Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
File:                     8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer (raw, json)
Hash identifier:          8kNfCJwFy/auWCLk7uTBLLRuTi2RFLmH3caFSWjqOZE=
Subject key identifier:   F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:22 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 210.62.160.0/20
                          IP: 210.244.224.0/19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13897 (0x3649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:22 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:15:d2:38:b5:bc:29:40:0d:4b:b6:d6:e1:
                    56:72:e5:0c:da:25:5d:d9:76:31:7b:f0:65:40:85:
                    b5:6a:5f:36:eb:d5:d1:46:37:5e:a4:65:dc:8a:1d:
                    3e:96:62:0d:f2:27:68:8b:17:e9:ea:c2:65:39:e5:
                    6e:1e:b5:d3:e2:ef:ed:b2:b4:ed:a0:d5:0b:15:b3:
                    27:cc:1d:9e:2c:02:f7:77:52:d3:70:1e:e7:a8:72:
                    89:f1:65:bf:61:c3:5b:14:65:a7:62:f4:60:7d:d0:
                    fa:33:1a:eb:b3:0d:c8:65:28:a1:09:f4:ef:4e:c8:
                    05:73:70:4c:77:57:22:18:47:a2:bf:8c:ef:bd:58:
                    2f:bc:c8:66:0b:19:01:ef:36:d5:30:e9:67:eb:ec:
                    ef:67:9b:fd:e3:ff:30:be:c5:d9:87:ea:ba:40:fb:
                    ef:6d:58:ef:aa:82:ae:47:cc:8e:80:9d:b7:6a:a1:
                    a8:d5:f7:a9:7b:74:ba:4f:8a:e2:6a:5b:15:52:6e:
                    6b:2c:4f:b8:5f:5d:41:7c:a6:6d:3a:99:fa:d1:b2:
                    59:e1:6e:a2:e4:03:c7:89:c7:95:9f:c3:1a:28:1c:
                    14:50:5b:7e:26:36:83:89:17:22:b4:95:9c:94:61:
                    3a:86:73:91:0c:ff:a0:61:38:e2:e9:96:d5:a7:75:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.160.0/20
                  210.244.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:84:17:e7:50:98:ad:13:fa:0e:79:57:ab:9f:b8:d5:42:
         2f:86:ad:78:ca:34:3c:0b:55:aa:2d:f0:86:62:b8:b1:fa:d0:
         03:4b:f6:1d:1d:3f:92:94:9f:de:df:2d:8d:c8:e6:d5:c7:31:
         9a:65:41:35:f7:3c:3a:ea:21:f7:29:5e:1b:e9:d1:fc:6b:0a:
         b6:05:dd:a0:00:a1:1b:df:8c:03:5d:fb:66:77:c3:5b:0f:67:
         32:4a:ba:a2:36:87:b0:76:a8:b7:51:0e:b9:b4:88:87:07:7c:
         ca:c6:af:b9:b0:aa:80:b1:fe:25:95:d4:11:ae:fa:cb:e4:82:
         0a:db:8b:3a:78:89:be:7b:71:56:83:9f:20:ef:2e:5b:fe:9f:
         1e:6d:61:a2:4a:23:f0:aa:df:a4:9d:d6:4c:fa:d1:39:bd:bd:
         22:5b:d0:35:ef:7f:29:49:be:66:ab:53:a7:b9:10:2a:2f:0e:
         25:bf:32:16:99:7d:c7:7e:2c:3c:f4:50:e9:6b:9d:8c:01:8e:
         10:26:f8:70:4f:0e:f4:9d:57:ae:ec:b5:63:31:67:b4:a2:02:
         5b:02:5e:df:bb:38:11:98:f3:2f:f1:80:ab:3f:d0:e5:1b:fb:
         ed:8d:02:74:23:01:82:d0:fc:0f:ff:7a:c2:fc:26:58:b2:0a:
         8b:0d:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:36:48 2025 by rpki-client