Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0SSAw3OkqF1efXJZMUQ137NEBEA.cer
File:                     0SSAw3OkqF1efXJZMUQ137NEBEA.cer (raw, json)
Hash identifier:          9LuHoylXb2RDxbHQzEw6aSKHjJc4lX9s0NPskqH3fMQ=
Subject key identifier:   D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:04 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 18043
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13463 (0x3497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:04 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D12480C373A4A85D5E7D7259314435DFB3440440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:97:33:72:99:25:93:68:76:6c:82:8b:5e:
                    33:b4:e5:e0:df:39:56:c1:24:d7:26:3d:02:51:c1:
                    e7:af:b2:e3:3a:5d:80:71:26:85:e1:8f:0e:a6:9f:
                    40:b5:d2:c0:da:b2:fe:c5:8f:b3:80:3b:51:71:d1:
                    4b:1d:a1:c6:6d:31:77:65:55:d2:81:cc:2b:59:a6:
                    7b:34:7f:af:56:5e:fb:15:f3:2f:38:ba:b1:24:d7:
                    9e:e4:d3:cf:f7:60:2b:31:9e:2c:be:0c:c1:43:71:
                    e2:73:73:6d:da:85:f9:59:3b:42:a0:92:c1:76:ed:
                    33:a6:0c:23:78:a4:d0:5a:a6:de:38:26:83:3a:f3:
                    00:3b:10:cd:d9:2a:6e:f5:66:ea:a8:61:60:1e:44:
                    14:46:c6:2f:c9:2b:29:79:66:27:38:83:87:45:67:
                    f8:89:2b:dc:53:b6:f9:45:fe:02:7b:1b:c0:f3:1e:
                    89:dd:76:18:fa:79:37:7a:4d:27:02:df:3f:2b:72:
                    37:27:7e:ad:cb:94:7f:b6:fa:65:89:cc:1c:2d:d8:
                    66:99:54:6c:8f:ad:4d:85:80:ef:34:0a:62:20:ca:
                    9a:c7:a9:41:e5:9a:ae:db:e4:26:0e:46:00:27:a7:
                    34:18:27:17:4a:56:a6:f6:fe:3e:84:0e:93:1e:b9:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:80:C3:73:A4:A8:5D:5E:7D:72:59:31:44:35:DF:B3:44:04:40
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GETOP/0SSAw3OkqF1efXJZMUQ137NEBEA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18043

    Signature Algorithm: sha256WithRSAEncryption
         8c:45:3c:52:ed:2f:8a:84:84:93:0b:07:34:dd:4b:fe:b2:3d:
         e4:a0:39:a4:6b:fe:2c:40:92:d3:2a:b4:58:d2:62:fa:d1:2a:
         41:a0:51:be:4e:66:ba:b0:78:a6:7b:c8:08:59:cd:b3:31:af:
         4e:12:cc:19:2a:bf:b5:bd:e0:e6:eb:f8:f5:6d:51:88:87:9c:
         a0:3e:64:81:38:2f:7a:9e:d0:45:10:d2:41:bf:f6:f0:16:b8:
         ba:c0:33:ba:b1:1f:16:f9:d7:f3:ec:d5:26:3a:cc:eb:3a:bf:
         9e:27:b2:40:1c:17:ae:76:2d:01:2f:55:2d:83:e3:a8:05:a2:
         0c:c1:97:c5:a2:31:be:c3:11:a4:75:6a:ba:aa:9f:7e:ac:e6:
         8b:9a:04:23:c7:ac:63:50:3e:4d:87:02:92:df:10:2b:0f:d3:
         9b:1a:ed:d9:22:0d:78:35:5a:1a:8d:b5:c4:9e:38:3b:b4:4e:
         8b:86:10:55:30:33:15:33:36:de:c6:59:21:98:cd:c2:ed:6a:
         6f:63:33:3c:15:e7:3b:77:ca:49:be:2b:4f:e3:24:d2:d0:24:
         a9:98:07:10:e9:ac:7e:65:4f:00:cc:42:39:56:65:01:fa:71:
         09:e1:97:96:ad:05:2e:b3:15:a3:60:41:29:d9:9f:04:9b:86:
         9b:ee:13:87
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkwNFoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoRDEyNDgwQzM3M0E0QTg1RDVFN0Q3MjU5MzE0NDM1REZCMzQ0MDQ0
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMH3lzNymSWTaHZsgote
M7Tl4N85VsEk1yY9AlHB56+y4zpdgHEmheGPDqafQLXSwNqy/sWPs4A7UXHRSx2h
xm0xd2VV0oHMK1mmezR/r1Ze+xXzLzi6sSTXnuTTz/dgKzGeLL4MwUNx4nNzbdqF
+Vk7QqCSwXbtM6YMI3ik0Fqm3jgmgzrzADsQzdkqbvVm6qhhYB5EFEbGL8krKXlm
JziDh0Vn+Ikr3FO2+UX+AnsbwPMeid12GPp5N3pNJwLfPytyNyd+rcuUf7b6ZYnM
HC3YZplUbI+tTYWA7zQKYiDKmsepQeWartvkJg5GACenNBgnF0pWpvb+PoQOkx65
fjMCAwEAAaOCAkgwggJEMB0GA1UdDgQWBBTRJIDDc6SoXV59clkxRDXfs0QEQDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdQGCCsGAQUFBwELBIHHMIHEMDcGCCsGAQUFBzAF
hityc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0VUT1AvMFYG
CCsGAQUFBzAKhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
R0VUT1AvMFNTQXczT2txRjFlZlhKWk1VUTEzN05FQkVBLm1mdDAxBggrBgEFBQcw
DYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJGezANBgkqhkiG9w0BAQsFAAOCAQEAjEU8Uu0vioSE
kwsHNN1L/rI95KA5pGv+LECS0yq0WNJi+tEqQaBRvk5murB4pnvICFnNszGvThLM
GSq/tb3g5uv49W1RiIecoD5kgTgvep7QRRDSQb/28Ba4usAzurEfFvnX8+zVJjrM
6zq/nieyQBwXrnYtAS9VLYPjqAWiDMGXxaIxvsMRpHVquqqffqzmi5oEI8esY1A+
TYcCkt8QKw/Tmxrt2SINeDVaGo21xJ44O7ROi4YQVTAzFTM23sZZIZjNwu1qb2Mz
PBXnO3fKSb4rT+Mk0tAkqZgHEOmsfmVPAMxCOVZlAfpxCeGXlq0FLrMVo2BBKdmf
BJuGm+4Thw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:44:06 2025 by rpki-client