Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/uU530OicbkiYh7m6MhYTTB-VamQ.cer
File:                     uU530OicbkiYh7m6MhYTTB-VamQ.cer (raw, json)
Hash identifier:          vw8SAXKa80Z0+f5223vENH8WEt3mcX1XSeQrEaJr85s=
Subject key identifier:   B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       32B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 03 Jan 2025 05:03:41 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 38850
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12982 (0x32b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Jan  3 05:03:41 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B94E77D0E89C6E489887B9BA3216134C1F956A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:64:2c:72:d3:7f:ea:a9:a1:76:64:82:2e:
                    0b:6f:f1:25:c8:2d:7d:a9:ca:5f:6e:f2:e2:e7:9a:
                    78:bf:63:ba:bb:a9:df:c6:dc:82:73:2e:61:e4:45:
                    e9:89:33:14:87:a5:fa:d8:69:ab:41:90:72:d2:61:
                    d6:77:d6:83:9f:e4:68:ef:11:7c:68:62:2b:0f:91:
                    68:66:d3:df:d8:bb:0d:81:3a:cc:af:21:23:67:0f:
                    76:0b:32:63:86:76:b2:d3:0d:d4:20:79:fc:06:2a:
                    71:08:13:38:dd:b2:12:2d:88:88:0f:85:7d:5d:23:
                    4d:a5:89:1d:e2:42:d1:7c:57:cb:a8:de:50:3b:bb:
                    c7:14:4f:d2:50:97:63:f8:4a:2b:18:27:3f:b6:58:
                    86:bf:cb:45:bf:74:63:7d:08:56:bc:27:c6:da:40:
                    b2:34:7e:ac:9d:6f:a6:cb:16:a9:3e:04:af:06:21:
                    04:b3:48:89:d4:f9:03:23:11:4a:b0:47:9d:4a:03:
                    f6:7f:82:3a:7b:be:02:a2:b4:5a:d2:fa:47:98:cb:
                    3d:56:0b:59:33:ac:b6:85:b4:b6:3e:ad:a7:68:87:
                    dc:d7:4c:d6:7d:51:3c:ff:0e:ba:74:81:83:55:f1:
                    36:b0:e6:59:0c:f6:e5:ce:4b:5f:c4:03:fd:cb:72:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38850

    Signature Algorithm: sha256WithRSAEncryption
         06:94:54:be:6d:54:18:d1:3b:ae:82:5c:3f:86:49:13:c3:05:
         e0:bf:d0:ac:b9:c9:6e:a1:07:a7:f4:38:b2:c3:56:da:3e:bc:
         ac:f1:43:b9:e3:39:4c:16:de:e1:e3:f7:21:f9:da:51:11:9a:
         b2:b1:8d:a1:65:48:45:a5:f2:b0:28:59:fe:81:5a:55:7a:49:
         d4:14:fa:28:58:55:fe:11:1c:75:6d:74:0c:3c:fe:d3:1b:42:
         11:1b:66:4e:ce:b0:88:71:e0:26:dd:b5:ab:c6:75:53:bf:56:
         f7:39:80:08:40:7f:e9:e5:03:0d:7c:01:40:74:43:86:4c:42:
         ba:78:5f:f0:81:23:d8:d1:04:3e:fc:cd:d0:fa:24:9a:ca:8a:
         ed:24:02:27:47:d6:c6:91:a9:7f:ad:45:5d:80:82:9f:58:a2:
         61:74:ab:8b:d4:83:a2:99:49:bc:09:45:58:4a:f0:44:00:48:
         4a:d5:81:d9:1f:5d:ac:1a:63:1d:02:d3:54:85:ff:8e:8a:39:
         c9:48:e1:e7:f8:25:9b:19:08:cb:95:9b:12:d2:dc:ac:6d:92:
         3a:12:2a:04:63:73:04:d6:96:22:97:f7:41:9c:bd:30:b6:44:
         73:bf:09:48:51:da:ca:02:3c:bf:9a:8c:1c:c3:80:b7:5c:8b:
         7e:f2:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:36 2025 by rpki-client