Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
File:                     1PDdD0-4AQJdWG75mcXu4C18IFk.cer (raw, json)
Hash identifier:          YU9yr1TX8CibQMNxXEE9zYWuKBwLjGjH2y7hRTMkOF4=
Subject key identifier:   D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:09 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 131641
                          IP: 103.136.60.0/23
                          IP: 2404:8cc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13585 (0x3511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:09 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:99:2d:b4:78:6f:dd:30:6b:b5:4f:7c:aa:
                    70:99:33:79:e0:75:6a:22:ba:f7:ce:cd:15:ba:44:
                    a5:5b:37:b1:5c:36:fe:91:87:c6:4f:38:f0:dd:da:
                    e7:9d:d4:5c:7f:f9:a0:35:b1:93:d8:91:ea:f7:be:
                    0f:9f:06:bb:a0:6e:a9:bd:4d:5d:a3:88:1c:94:56:
                    64:e3:31:5c:5c:bd:e2:dd:aa:11:18:2d:f6:84:5c:
                    1b:a2:93:7f:c3:73:1f:fc:5e:7e:0a:99:df:ab:4b:
                    43:05:b0:0b:90:02:65:39:53:cc:11:e4:13:2d:88:
                    d2:78:6b:25:87:43:6d:40:7d:20:91:5b:91:7d:07:
                    ae:5e:95:11:a7:ac:20:c6:cd:b2:69:4c:6f:08:fd:
                    df:42:29:9d:62:7d:d6:26:fb:96:37:2a:e9:65:8d:
                    e0:42:35:53:93:51:a8:a2:5e:33:ab:43:e9:4a:03:
                    28:26:10:64:ff:e0:c2:82:27:11:5e:60:4e:6f:5e:
                    cf:36:56:57:6f:a9:5e:ac:9d:b4:19:05:cb:f7:7d:
                    11:df:ba:c1:85:a6:b2:ed:ac:f5:ae:85:cc:39:5d:
                    27:7c:fa:c3:fc:fa:bf:b0:3d:ef:51:f1:f1:31:1a:
                    3a:d3:62:99:87:79:9b:5f:20:6f:70:0d:b7:5c:1b:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131641

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/23
                IPv6:
                  2404:8cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:a6:87:96:1b:1b:6d:be:9a:46:8e:80:c9:aa:a9:da:6a:5a:
         7b:d9:74:28:5b:f5:c5:01:59:30:2b:22:b7:70:3b:ca:d8:1a:
         11:40:7c:14:54:3a:b1:75:e6:75:46:19:c8:24:77:57:88:e0:
         00:c7:ad:f0:90:72:5e:47:f6:b3:12:d3:cf:81:0b:b1:70:fe:
         dd:20:7c:af:43:29:1c:10:f8:69:18:b4:0a:09:af:e8:e8:6c:
         4e:5b:49:15:bb:54:6f:da:59:75:08:59:8d:83:f8:b4:be:03:
         87:70:6a:39:67:fa:c4:c1:c9:5a:f3:39:ec:2e:5d:06:4f:1e:
         28:d6:10:0d:bc:e3:fd:17:2e:f9:f0:e7:0e:18:84:e5:aa:06:
         fd:1b:20:cf:5e:8e:f8:a9:ba:18:b7:2c:83:07:8d:d0:1b:02:
         19:5d:6e:ea:b7:6e:05:45:a5:89:fc:f5:00:49:e1:fe:eb:ef:
         81:74:d9:43:ac:b6:19:7f:ad:05:33:95:21:3a:a2:b7:fe:3c:
         0d:a9:e4:a3:d9:e1:da:76:3c:99:be:c4:cd:27:45:d4:cb:91:
         f7:1f:aa:b5:48:a1:73:52:59:25:00:f8:ff:76:98:38:37:17:
         40:c8:97:78:15:80:f4:d6:6d:85:f0:ba:5d:70:10:32:1c:de:
         67:bf:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:47:51 2025 by rpki-client