Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer
File:                     dqLtUg-AVK9-DJnb905Pde1FfDo.cer (raw, json)
Hash identifier:          5MGtdoxaksKT+D+iwfBVoVV0iBi1hdA5MxzoY4cN5/4=
Subject key identifier:   76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3661
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:23 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.97.48.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13921 (0x3661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:23 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=76A2ED520F8054AF7E0C99DBF74E4F75ED457C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:86:b7:4a:c7:58:71:60:2d:f1:7e:d9:06:
                    1f:a7:ea:ea:1e:86:48:14:d9:4e:60:6d:8a:bc:83:
                    16:ec:22:69:7b:51:9c:bb:a0:c3:27:33:35:bd:33:
                    7a:f3:5d:d5:05:34:c0:26:31:9b:f5:d8:89:d5:08:
                    16:75:56:6d:05:43:7d:22:7c:00:2d:30:4d:15:09:
                    2e:41:7f:8d:42:f3:7d:58:68:b5:4e:86:81:c1:7f:
                    ce:57:10:73:19:fe:00:ee:6f:a0:42:fb:9d:26:ac:
                    6f:21:b1:e4:ca:c0:f3:37:3e:e1:fe:19:1f:6c:eb:
                    09:d6:ab:ef:34:f6:a3:41:28:25:6e:58:d5:33:9c:
                    5e:41:b1:da:bf:39:0e:62:d9:a3:88:34:b6:44:5e:
                    4e:b0:da:0e:9a:9b:ee:1a:05:22:b2:f0:ce:18:7d:
                    52:8a:96:d2:01:57:c6:96:01:ed:fa:b9:38:9e:0f:
                    be:a0:ba:2d:1e:f8:30:7f:4b:22:94:7e:8a:4a:e7:
                    be:81:7d:36:f2:2b:2d:d9:26:14:15:fd:29:26:c8:
                    48:48:21:a6:5d:d0:d3:54:d0:cd:1e:2f:f5:3c:9e:
                    c6:dc:13:09:6e:bb:ff:86:b7:3e:37:56:09:a5:4e:
                    ab:f2:bd:8e:f6:68:03:68:f6:2f:29:e6:1e:81:02:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:c6:76:52:e2:89:e3:28:70:f5:3d:32:7d:6e:db:13:78:
         10:ac:d6:fb:ff:57:ec:c4:b9:72:ca:63:e4:4d:44:8c:38:0c:
         f2:8e:39:ea:a3:ab:f8:7a:6f:b6:57:0d:68:3f:f6:12:80:b4:
         db:ae:16:12:7a:0e:ce:b4:04:7f:6a:56:0d:c6:cc:87:d4:ae:
         e7:58:8d:52:97:57:e8:1f:6d:22:7b:5e:d9:43:bc:99:23:4e:
         d9:3e:3f:f3:e6:72:8b:04:e7:36:b9:5f:e3:4c:55:e4:5a:2f:
         a1:fd:c1:f7:f0:d1:27:df:96:47:4b:81:9d:ea:2b:e0:6b:df:
         02:37:ac:fd:8b:07:3e:3a:01:33:66:da:cc:c1:9b:6d:12:7f:
         db:50:35:61:9e:2f:15:ba:3b:04:03:0a:44:48:76:dd:15:fa:
         4a:b7:7b:ea:76:e8:70:80:85:79:95:a6:bb:a5:0a:08:80:5c:
         d2:ba:c0:47:d1:f2:6c:3e:76:e6:da:05:95:1e:d0:8c:13:4d:
         74:4d:cc:6a:9d:07:c3:60:99:df:5d:60:86:19:2b:b7:1b:18:
         7e:72:3e:75:73:a2:40:01:7a:27:95:97:be:25:57:ff:d7:ac:
         5e:88:75:ea:a6:8f:ac:3a:49:6d:25:74:a8:f2:66:1f:98:64:
         6b:ba:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:46:37 2025 by rpki-client