Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/15fSDMeVLNaLOVWqNsQBsbNOJzM.cer
File:                     15fSDMeVLNaLOVWqNsQBsbNOJzM.cer (raw, json)
Hash identifier:          SIjz2hLhpjIwLt/ysDxrHSDOq8XOzQzeMTOBisp/ad4=
Subject key identifier:   D7:97:D2:0C:C7:95:2C:D6:8B:39:55:AA:36:C4:01:B1:B3:4E:27:33
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       35BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/15fSDMeVLNaLOVWqNsQBsbNOJzM.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:16 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 18410
                          IP: 202.8.14.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13757 (0x35bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:16 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D797D20CC7952CD68B3955AA36C401B1B34E2733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f1:ae:30:a2:33:31:71:b3:cb:0a:fd:0f:3f:
                    85:17:eb:d7:35:f0:b6:0a:1f:86:07:74:9b:fd:4a:
                    1c:0a:bf:a0:ba:fa:a7:0e:79:3b:3c:4d:06:3f:81:
                    92:63:56:49:38:af:83:29:85:fb:19:61:ef:55:e3:
                    ce:1e:23:4c:9d:ee:6e:ec:15:44:9c:34:3b:c6:73:
                    2f:cb:6d:65:17:0b:1e:08:b8:62:a0:8d:ff:d4:8e:
                    38:ca:37:41:5c:90:24:c3:d9:4b:7a:78:50:8f:bf:
                    cb:2a:36:46:af:79:77:8b:3a:93:a2:92:b4:88:d1:
                    9b:51:fc:e5:b8:6d:62:48:88:ac:db:0e:6d:a8:9e:
                    46:96:c6:44:bf:32:95:51:49:3c:2b:0a:7b:01:ba:
                    6e:a8:94:38:b6:45:bd:e2:3a:24:1b:28:e5:6a:68:
                    09:01:38:47:07:df:03:4a:df:71:74:b2:b1:80:f9:
                    8e:e3:f5:20:bd:67:05:c0:4b:36:e0:94:d0:f0:1b:
                    9b:f0:cb:5a:ba:e0:93:c2:8d:89:b3:3f:40:10:83:
                    26:2a:62:1a:21:de:05:b4:2c:0c:15:45:6d:fc:70:
                    8d:21:b1:24:92:0e:79:cf:de:a1:5e:c4:0d:53:16:
                    4c:f9:a9:55:4d:e2:b8:0d:11:a5:0b:bf:23:53:c1:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:97:D2:0C:C7:95:2C:D6:8B:39:55:AA:36:C4:01:B1:B3:4E:27:33
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/15fSDMeVLNaLOVWqNsQBsbNOJzM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18410

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:25:93:3c:91:6f:47:f7:3e:47:a9:12:8c:e8:56:a0:e1:30:
         d5:fc:94:e0:ce:8d:74:bc:22:fe:95:0e:df:d1:34:9a:e2:01:
         68:f3:d1:eb:fe:5d:9e:ef:7f:8e:8c:56:d3:e1:7a:e9:a7:70:
         38:9b:97:bc:95:7f:9b:35:b6:3e:e0:4d:57:f8:6a:0e:68:e4:
         53:14:c2:8e:6b:f5:1b:a2:83:63:f1:f6:b5:ff:e8:f0:c1:32:
         51:d9:82:98:25:51:a2:9b:78:46:97:ab:2b:bb:dc:bb:05:3f:
         26:2d:ad:87:7a:ee:69:cc:bc:9d:58:b1:af:df:d5:9d:1a:80:
         f3:59:9b:ee:08:07:03:a1:ab:cc:a9:8f:93:59:71:55:3e:5a:
         fc:c9:46:c4:21:7e:d3:2e:b7:c1:40:d8:af:a8:50:77:de:53:
         d4:a2:ba:d6:27:22:32:f8:54:00:2e:68:7b:76:33:93:3b:e8:
         30:10:30:73:2a:af:81:7d:9c:bc:e9:5c:45:7b:d7:71:55:97:
         94:6b:78:91:82:5d:11:90:1b:57:08:e7:0a:47:b4:5f:2f:90:
         06:84:21:2b:bc:8a:54:3e:d4:8c:ef:89:5f:fa:5a:80:c0:4b:
         28:e8:0a:ab:c1:41:e0:ac:aa:0b:94:cd:a0:82:15:40:39:7d:
         da:0c:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:42:49 2025 by rpki-client