Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer
File:                     o55PwFcEngVg5h05adE6Xi8RrNI.cer (raw, json)
Hash identifier:          9Tew42kuCWQ6nNqrSxwyfsOEAsH+BXRDkSf+oQT7plA=
Subject key identifier:   A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       332B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 13 Jan 2025 06:35:47 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.127.218.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13099 (0x332b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Jan 13 06:35:47 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9c:f4:60:30:47:a4:a8:33:e5:ae:5c:19:82:
                    2b:48:fd:8f:68:7e:51:fc:6a:72:8e:d0:cf:54:72:
                    01:c6:98:35:ce:dd:f3:f3:95:e9:ef:d3:c6:3a:22:
                    c0:ce:f7:b2:ce:60:42:0c:a3:03:2c:95:ed:3e:15:
                    2f:61:ea:c5:34:46:cb:a2:39:6a:58:5e:ce:c8:1f:
                    6a:01:ef:e1:f2:67:e0:1e:10:ab:47:3b:51:66:3c:
                    54:1d:0f:0e:d5:16:be:fb:1b:78:3d:80:0b:1d:f6:
                    0b:10:4a:cf:4a:ae:b7:4b:d5:d1:d9:70:05:56:16:
                    a4:5a:4f:48:01:a3:17:f2:b8:3b:ac:7f:04:68:9b:
                    42:09:66:e2:15:1a:17:e0:32:cb:1f:1f:8c:bb:97:
                    f1:9f:09:6f:18:c1:11:89:8c:21:d2:10:58:f5:24:
                    5f:b3:68:41:c5:3c:d2:d8:25:d2:37:8c:4f:4c:b8:
                    04:95:64:6d:87:fa:18:8a:f8:91:56:ba:95:c5:57:
                    41:39:d6:78:ab:56:30:67:49:24:9d:e2:cc:ac:e4:
                    7a:04:70:9b:98:f8:08:4c:99:09:6c:ee:1a:89:0e:
                    9f:4d:89:3e:57:f4:4b:11:db:58:ef:c6:35:92:09:
                    1a:80:3b:30:f9:5c:86:e6:3a:15:f2:c7:e9:45:15:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:cd:59:50:f3:6b:02:30:40:60:04:1f:9d:ab:5e:7d:3d:
         13:17:3c:29:66:4f:49:da:51:5e:69:5b:07:ac:0f:8e:25:f7:
         27:9c:e8:43:0c:82:f7:9d:36:5c:9b:77:c2:f1:60:c1:9c:fc:
         d7:b8:b9:59:e2:c6:c7:af:f5:2e:37:4c:89:c1:ae:5e:51:09:
         9d:ef:83:00:0f:4b:d9:0a:90:de:e4:e4:8e:79:97:0d:bd:f1:
         54:ea:f2:35:d8:e5:1a:08:90:67:9e:e9:70:de:03:27:7f:22:
         88:fa:b8:22:1d:84:60:98:f1:39:d1:45:b7:88:36:d0:ec:12:
         e0:8b:13:19:a9:29:d0:be:c3:91:bd:b5:5b:f2:8d:9c:74:6f:
         8f:6e:f1:f2:16:2d:34:f9:74:23:ba:25:1c:be:1e:2a:f9:19:
         86:9a:09:26:6f:e0:3f:ee:63:d3:c3:96:df:5e:b5:0b:c6:8d:
         59:7c:64:7a:15:4c:8e:11:1e:f9:2a:18:8c:59:d5:7f:b3:31:
         37:4f:e6:e7:e6:eb:b4:0d:27:8d:a2:dc:bc:3d:c2:8d:db:0a:
         ca:98:4b:e8:4d:86:c2:99:78:e6:58:c1:b8:c0:3c:92:38:53:
         3f:57:64:47:ca:64:4a:b4:32:e6:d9:1a:19:20:1d:7e:60:a7:
         0a:70:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:43 2025 by rpki-client