Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
File:                     8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer (raw, json)
Hash identifier:          peE3rmm5V/HefJ0Ds2Hi4ZhCDvo5+pJ8CbaPspqIk4s=
Subject key identifier:   F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2D3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:13 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.124.40.0/22
                          IP: 2403:d940::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11581 (0x2d3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:13 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:98:ce:d4:62:12:08:1a:94:24:f8:f6:07:
                    ae:19:ca:17:b3:6b:52:7d:9d:c4:3a:5e:0c:70:0f:
                    10:14:10:b5:7d:5b:42:32:a4:6c:f0:4a:46:61:8d:
                    f8:0b:04:67:ea:37:04:f0:67:e1:c2:e1:5d:bf:4f:
                    7a:73:1a:c3:bd:bf:32:df:a5:9c:9b:cd:1d:53:72:
                    22:ac:3f:8a:71:b2:58:be:43:a9:db:4d:a8:8f:69:
                    9e:07:b8:34:9e:28:f2:82:84:b8:e1:b9:07:b1:9e:
                    87:e0:5f:17:42:af:5e:ea:41:01:df:15:e3:c5:9f:
                    09:9e:c6:ab:44:28:b7:a8:9e:ab:44:7c:ac:e4:21:
                    19:f8:b4:0c:92:49:2e:f1:57:be:93:bb:d4:e1:c0:
                    17:fc:91:34:de:bb:04:70:df:33:ad:59:71:46:0f:
                    c8:22:d5:9d:78:a2:a8:f7:61:25:a3:cd:41:b9:9a:
                    2a:d7:4d:d2:3c:ce:c8:dc:66:0b:3c:1b:6b:75:36:
                    f1:85:26:19:b3:10:d6:47:9b:3f:74:b4:ee:5a:8e:
                    3d:f0:5d:6c:3d:a5:fd:90:a6:e2:fc:dd:bc:55:bd:
                    39:88:6b:85:dc:13:fd:30:05:37:e5:ee:6a:65:84:
                    f9:7a:45:c9:a7:9b:0f:08:e9:3d:db:7f:f6:ad:fa:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.40.0/22
                IPv6:
                  2403:d940::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:fb:08:9c:94:7b:18:50:96:4f:b7:a6:d5:c4:93:83:47:
         5a:e2:0b:0e:b4:a1:cb:8b:15:2f:1d:83:f8:9a:dd:d7:b1:ac:
         8f:98:0f:dd:6b:c7:5c:1e:f8:e8:b9:c0:10:7e:1e:f7:ba:75:
         b2:21:7d:82:96:2d:54:56:43:35:69:ed:20:63:2e:eb:16:25:
         35:b0:82:8b:83:fd:92:20:f9:6a:2b:6c:9f:14:88:63:08:c5:
         82:52:5b:cb:99:a6:5a:c0:13:d0:f4:de:b1:c2:2b:d2:a9:ef:
         c5:7a:ee:86:39:e1:d3:9f:d9:ae:78:a1:28:f6:c2:4a:01:e6:
         bf:bd:5e:6f:2b:66:a2:37:41:02:6d:33:40:b4:05:d8:6c:81:
         0f:3f:25:93:94:fe:13:dd:cf:59:9d:24:35:bf:3e:5a:fd:6b:
         9f:40:64:ec:b8:a0:ed:37:3e:da:dc:42:d6:9d:88:72:cc:74:
         41:7a:4a:4b:dd:19:1c:3a:b3:ae:84:2d:8c:36:00:19:ec:17:
         cc:42:75:c7:d0:df:01:1f:82:69:2a:08:cb:4a:58:90:f7:a2:
         42:a0:06:67:47:b9:9e:aa:df:2f:c6:8f:25:ec:cd:ea:90:95:
         29:07:2b:da:63:2f:d8:9e:57:83:db:12:e0:6a:81:2b:0f:f4:
         74:ab:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----