c:34:e0:c7:1f:0f:4a:0d:ef:36:48:
                    f7:f8:0f:b7:44:38:5a:bc:7a:f9:31:e5:bb:af:57:
                    d8:2e:aa:89:3f:c5:7e:49:dd:8e:fc:5c:ff:2b:84:
                    bc:1d:c6:29:02:fb:a5:93:52:ed:87:58:93:86:b4:
                    3a:24:55:89:c8:9d:ac:8d:6d:bb:6b:b5:29:ed:05:
                    c0:71:e3:e7:92:6a:a7:8f:80:5c:4b:04:bb:de:3d:
                    ab:9c:98:cd:74:c9:78:de:95:99:3f:00:4c:76:6b:
                    f3:14:8a:c6:db:00:8c:1f:e3:b5:03:7a:00:43:e7:
                    08:aa:bb:36:ee:36:1a:ec:7d:49:84:b5:3b:94:bc:
                    27:e7:85:b7:bb:1b:d4:e8:8e:ee:94:d1:21:13:c1:
                    b2:cb:49:88:1b:05:7f:34:9d:5a:be:9b:a9:e0:2b:
                    1d:fc:0f:2b:24:59:62:43:a7:d8:4f:ad:76:33:4c:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/lYs0b7AxqD2i9D92H6AgQtUj9Q0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.0.0/22
                IPv6:
                  2403:ad40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:d0:40:9e:3a:83:32:ce:10:5a:c3:b0:e6:4f:07:32:05:
         d4:73:f7:f6:24:be:57:5d:ac:b7:a1:c6:27:c4:9a:e9:77:09:
         f8:e2:c7:01:96:4b:62:6b:d7:dd:fd:c5:51:20:b1:ba:fa:fa:
         b8:f1:e1:46:45:a0:ba:bf:48:71:86:18:19:43:79:25:e6:9b:
         e1:32:94:2e:aa:82:ca:d6:0c:1e:96:18:eb:94:b8:56:fb:7c:
         b1:57:78:8a:43:cd:f1:2f:72:0b:16:01:59:92:dd:85:92:10:
         f3:30:09:1b:84:e2:f9:18:6c:0e:e8:70:f3:27:b9:15:71:e9:
         a8:4e:0f:a4:10:b0:6b:c6:7f:1e:f2:82:3e:10:04:d9:47:ba:
         c9:b9:31:c3:d4:2a:ac:96:83:af:4f:8c:63:bf:54:4e:84:dc:
         d1:c9:d4:1a:11:35:0b:de:90:9e:83:67:8d:25:cb:d9:da:61:
         dc:79:24:58:cf:70:af:29:09:dc:50:86:3f:b4:bc:b7:77:1c:
         49:97:9b:4f:76:88:c6:09:b7:0f:f6:70:d8:43:ad:c6:23:be:
         e9:10:e3:85:51:34:60:b7:09:c8:02:f0:23:f7:9b:90:8c:30:
         e7:83:be:dc:c1:5b:1a:4a:85:9d:1c:e4:dd:3b:38:02:a3:bf:
         4e:0a:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----