Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
File:                     n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer (raw, json)
Hash identifier:          qjFoev92PkglkT9wIosm1vxHpP0kBdOKmFL5Ke/NbU8=
Subject key identifier:   9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       19B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:33 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    AS: 38851
                          IP: 43.227.24.0/22
                          IP: 103.46.188.0/22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6582 (0x19b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:8e:4a:96:9e:c4:07:60:5f:76:9c:0f:1b:
                    51:9e:cd:5c:60:54:09:5d:0c:a5:f5:b4:49:44:02:
                    38:7f:55:71:1e:c3:0b:87:96:c1:c1:71:e2:ea:76:
                    f9:d7:86:fc:43:23:a8:9d:8f:f7:04:23:16:8d:17:
                    e7:33:da:7b:fb:89:63:c8:56:bd:19:2c:e9:96:8b:
                    1a:92:33:53:c2:72:6f:15:0a:38:d9:13:7a:13:90:
                    34:c7:d9:20:37:f4:89:30:18:b3:a6:d4:b8:21:57:
                    fb:03:52:4e:54:e8:bb:7f:4e:fc:b1:0b:24:f9:62:
                    58:84:95:bd:f3:10:2a:4e:ea:59:4f:ad:64:0a:d5:
                    b9:8e:ad:9f:ab:58:53:19:6a:3d:ef:da:ed:94:66:
                    00:0c:90:7c:0a:28:16:79:bc:af:28:b7:83:7b:d4:
                    91:03:cf:bd:e9:53:22:c3:80:da:d1:9a:d1:f3:8e:
                    ea:ac:10:d9:77:4e:c1:39:51:d3:86:e5:67:67:97:
                    20:61:33:02:94:c5:59:f0:a7:4b:58:ef:8c:98:c3:
                    5a:80:65:7b:4e:d6:d8:15:0d:b8:41:3b:7a:d8:68:
                    66:4e:99:a3:98:72:48:03:d6:da:c7:18:6e:22:cc:
                    d6:68:8f:dd:5c:f6:11:17:7c:6c:04:7a:62:8f:86:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38851

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.24.0/22
                  103.46.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:33:7e:d2:e8:d2:4a:5c:89:aa:08:37:28:ac:e4:29:27:
         48:5b:03:01:ee:db:ec:15:95:44:1d:5a:7b:60:1b:92:14:f9:
         14:83:23:9b:ee:13:e6:d5:0b:69:0b:b4:a6:63:e0:d3:00:3f:
         94:bc:8c:9e:38:48:b7:a2:1b:17:5e:b5:1c:95:fb:08:49:b1:
         f2:e6:1a:d5:8e:7f:5f:60:5a:6c:e8:4e:8a:5b:6c:04:ef:93:
         95:7e:1c:34:42:21:0a:69:91:0e:76:57:42:b3:db:cd:8d:f7:
         fe:89:68:98:6b:e2:00:61:8a:b3:30:56:de:d5:2b:7a:33:c6:
         96:6c:ab:eb:19:19:cc:ec:57:74:46:75:a3:e4:b2:00:a5:e1:
         c7:cb:a2:f6:49:a4:db:e7:cc:ef:d3:f2:6c:d2:95:d0:10:59:
         65:22:ab:bc:b6:bc:63:bc:7a:b5:f3:ee:8f:f9:ce:ea:ae:ea:
         35:e7:5f:0d:22:a6:fd:ee:51:67:07:38:3f:72:80:60:38:a7:
         05:97:ee:ed:75:92:5d:1a:e9:22:50:a4:07:55:66:9b:c3:12:
         d8:0d:e0:6c:d9:f8:71:d2:50:0f:0a:78:04:7e:33:77:b9:6c:
         3d:ee:51:95:32:36:77:fd:d0:48:ad:01:6b:42:f0:55:dc:85:
         52:0c:44:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-fra.rpki-client.org