Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer
File:                     bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer (raw, json)
Hash identifier:          CT9enledp5JdEyY9EWrKu2K/5uYeMfeEcPe4S7oUgfM=
Subject key identifier:   6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3331
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 13 Jan 2025 06:35:47 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.127.216.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13105 (0x3331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Jan 13 06:35:47 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6D1243152906B6566A2B3E19CC468E46DE709D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:17:e6:2e:7f:a1:86:0d:42:5c:84:25:cc:
                    d0:c0:61:c9:45:8d:15:34:a7:a7:79:9d:67:c4:7e:
                    35:bc:0a:5f:31:d1:27:c6:48:0f:23:4e:0a:3c:11:
                    01:38:d0:83:57:ec:81:d5:df:4e:fb:b5:f0:7f:0e:
                    2d:69:d5:fe:9a:e2:23:2d:f0:82:9f:12:7d:28:2e:
                    63:22:19:49:2c:31:a2:c9:fd:4c:66:0b:0b:d7:01:
                    f2:0e:1d:29:e1:47:c4:4e:e9:3f:9e:5b:a8:14:64:
                    49:07:d9:a0:d6:61:5a:77:09:8a:64:ba:b9:51:79:
                    b3:25:bc:b5:73:13:91:c1:31:fa:bc:e0:26:e9:aa:
                    d6:93:22:ad:03:c9:1a:48:fa:94:65:bf:37:95:af:
                    52:0f:3c:90:f7:51:27:d2:2b:6a:45:63:cc:cb:57:
                    8b:ee:10:8b:8b:ed:1f:3b:36:80:4c:3e:58:21:e5:
                    c4:38:48:df:d0:7f:4a:b1:43:d3:b8:b3:c6:e9:c2:
                    db:1d:dc:ca:b2:2d:73:6e:d1:65:e2:96:65:6b:d9:
                    7d:76:2e:d2:6f:7b:fe:b0:3c:09:3c:7d:4a:88:fa:
                    fb:61:14:d6:b9:7c:aa:9d:42:de:45:98:0f:c7:ce:
                    23:0d:9f:37:d7:93:51:71:08:52:32:05:9e:af:64:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:eb:8f:c8:7a:56:51:20:37:05:38:b0:af:ef:39:7a:f7:
         fa:0d:a1:c3:81:6f:3f:cb:6e:63:84:22:4e:eb:53:c4:7d:13:
         8d:3c:be:74:d7:69:a3:d5:fb:93:29:de:b4:37:cb:aa:11:97:
         4c:f5:ad:87:8b:13:6b:ef:b6:cf:af:ef:57:d6:b4:b4:fc:0a:
         db:3d:8f:78:db:8a:7e:de:40:a7:e6:bf:8c:17:24:fd:24:00:
         3c:36:80:2a:37:ee:f5:a1:3e:e5:b1:37:c0:09:a8:bc:9a:3f:
         36:5c:9b:a1:99:dd:92:aa:5d:f3:a1:b6:41:0a:47:d9:c6:69:
         85:f6:68:b0:bf:77:6e:45:11:bc:75:e9:5f:1b:58:08:47:df:
         fc:f9:f8:b6:60:94:81:e1:ec:97:cd:9b:d9:bc:3f:6c:c1:e6:
         b4:1b:67:62:04:c4:75:9b:e8:14:33:48:96:4a:28:17:d5:d3:
         c5:02:c0:f0:67:46:68:7d:2c:4d:67:c9:c3:44:ed:cf:2d:b3:
         df:2b:61:8c:9a:f7:08:96:c9:8e:54:49:9d:ab:a1:9f:b5:dc:
         87:bf:14:c6:be:f0:a5:f0:e5:15:a6:4b:84:a0:f9:d6:55:82:
         1b:4f:50:8f:6b:f8:a7:ed:dc:34:f0:c2:7a:e2:6f:25:65:74:
         f5:a6:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:26 2025 by rpki-client