Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ODsu-CC-VSm_ObPEsuq69SNpd4s.cer
File:                     ODsu-CC-VSm_ObPEsuq69SNpd4s.cer (raw, json)
Hash identifier:          eNTSg4T2CjV6FFGXCO58KIa6jpu914XdNYntaDDU7RA=
Subject key identifier:   38:3B:2E:F8:20:BE:55:29:BF:39:B3:C4:B2:EA:BA:F5:23:69:77:8B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       342B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ODsu-CC-VSm_ObPEsuq69SNpd4s.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:00 +0000
Certificate not after:    Tue 23 Sep 2025 15:30:20 +0000
Subordinate resources:    IP: 2401:c620::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13355 (0x342b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:00 2025 GMT
            Not After : Sep 23 15:30:20 2025 GMT
        Subject: CN=383B2EF820BE5529BF39B3C4B2EABAF52369778B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:87:74:31:36:d2:a3:dd:e1:3b:89:00:05:
                    2e:94:e4:f6:41:19:94:6d:1a:b2:99:2f:e4:81:2d:
                    14:49:8d:14:a1:90:74:af:a9:27:66:c7:43:a6:5b:
                    0e:7d:d8:8d:43:c6:18:ad:af:39:41:01:2b:0a:46:
                    22:e9:de:3b:96:dc:20:99:d6:95:5d:b8:89:47:f1:
                    d4:ad:42:1b:b6:f5:d3:2e:1c:ae:ba:30:3e:ad:24:
                    07:a8:eb:f4:80:63:d4:5b:62:a8:5c:22:dc:76:12:
                    3a:6e:0b:c7:f1:d2:36:ff:b4:4b:8d:a0:c6:65:f8:
                    ac:1f:a3:6d:2a:f8:02:61:24:20:fc:78:8f:c1:0c:
                    7f:f2:9c:48:5e:3e:e2:93:c6:9b:5f:57:fd:61:7d:
                    b0:af:c8:20:b0:43:cd:53:04:9a:9b:e1:47:fb:16:
                    23:99:a8:a3:52:4e:b8:3f:7c:83:c4:f6:c0:63:d4:
                    d6:4f:b8:11:90:fb:90:fa:9a:75:7c:9c:f8:a6:82:
                    a6:c0:91:54:29:f9:b2:03:85:8d:72:09:9d:75:e3:
                    f7:44:9e:c2:55:2a:e9:57:f8:37:60:32:af:d0:f1:
                    a2:1f:4f:39:01:a0:67:95:bb:82:ed:b0:48:34:1a:
                    15:d0:bf:bc:19:e5:68:93:63:40:b1:4f:f0:59:f4:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:2E:F8:20:BE:55:29:BF:39:B3:C4:B2:EA:BA:F5:23:69:77:8B
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/ODsu-CC-VSm_ObPEsuq69SNpd4s.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c620::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:70:7f:0c:59:79:4e:24:3f:15:af:e8:21:73:a7:1b:08:ba:
         ba:f7:80:54:32:1e:7b:05:62:9b:12:16:65:44:78:a5:f8:fc:
         f4:c2:a4:60:59:cc:58:d3:f5:29:98:a5:88:f8:9f:02:59:d7:
         0c:f5:84:f5:85:40:ba:24:45:a3:63:93:21:43:b1:26:4a:bb:
         cf:2a:d5:28:1e:f3:cc:39:6b:b5:5e:c4:bf:1b:02:7c:6a:aa:
         40:aa:96:ac:b5:1f:a0:23:e1:d3:2a:d1:dc:52:c0:d1:18:10:
         71:56:a7:77:5b:42:07:c0:5b:2b:30:d7:8d:25:27:05:6e:51:
         9b:ea:a2:3e:98:1c:9a:93:ff:93:1d:a8:89:b4:29:eb:5a:bc:
         e6:d3:bb:cf:ab:af:2c:8a:8c:a2:82:6a:fa:3f:55:3d:33:43:
         b7:9e:d0:8a:be:ed:f6:c4:24:21:36:84:2f:dc:b1:b0:bf:ad:
         81:d6:59:59:00:6a:31:42:14:62:47:ce:e1:72:5a:f8:e9:25:
         d3:69:f1:ae:12:fc:f7:b8:44:13:2c:68:62:a6:f6:fa:64:7b:
         9f:d2:f3:52:d9:4f:00:94:88:92:76:1c:3a:bb:c7:14:39:32:
         6e:01:9d:ba:9a:3c:c7:32:96:0d:d8:bb:4e:cb:8d:74:01:ba:
         da:c8:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:45:14 2025 by rpki-client