Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
File:                     nsvxcPf30ikOau05yo0jj2YHK3o.cer (raw, json)
Hash identifier:          0OwB/xabOyOfqI+sLFtj1SEP311GMRo7VXMR22VXmu0=
Subject key identifier:   9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       329C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 31 Dec 2024 04:33:09 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 2407:4700::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12956 (0x329c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Dec 31 04:33:09 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:b7:a9:77:f2:c6:0e:8f:cf:08:90:94:5b:
                    11:66:f5:08:26:a2:75:97:b3:65:eb:81:ba:77:46:
                    c2:27:b4:f9:a7:29:04:14:83:8b:89:e3:c4:18:b8:
                    d6:a4:72:ca:43:e7:8f:64:9e:a4:ae:24:e0:18:91:
                    f3:0b:0f:54:dd:92:d0:37:97:03:98:4d:c7:ac:aa:
                    18:b4:22:6f:f6:4f:95:68:69:14:1f:61:74:9b:a5:
                    35:d7:b2:42:17:25:ff:3c:cb:87:dc:a2:47:6a:13:
                    3b:39:cd:13:6e:fb:eb:26:c7:c7:86:eb:8d:4b:6e:
                    62:54:c6:df:b0:8c:f3:e4:73:31:b9:fe:5b:70:60:
                    c7:e0:4b:92:db:8d:1c:c0:7c:ff:f2:84:db:cc:35:
                    48:4c:74:98:ad:9b:69:97:91:36:aa:dc:d2:37:6b:
                    bf:c3:e6:79:57:49:ad:14:8f:15:06:17:63:53:81:
                    cb:b0:6f:47:6d:57:21:f9:2a:ce:08:c2:fb:94:6f:
                    03:1f:a5:72:0b:72:4e:c4:d6:a1:73:a4:86:a8:db:
                    14:44:28:b9:32:85:92:ff:f9:34:3b:32:f4:da:e8:
                    95:18:c3:34:69:22:6d:01:81:61:c3:2c:5b:f8:57:
                    e5:17:19:7a:11:fe:50:61:fb:ba:0c:8a:2a:dd:b9:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4700::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:e1:bd:04:46:02:d3:5b:ef:21:59:07:78:3c:c6:24:67:d3:
         c3:c4:46:2a:0e:4e:99:ef:dc:f3:19:cd:03:7b:63:21:42:96:
         13:e3:12:6d:3b:0b:ab:5c:e1:d1:07:ee:6c:c3:5b:32:8e:a9:
         1e:56:6c:f0:ea:e6:7b:82:a7:9f:ae:58:99:cf:44:51:cb:fb:
         f5:06:d1:cb:7e:72:39:3b:37:b6:fe:81:16:5c:79:75:66:0f:
         26:ba:4b:b0:51:d3:31:10:07:53:4e:06:de:81:c7:37:d5:c3:
         88:cf:1d:07:be:f9:0d:e5:d0:8e:9d:19:0e:a9:55:f1:a4:ed:
         c6:70:4c:2e:2c:8d:88:59:80:bb:00:c3:c0:ad:79:15:3c:f3:
         52:e2:67:1c:1e:5f:15:c9:ea:cf:f9:d1:c6:d8:10:25:56:98:
         d3:08:ff:18:b7:29:ee:70:c1:fe:3c:6f:d0:e3:2b:93:5b:d3:
         ea:fa:1b:5f:a9:28:5e:06:5f:e8:c9:38:d8:17:d6:1c:d5:13:
         63:bf:63:b0:f4:ae:c9:f3:04:dc:ac:ad:b1:2c:4a:5d:bc:63:
         5a:2f:3e:9e:d8:9d:1d:99:64:b3:28:d1:55:9c:7d:03:ff:ea:
         76:7b:dd:5d:12:b1:ab:fc:06:97:a6:09:b8:0e:9a:e4:b8:53:
         bf:d4:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:33:54 2025 by rpki-client