Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
File:                     b4yS38eMv-jF79a6WjehYoIh_-I.cer (raw, json)
Hash identifier:          UKwDPeBR1wda7WWcDOY3GGy3nATFJUXIzabbpz5e+B0=
Subject key identifier:   6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       360F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:20 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 131623
                          IP: 103.117.4.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13839 (0x360f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:20 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:d4:89:58:c9:58:75:a1:f4:57:37:de:58:
                    d0:86:57:28:1d:4f:e1:e4:96:93:92:ae:5c:e1:d9:
                    5f:3f:40:cb:9f:dc:70:02:91:d5:c0:18:ba:78:c4:
                    b4:b1:62:af:aa:51:4e:b9:7c:f2:13:a3:99:e6:3d:
                    58:21:4d:d7:83:db:80:e3:5f:5d:a5:06:9b:40:f9:
                    31:08:47:73:49:3d:19:bc:36:8f:b9:cf:3d:eb:cd:
                    2d:c3:7f:30:ba:8c:15:c6:34:63:b9:63:07:18:6c:
                    42:4a:82:eb:4d:cb:09:e7:d7:77:12:82:a5:9e:f1:
                    b2:08:9c:32:d7:0d:f6:5e:0d:be:3c:3e:8d:3b:75:
                    e3:59:52:d1:83:60:30:f8:a7:92:7a:9b:d7:56:f1:
                    a9:82:17:a3:88:ab:96:28:09:23:26:58:d2:df:30:
                    1a:34:5e:56:e3:7f:92:df:7f:df:4a:9c:31:2c:80:
                    cf:39:48:91:da:16:c5:b7:1c:78:e7:97:98:8b:b7:
                    66:7f:66:e0:bf:80:a5:ed:51:d8:d1:bf:ed:e1:d2:
                    2f:67:30:0e:72:11:49:af:c3:8e:be:9d:bf:61:d3:
                    34:a2:3b:e9:b2:2a:0f:b1:35:4f:d3:9a:65:bf:5f:
                    0d:ec:a6:05:77:8d:c1:60:aa:b0:9c:53:30:2e:e2:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131623

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:9b:9e:5b:3e:fa:54:88:5a:c9:43:90:5a:55:3d:99:b1:f9:
         b9:d3:a9:1a:7d:aa:5b:18:97:da:50:8f:a7:10:26:88:86:29:
         af:ef:4f:45:99:d5:54:c1:7e:23:25:ed:d9:e3:67:fe:93:f5:
         93:0b:98:24:79:02:20:2d:5d:d5:8f:be:2c:f2:e6:19:a7:a8:
         8d:90:0a:da:90:ed:75:29:d1:8d:2a:21:ce:52:e7:7d:b7:47:
         9e:86:6a:7e:5e:8f:f1:06:3c:63:cf:de:20:89:1a:5e:7f:28:
         4b:2e:10:b0:4e:22:74:c7:f8:53:45:e4:c7:c3:78:4c:8e:ac:
         f5:b0:be:40:31:0b:ab:0f:fd:3e:6b:eb:0a:05:e5:f9:e3:54:
         ac:3e:f1:5e:7a:c3:3a:1c:ba:ca:92:47:c0:ca:d0:f2:46:b4:
         7c:b0:a7:ae:da:0f:e9:ca:dc:ba:9e:72:e6:76:c2:43:05:08:
         99:eb:d3:29:4d:39:40:ee:ad:db:09:44:a5:76:8f:e3:bd:76:
         c6:dd:7d:04:91:7d:47:e7:a2:25:38:2c:7a:7c:cf:5e:aa:35:
         ea:1c:aa:29:86:8e:6a:54:c3:6f:43:57:b6:f5:45:e6:1d:9c:
         a6:3d:cf:79:43:6f:b0:1a:81:6d:07:d3:53:34:eb:f8:cb:92:
         ac:55:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:46 2025 by rpki-client