Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/vnu1GWRO6R4Oj5UnUZoG8jNWIMs.cer
File:                     vnu1GWRO6R4Oj5UnUZoG8jNWIMs.cer (raw, json)
Hash identifier:          /pkle2uOqVyQFEDayy+lVXfPS128fzGnFakEfL/M5fg=
Subject key identifier:   BE:7B:B5:19:64:4E:E9:1E:0E:8F:95:27:51:9A:06:F2:33:56:20:CB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2329
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CHENSHENG/vnu1GWRO6R4Oj5UnUZoG8jNWIMs.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CHENSHENG/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Thu 25 Aug 2022 06:46:55 +0000
Certificate not after:    Thu 29 Sep 2022 02:36:22 +0000
Subordinate resources:    AS: 131653

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9001 (0x2329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 25 06:46:55 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BE7BB519644EE91E0E8F9527519A06F2335620CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:a2:4a:e8:9e:fa:88:ab:f1:2a:72:6a:95:
                    25:01:33:de:dd:76:71:d3:cf:ec:15:c5:a6:e6:99:
                    41:4e:f8:d7:3b:27:e2:ab:12:5e:f1:c3:f0:bc:04:
                    32:71:49:b6:f1:45:bd:b6:9f:eb:f4:64:6e:e5:32:
                    ce:de:bc:c4:8d:23:c6:66:77:e6:6d:35:de:91:20:
                    5e:6e:49:57:da:b0:1f:dc:1b:a3:53:65:6c:e8:e7:
                    d0:d5:33:62:90:01:5f:46:98:32:d5:b7:38:d1:44:
                    ec:8d:9b:48:24:7d:82:cb:2e:fe:c5:95:3f:dd:a3:
                    6f:2b:b2:c6:fc:51:56:c6:84:2a:05:fe:06:df:2d:
                    98:99:77:21:2c:ec:64:73:51:bd:fd:29:84:bc:91:
                    fc:4a:02:cf:d7:6d:b8:cf:ea:34:6e:45:8b:2b:25:
                    d6:48:4e:8e:29:c2:58:4c:81:4d:04:95:9c:44:46:
                    ae:18:cf:cb:b5:c5:a8:7e:7b:18:32:93:97:9d:1a:
                    20:9a:f8:42:80:26:e1:0e:26:f9:70:ba:6e:58:d5:
                    bb:83:31:5a:a0:13:e3:cd:1f:d1:d8:3a:a7:33:eb:
                    fe:6f:a2:d0:bf:f1:6f:2a:50:ac:90:48:e1:f1:02:
                    5f:aa:54:2b:46:f9:ad:29:86:17:b4:e0:65:6a:18:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7B:B5:19:64:4E:E9:1E:0E:8F:95:27:51:9A:06:F2:33:56:20:CB
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHENSHENG/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHENSHENG/vnu1GWRO6R4Oj5UnUZoG8jNWIMs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131653

    Signature Algorithm: sha256WithRSAEncryption
         6f:69:10:20:fc:6a:60:d6:ac:ee:a1:4f:f5:53:b5:06:ce:47:
         38:0a:10:f8:35:94:72:db:9c:7d:4f:14:48:34:01:4b:67:a2:
         13:98:48:72:77:e9:67:05:8a:00:c7:7b:cb:c3:67:98:d9:fa:
         3b:30:26:4c:4e:b1:36:70:e5:a4:38:b4:c5:7a:03:2b:5d:74:
         fa:95:e1:9f:c2:d9:be:ae:04:9c:ec:7a:e1:3e:69:22:41:1f:
         e0:e4:4d:55:4d:e1:2e:5c:ce:16:22:2b:8f:9b:b0:25:49:3d:
         8a:2c:27:be:0e:a6:51:d9:39:24:f0:2f:53:86:09:0f:38:7a:
         6a:2b:68:12:17:c7:67:b3:ac:53:f3:bb:9e:07:07:9a:8e:e2:
         a7:e9:d6:15:e3:4f:d4:49:5d:20:f4:82:57:a4:44:3c:d5:01:
         46:51:24:bd:03:d9:57:50:5e:74:a3:d8:f0:3f:7d:65:69:76:
         07:84:f5:99:a2:7b:5f:08:d1:21:0f:dc:02:ad:dd:ab:04:b8:
         37:45:1e:74:02:f4:59:af:eb:9f:e3:c4:65:cd:2f:80:b3:60:
         e4:b3:ae:4f:be:6d:7a:f8:cd:c6:d4:19:2a:bc:4e:03:4a:04:
         48:3f:26:60:f6:f9:f4:00:ea:bf:30:b3:ae:4b:f3:a1:ff:9e:
         e3:f5:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----