Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
File:                     yqhAXL2M5q4eo6napneXVuxu3EI.cer (raw, json)
Hash identifier:          p9ALRKQue8ONe3W9PXaWac18x70OuJUYyuGHUUQHUDc=
Subject key identifier:   CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       3431
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:00 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.99.142.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13361 (0x3431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:00 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:6d:8c:6e:66:a2:db:8a:0b:9a:1a:fc:89:
                    f8:46:c5:7e:32:85:e2:5f:d8:47:5a:09:ef:b5:67:
                    c3:8e:2c:ff:0a:f9:0d:71:11:92:bb:e7:ea:fb:28:
                    ba:a3:b0:83:16:f3:bc:de:8b:16:d2:ed:d1:b3:c9:
                    34:cc:90:a0:2b:ba:e4:1b:d4:9d:6a:18:ca:4b:a0:
                    a4:e9:8f:19:fe:aa:89:f0:70:76:66:b1:53:3a:56:
                    62:04:e2:6d:ee:df:07:3d:7a:d0:8e:be:b6:68:d7:
                    82:b8:66:d4:5b:a1:df:87:00:b5:ba:85:2f:2e:ae:
                    7f:5e:28:89:07:dc:08:5b:0e:0c:bf:95:fc:6d:a4:
                    40:fb:b5:1c:d7:92:56:88:c0:6f:eb:6d:82:94:e4:
                    26:08:7b:7d:47:ef:c2:e4:ce:38:82:6f:5a:93:3b:
                    d8:4b:c3:03:5c:4a:5e:78:f5:20:7f:0a:ee:78:af:
                    e1:eb:53:a4:b5:56:9e:e9:23:62:9d:e3:fa:38:2d:
                    c1:87:6d:5d:93:d8:76:73:d2:fb:f8:3d:83:13:ea:
                    fe:a5:e2:a3:5b:cc:a0:ac:f0:20:9b:ea:95:b8:30:
                    bf:80:7c:9e:8a:b5:3f:b8:90:2b:26:fa:5e:28:72:
                    31:45:b1:c9:af:dd:52:ee:eb:89:2c:42:69:2e:c7:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:18:d4:d6:3a:fb:fe:ca:a8:17:07:21:b9:d2:32:2b:e9:cf:
         67:34:21:ac:a6:05:f5:3a:28:fd:41:3a:40:dc:27:cc:08:95:
         89:4c:f8:ce:52:98:4a:75:28:40:e9:ac:af:60:39:c0:b6:46:
         55:14:ad:27:20:a0:f1:74:77:8a:6b:0e:8a:99:fc:92:fa:ee:
         9c:20:41:92:4b:52:99:10:10:de:97:65:c4:f5:e8:d3:ef:b4:
         16:f9:19:50:d2:78:92:f1:f1:2e:27:f6:68:47:27:dc:e9:f2:
         e1:58:3e:3c:b9:2b:24:20:39:84:e0:90:fb:d3:74:5b:6c:a4:
         45:be:8f:ab:c3:3e:17:7f:da:f8:7a:d7:cf:30:b2:0b:0b:d9:
         66:c9:e1:06:34:d1:91:f8:99:9a:ab:a9:cf:c8:cb:c1:51:3e:
         be:a5:7e:86:b2:2c:c9:cd:52:4e:4a:5e:5c:b1:22:dd:55:83:
         d4:92:5a:b7:fd:45:35:fd:2c:d5:cb:f4:0d:54:0b:e6:18:1b:
         90:fb:b0:eb:af:ff:9a:a1:f1:6e:c2:53:7e:68:20:33:02:19:
         b6:6a:98:76:b2:74:8e:35:ff:a4:86:d3:89:e9:c8:72:c8:c7:
         7f:63:de:ef:c2:83:c0:8c:23:b2:2c:f8:a1:fd:32:b6:9d:a2:
         a1:e8:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:45:11 2025 by rpki-client