Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DjrlLg48orgFrsL_itmlf3IHWqo.cer
File:                     DjrlLg48orgFrsL_itmlf3IHWqo.cer (raw, json)
Hash identifier:          Zy7SNqYULCkq2Cj/tST6tTUeBzXkrjAbtw8lvYG+yes=
Subject key identifier:   0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       358F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:14 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 152611
                          IP: 2401:b9a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13711 (0x358f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0E3AE52E0E3CA2B805AEC2FF8AD9A57F72075AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:71:9c:e8:cf:94:7b:f8:2c:51:fb:c5:bb:
                    7a:a7:6c:f6:00:17:f0:90:53:65:11:f7:2a:3b:68:
                    e3:4d:97:32:5f:cb:73:74:4e:92:8d:3e:6d:91:3a:
                    c5:17:a5:3f:c9:ad:07:3a:99:f6:b3:51:05:c8:be:
                    04:58:7a:bc:51:1c:77:5c:4f:df:79:46:21:2f:9c:
                    09:62:1d:50:84:e7:3e:6b:52:b1:ae:fe:61:29:c9:
                    e5:d6:96:34:64:e0:42:bc:60:5e:19:7a:ca:6d:9b:
                    98:59:b9:5d:17:aa:b3:14:b3:07:b4:09:f6:fe:84:
                    36:73:8d:1e:89:e0:c2:17:1e:12:43:84:d3:c0:ed:
                    ca:1a:e4:ea:55:22:d0:3b:6c:9a:35:56:3c:fb:3e:
                    e5:4f:f3:d7:bd:6a:cc:c6:e2:ab:b5:aa:39:fa:ad:
                    50:f0:cc:64:ff:c2:1f:9a:1a:8f:0b:4b:3d:6c:4e:
                    0f:15:72:03:83:47:ad:91:7f:40:4c:94:b8:26:18:
                    09:a8:1b:f0:06:3a:c6:e5:19:14:f3:ab:fe:46:47:
                    81:f6:7c:44:52:af:67:20:d2:9b:ee:9c:27:2f:1a:
                    4f:41:42:56:7c:25:f7:1d:ef:1a:39:0f:01:95:1f:
                    e8:62:bd:6f:40:5a:cd:cc:e4:13:6a:6e:33:a6:5b:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3A:E5:2E:0E:3C:A2:B8:05:AE:C2:FF:8A:D9:A5:7F:72:07:5A:AA
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/DjrlLg48orgFrsL_itmlf3IHWqo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152611

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:29:59:08:d0:58:56:ae:31:85:fd:bd:90:d5:a3:17:08:db:
         99:e7:90:29:4f:77:5b:82:65:e0:5c:a1:fa:e1:a5:ca:8f:99:
         b5:9f:14:44:37:ec:c1:1a:d4:20:f9:78:61:8b:75:c5:d8:a8:
         b4:d7:e2:c6:3f:36:9d:a5:3d:75:54:eb:da:05:00:2a:08:73:
         1e:7b:d0:8a:97:5b:62:7b:1d:61:5b:e0:08:bc:b3:c1:5d:3a:
         89:f3:87:42:ae:99:49:12:92:4d:ea:0b:c9:32:f2:36:ae:30:
         5f:5b:51:1c:b9:91:e4:3b:1a:a6:25:15:f9:7f:ee:98:9f:97:
         31:2c:e5:74:5a:7f:b8:5d:6b:fc:b1:b5:e2:b0:c0:2a:e8:df:
         22:d4:26:93:40:e5:a5:b5:e1:b4:55:c6:43:87:d3:df:16:f6:
         42:1d:52:7c:8c:f5:1b:05:96:9a:fc:8b:9e:b5:d3:a8:3f:1b:
         c1:fc:5e:b6:92:07:8d:1f:f0:8f:cc:ec:95:da:1b:8f:c9:39:
         c8:6f:23:f9:b1:9f:8a:d7:45:63:50:b4:e1:18:bd:b6:9e:c8:
         b6:87:19:28:2d:24:3d:7d:e1:67:cc:b0:11:84:30:95:30:e8:
         bc:1b:38:64:21:01:8c:9f:f8:ec:c1:f1:11:a3:a9:5e:6d:bc:
         77:94:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:27:28 2025 by rpki-client