Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/tYXiSMtHAdFL9x7UdHnWKBvx8kI.cer
File:                     tYXiSMtHAdFL9x7UdHnWKBvx8kI.cer (raw, json)
Hash identifier:          ZIaxhcfpTS52X8ezR7gS7RqK7r3l24Mn2V+3YnGbZMk=
Subject key identifier:   B5:85:E2:48:CB:47:01:D1:4B:F7:1E:D4:74:79:D6:28:1B:F1:F2:42
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIRUE/tYXiSMtHAdFL9x7UdHnWKBvx8kI.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIRUE/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:23 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 131643
                          IP: 103.129.164.0/22
                          IP: 2403:8140::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13905 (0x3651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:23 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=B585E248CB4701D14BF71ED47479D6281BF1F242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:76:6b:9c:66:0c:9a:aa:9d:01:a0:ac:81:
                    79:7b:7f:b7:17:a4:22:4e:8e:5a:e2:a0:d4:b5:68:
                    26:d0:6e:30:6b:4e:9f:d9:dd:1c:c8:9f:36:5c:fd:
                    ca:50:4e:17:ae:f0:dc:e8:05:9f:a8:7d:bc:90:c3:
                    60:f0:f9:58:74:3d:67:7e:89:84:4c:f3:33:91:04:
                    ec:09:ea:85:04:db:50:d1:a1:ca:a0:99:63:4d:d1:
                    cd:7d:59:37:be:fb:67:27:cd:a2:64:1f:68:0b:f9:
                    1d:7e:f8:07:bb:cb:a4:cc:53:5a:1b:09:92:b8:c9:
                    a5:dc:25:2b:ea:1a:83:32:2d:c1:2b:6c:d5:e6:a0:
                    58:65:eb:de:ee:85:4e:10:af:5c:74:71:b0:55:cb:
                    28:af:97:bc:e7:b6:5e:80:d1:c2:fa:65:ed:dc:11:
                    c5:e2:a3:3a:6d:fe:45:b7:c9:2e:c8:bc:9f:a6:ad:
                    7a:be:51:85:a0:a7:2b:eb:42:2c:48:7a:40:38:04:
                    3c:72:b0:8b:76:f0:be:57:c0:a8:29:30:94:3d:3a:
                    4f:6d:e7:33:ff:e9:03:39:c1:70:b3:bd:cc:a0:ad:
                    f5:2f:26:ca:f9:1d:66:5e:c9:47:e1:d7:89:ba:49:
                    d4:e5:88:44:34:5b:fd:45:98:0f:7e:ce:e6:a3:9d:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:E2:48:CB:47:01:D1:4B:F7:1E:D4:74:79:D6:28:1B:F1:F2:42
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIRUE/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIRUE/tYXiSMtHAdFL9x7UdHnWKBvx8kI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  131643

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.164.0/22
                IPv6:
                  2403:8140::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:0d:08:a3:d8:85:07:39:6e:5a:70:13:0b:88:bb:76:20:
         1e:ef:9b:8d:35:b2:f0:5a:a5:82:08:7a:6b:ad:93:e0:18:ea:
         0f:24:c3:7d:15:1c:92:bd:cb:db:46:87:dd:dc:f9:9e:35:c0:
         59:c1:f0:64:06:0b:ed:67:8c:e8:71:d7:38:65:84:e8:a5:18:
         65:be:96:aa:75:72:e4:e2:cb:2f:70:eb:46:ad:71:91:8f:63:
         9f:f6:bc:ee:74:48:b2:0d:05:6b:ab:b4:f7:41:87:a9:ce:de:
         80:4e:6b:26:9b:3a:a1:df:7a:f4:ff:42:b9:5f:31:03:8d:ec:
         0f:ad:08:3a:31:e5:8e:9f:0b:db:e8:f8:de:f3:dd:5a:25:5f:
         53:ce:4f:ba:52:eb:41:29:76:b7:e8:4a:eb:16:d2:5a:e5:21:
         dd:7d:b8:95:e7:6d:e6:18:7c:bf:0e:a8:29:33:7d:3a:89:49:
         0c:f8:42:6c:40:b4:3a:1b:c5:0f:c6:46:51:ac:99:14:66:e7:
         2f:be:bf:fd:0e:65:8e:f2:c6:7f:28:62:89:5f:81:79:9b:3e:
         bb:1f:94:17:94:20:fd:ee:cd:ff:8d:6f:13:02:00:f0:b3:86:
         a7:43:16:53:d2:53:1f:fe:d5:79:0a:51:b8:87:92:b6:cc:96:
         ab:3a:28:c3
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgICNlEwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTI1MDIxMDE0MjkyM1oXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoQjU4NUUyNDhDQjQ3MDFEMTRCRjcxRUQ0NzQ3OUQ2MjgxQkYxRjI0
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6KdmucZgyaqp0BoKyB
eXt/txekIk6OWuKg1LVoJtBuMGtOn9ndHMifNlz9ylBOF67w3OgFn6h9vJDDYPD5
WHQ9Z36JhEzzM5EE7AnqhQTbUNGhyqCZY03RzX1ZN777ZyfNomQfaAv5HX74B7vL
pMxTWhsJkrjJpdwlK+oagzItwSts1eagWGXr3u6FThCvXHRxsFXLKK+XvOe2XoDR
wvpl7dwRxeKjOm3+RbfJLsi8n6ater5RhaCnK+tCLEh6QDgEPHKwi3bwvlfAqCkw
lD06T23nM//pAznBcLO9zKCt9S8myvkdZl7JR+HXibpJ1OWIRDRb/UWYD37O5qOd
0O0CAwEAAaOCAnswggJ3MB0GA1UdDgQWBBS1heJIy0cB0Uv3HtR0edYoG/HyQjAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF
hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJUlVFLzBX
BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0NISVJVRS90WVhpU010SEFkRkw5eDdVZEhuV0tCdng4a0kubWZ0MDEGCCsGAQUF
BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwICOzAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEAmeBpDANBAIAAjAHAwUAJAOBQDANBgkqhkiG9w0BAQsFAAOCAQEAGcMNCKPY
hQc5blpwEwuIu3YgHu+bjTWy8Fqlggh6a62T4BjqDyTDfRUckr3L20aH3dz5njXA
WcHwZAYL7WeM6HHXOGWE6KUYZb6WqnVy5OLLL3DrRq1xkY9jn/a87nRIsg0Fa6u0
90GHqc7egE5rJps6od969P9CuV8xA43sD60IOjHljp8L2+j43vPdWiVfU85PulLr
QSl2t+hK6xbSWuUh3X24ledt5hh8vw6oKTN9OolJDPhCbEC0OhvFD8ZGUayZFGbn
L76//Q5ljvLGfyhiiV+BeZs+ux+UF5Qg/e7N/41vEwIA8LOGp0MWU9JTH/7VeQpR
uIeStsyWqzooww==
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:46:38 2025 by rpki-client