Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
File:                     sso52NF7ENl9WlHg6i-fsbxAzZA.cer (raw, json)
Hash identifier:          kLJLwJGWqKGUG2fjgaVjW5iWyhVNr+clUBHdCobLyD4=
Subject key identifier:   B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3687
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:25 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 24157 -- 24158
                          AS: 131614
                          AS: 131647 -- 131650
                          IP: 1.200.0.0/16
                          IP: 43.240.108.0/22
                          IP: 43.255.88.0/22
                          IP: 43.255.180.0/22
                          IP: 101.8.0.0/13
                          IP: 103.2.216.0/22
                          IP: 103.5.32.0/22
                          IP: 103.239.60.0/22
                          IP: 110.50.128.0/18
                          IP: 112.78.64.0/19
                          IP: 115.80.0.0/14
                          IP: 116.89.128.0/20
                          IP: 117.19.0.0/16
                          IP: 123.99.0.0/18
                          IP: 124.29.128.0/18
                          IP: 180.204.0.0/14
                          IP: 180.217.0.0/16
                          IP: 202.144.208.0/20
                          IP: 2401:7080::/32
                          IP: 2402:7500::/32
                          IP: 2403:c300::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13959 (0x3687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:25 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8b:cc:ef:eb:61:e2:7a:dc:17:02:84:1f:2e:
                    9f:53:5e:89:70:9c:f2:f9:10:2d:98:0b:f4:32:0e:
                    6a:08:cc:5a:20:68:5f:fe:6f:54:2c:d8:e6:7a:a0:
                    9a:6e:67:8e:06:34:f1:f3:ef:79:ad:5d:6d:61:4f:
                    ee:f0:8c:1d:a4:e3:26:c1:2e:1f:17:38:4c:dd:20:
                    92:0d:4a:a7:49:0e:85:6e:bf:04:77:33:08:c5:9a:
                    72:ee:af:f8:c5:b4:a7:04:e5:d6:69:64:13:9e:db:
                    4d:78:2a:68:76:f3:90:10:cd:37:ca:c1:70:4f:42:
                    43:30:b3:ae:c1:40:52:d0:20:e5:bf:5e:a0:9a:08:
                    ee:8d:66:a0:58:ac:78:a8:1b:86:fc:fe:d1:ef:33:
                    8f:68:25:38:6d:49:7a:a3:7a:5a:94:2c:bd:51:2a:
                    31:81:c2:cd:7d:ba:6a:ac:ab:94:97:09:c5:01:f6:
                    08:54:58:d6:78:2d:4a:6e:1c:c1:a0:32:6c:2c:1b:
                    8e:95:12:78:6e:80:f0:2a:af:b5:5d:70:00:97:1a:
                    e3:ed:fa:8b:1a:14:63:20:e8:c7:b4:c4:be:0a:fe:
                    33:05:24:a4:e8:28:2a:fe:5a:9a:a0:9a:76:e1:38:
                    de:ac:dc:6e:f3:b6:3f:92:c7:e1:b2:29:9a:c0:e3:
                    8a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24157-24158
                  131614
                  131647-131650

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.200.0.0/16
                  43.240.108.0/22
                  43.255.88.0/22
                  43.255.180.0/22
                  101.8.0.0/13
                  103.2.216.0/22
                  103.5.32.0/22
                  103.239.60.0/22
                  110.50.128.0/18
                  112.78.64.0/19
                  115.80.0.0/14
                  116.89.128.0/20
                  117.19.0.0/16
                  123.99.0.0/18
                  124.29.128.0/18
                  180.204.0.0/14
                  180.217.0.0/16
                  202.144.208.0/20
                IPv6:
                  2401:7080::/32
                  2402:7500::/32
                  2403:c300::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:84:26:1d:f3:2c:49:1b:49:c5:22:c5:31:66:1d:a4:a3:
         8f:6c:d6:76:cd:55:cd:04:60:21:7a:29:1e:29:f7:be:82:b7:
         cc:e2:2b:c4:9a:a1:42:a4:50:32:ab:cc:d5:0e:12:d6:80:90:
         c8:f6:9b:ee:ce:f2:a7:82:37:72:7b:6d:98:ae:cd:5a:07:67:
         20:ee:56:08:e8:ec:48:65:81:be:5c:ae:75:83:8b:b6:5a:ee:
         99:98:65:59:c2:32:d5:8e:ed:ab:37:7c:09:ed:68:a0:4f:e7:
         86:fd:cf:6d:c1:b9:ed:f9:26:c6:e0:ab:8d:24:12:5d:f3:8f:
         61:be:45:3f:bd:06:38:2b:28:f5:e4:e5:91:64:75:d6:a6:e0:
         82:a8:5e:81:54:a6:ad:5e:22:46:33:03:db:d5:4d:6c:07:4e:
         57:42:1a:01:22:c0:8a:9b:6f:09:d1:77:ec:36:0e:26:85:2a:
         26:98:c4:db:07:1a:ac:91:43:ab:04:41:07:c0:56:3b:53:f2:
         30:9b:1a:03:4a:12:85:c4:94:70:81:34:70:db:92:0b:fe:94:
         b7:42:51:80:f1:4e:06:63:c0:a6:31:b7:7f:5a:2c:c0:30:35:
         12:ac:c4:4b:30:a3:05:f4:3e:93:b5:86:63:a8:55:a8:32:28:
         9f:a6:b1:68
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgICNocwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkyNVoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoQjJDQTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5
MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOGLzO/rYeJ63BcChB8u
n1NeiXCc8vkQLZgL9DIOagjMWiBoX/5vVCzY5nqgmm5njgY08fPvea1dbWFP7vCM
HaTjJsEuHxc4TN0gkg1Kp0kOhW6/BHczCMWacu6v+MW0pwTl1mlkE57bTXgqaHbz
kBDNN8rBcE9CQzCzrsFAUtAg5b9eoJoI7o1moFiseKgbhvz+0e8zj2glOG1JeqN6
WpQsvVEqMYHCzX26aqyrlJcJxQH2CFRY1ngtSm4cwaAybCwbjpUSeG6A8CqvtV1w
AJca4+36ixoUYyDox7TEvgr+MwUkpOgoKv5amqCaduE43qzcbvO2P5LH4bIpmsDj
itECAwEAAaOCAw4wggMKMB0GA1UdDgQWBBSyyjnY0XsQ2X1aUeDqL5+xvEDNkDAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgeIGCCsGAQUFBwELBIHVMIHSMD4GCCsGAQUFBzAF
hjJyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9C
SUxFLzBdBggrBgEFBQcwCoZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1RBSVdBTk1PQklMRS9zc281Mk5GN0VObDlXbEhnNmktZnNieEF6WkEu
bWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3Rp
ZnkueG1sMDAGCCsGAQUFBwEIAQH/BCEwH6AdMBswCAICXl0CAl5eAgMCAh4wCgID
AgI/AgMCAkIwgZ4GCCsGAQUFBwEHAQH/BIGOMIGLMGwEAgABMGYDAwAByAMEAivw
bAMEAiv/WAMEAiv/tAMDA2UIAwQCZwLYAwQCZwUgAwQCZ+88AwQGbjKAAwQFcE5A
AwMCc1ADBAR0WYADAwB1EwMEBntjAAMEBnwdgAMDArTMAwMAtNkDBATKkNAwGwQC
AAIwFQMFACQBcIADBQAkAnUAAwUAJAPDADANBgkqhkiG9w0BAQsFAAOCAQEAYfmE
Jh3zLEkbScUixTFmHaSjj2zWds1VzQRgIXopHin3voK3zOIrxJqhQqRQMqvM1Q4S
1oCQyPab7s7yp4I3cnttmK7NWgdnIO5WCOjsSGWBvlyudYOLtlrumZhlWcIy1Y7t
qzd8Ce1ooE/nhv3PbcG57fkmxuCrjSQSXfOPYb5FP70GOCso9eTlkWR11qbggqhe
gVSmrV4iRjMD29VNbAdOV0IaASLAiptvCdF37DYOJoUqJpjE2wcarJFDqwRBB8BW
O1PyMJsaA0oShcSUcIE0cNuSC/6Ut0JRgPFOBmPApjG3f1oswDA1EqzESzCjBfQ+
k7WGY6hVqDIon6axaA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:46:32 2025 by rpki-client