Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer
File:                     HnnGwDO7nUaeDOgWRTjfOenxw7w.cer (raw, json)
Hash identifier:          TOOfx3qXKaKaMEU4xpqijOV6aCXY8U5930zt9qCdVzw=
Subject key identifier:   1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       352D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:10 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 17414
                          AS: 17422
                          IP: 103.159.118.0/23
                          IP: 2406:d040::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13613 (0x352d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:68:cb:b0:39:fe:84:49:ed:3a:00:e1:98:
                    3d:6c:0d:28:35:30:21:09:1a:02:7d:ea:02:4f:91:
                    07:a0:ac:b4:56:40:69:d9:7e:89:d5:0b:40:ae:24:
                    ae:32:d3:da:26:6b:7c:b2:eb:8c:f0:fe:dc:d2:33:
                    10:d3:1c:e3:f0:c0:ea:7c:8c:35:b4:e2:4f:3b:dc:
                    16:4f:9f:22:b6:e3:e6:c3:f0:d6:a8:d5:b7:be:74:
                    0b:af:ae:3c:da:69:48:a9:25:a3:7e:06:6a:fd:4c:
                    63:60:bf:c0:25:da:04:b8:6a:92:cc:db:da:c1:22:
                    7f:b2:f1:6d:6b:05:0c:13:2d:ad:5c:95:53:f9:c2:
                    62:24:cb:58:25:2d:ac:f4:2c:81:ff:e0:d3:39:01:
                    c2:60:ff:66:2c:4b:24:ec:62:82:77:25:22:32:18:
                    b6:32:74:b4:48:01:e9:fe:c6:6f:17:e4:dd:28:3b:
                    a5:20:a9:39:5c:a2:e5:cf:3d:9c:07:86:c1:d8:bf:
                    46:fd:c4:3e:38:aa:8a:3c:97:0c:24:55:4e:b8:d9:
                    c9:52:d1:68:d0:ec:86:59:09:7f:40:bb:4d:df:b3:
                    f2:dc:5a:ae:49:70:fb:ca:70:89:ca:91:ef:95:ff:
                    87:92:50:8c:99:55:4e:e2:c6:c9:2b:6a:e0:b7:f3:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17414
                  17422

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.118.0/23
                IPv6:
                  2406:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:d4:8d:ae:11:de:10:19:28:a7:39:ac:cd:9c:45:4c:6c:
         c9:05:b7:cb:fe:77:6f:e6:5c:38:3c:2b:2b:1b:65:98:d4:42:
         04:9a:59:3d:3c:60:3d:f0:21:91:a6:10:b1:4d:2b:34:71:82:
         8e:88:49:a4:b8:aa:54:d6:07:32:ec:75:af:05:dc:67:ce:bd:
         7e:2d:89:34:c5:dc:f1:60:e5:3b:7c:dc:a5:cb:2c:bd:26:23:
         30:28:d2:5b:4e:44:55:27:14:0e:09:00:0a:7f:1e:6a:6f:e1:
         5d:c1:78:26:51:18:0a:0c:15:bf:c7:67:f1:43:36:98:b1:c4:
         d2:da:7d:45:7b:3a:a1:2e:f4:a7:08:ee:86:33:5e:15:40:8d:
         1d:2c:df:9f:e6:30:fa:39:b0:bc:49:09:dc:9f:be:23:d7:eb:
         37:97:6e:19:ef:8f:d1:ec:e1:e5:70:37:bf:4e:ff:65:73:11:
         9e:c7:26:f7:a9:57:f3:a5:e1:4d:95:d0:cd:93:77:10:9f:4b:
         a6:fb:d3:d0:88:bb:de:c7:21:b5:5f:74:0b:f6:17:bc:f8:96:
         b2:b5:27:a3:d5:67:29:f7:b6:b1:bc:f4:b0:90:ff:ba:ba:92:
         d1:4e:48:34:9a:f3:ca:98:f3:b6:79:20:e9:78:a6:12:d8:74:
         a9:05:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:47:45 2025 by rpki-client