Certificate

$ rpki-client -vvf dev.tw/rpki/August/2/6B32D831587A40A0EB07B85A4E1246C93E561F86.cer
File:                     6B32D831587A40A0EB07B85A4E1246C93E561F86.cer (raw, json)
Hash identifier:          2SPCJeGTzCfuZ8dPyQJXz8P1wRmmCO7BRmGiWXjyGW0=
Subject key identifier:   6B:32:D8:31:58:7A:40:A0:EB:07:B8:5A:4E:12:46:C9:3E:56:1F:86
Authority key identifier: DB:0E:EC:2B:FD:2F:E5:56:26:1F:B4:FF:C4:EC:97:A5:FC:13:32:CB
Certificate issuer:       /CN=db0eec2bfd2fe556261fb4ffc4ec97a5fc1332cb
Certificate serial:       09CECA8E04A1876FB2CF1DC814CCF1BA280E087D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2w7sK_0v5VYmH7T_xOyXpfwTMss.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/0/6B32D831587A40A0EB07B85A4E1246C93E561F86.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 04:13:42 +0000
Certificate not after:    Thu 19 Jun 2025 04:18:42 +0000
Subordinate resources:    AS: 51930

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ce:ca:8e:04:a1:87:6f:b2:cf:1d:c8:14:cc:f1:ba:28:0e:08:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0eec2bfd2fe556261fb4ffc4ec97a5fc1332cb
        Validity
            Not Before: Jun 20 04:13:42 2024 GMT
            Not After : Jun 19 04:18:42 2025 GMT
        Subject: CN=6B32D831587A40A0EB07B85A4E1246C93E561F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:0d:8f:71:cc:b9:75:f9:4a:19:90:cd:14:
                    70:02:80:b4:e7:0f:30:96:0e:25:f7:26:8f:d6:4d:
                    1d:fb:61:a3:07:e5:43:ae:75:5a:18:e9:03:5d:43:
                    86:9d:2d:7a:3a:89:0a:bf:1e:b7:80:f0:f9:a2:b1:
                    af:fc:a1:8c:09:71:43:34:2b:4b:83:d0:5c:e4:1d:
                    2d:4a:09:5c:45:bd:80:61:78:02:91:1d:8f:61:e7:
                    08:68:40:a0:ac:18:7c:a2:83:a5:bd:33:28:05:40:
                    d5:36:9b:bd:65:7b:83:3a:58:30:76:f8:41:bf:09:
                    de:93:1c:97:2e:db:28:1a:80:76:49:9c:87:87:0a:
                    c9:08:c8:06:ab:a7:e1:f2:a2:a3:9c:d7:ec:69:11:
                    f6:6e:68:81:0b:96:c6:6f:36:23:5d:44:49:3b:bd:
                    08:88:e8:6d:34:53:f4:e4:45:31:c1:c2:ca:c0:86:
                    7b:06:3e:ad:61:db:b6:1b:d4:f5:b0:a8:93:76:7f:
                    02:cf:ba:a9:55:63:93:c5:11:a2:d1:3c:c0:c7:d6:
                    47:1b:e4:56:c8:1e:ef:51:9e:6e:63:10:57:83:e8:
                    f7:e7:b5:be:6c:b4:fe:7c:7b:fd:d2:96:5a:31:c2:
                    3b:04:6c:5e:94:55:c9:f5:66:ba:5c:b6:b7:52:7b:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:32:D8:31:58:7A:40:A0:EB:07:B8:5A:4E:12:46:C9:3E:56:1F:86
            X509v3 Authority Key Identifier:
                keyid:DB:0E:EC:2B:FD:2F:E5:56:26:1F:B4:FF:C4:EC:97:A5:FC:13:32:CB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/2/DB0EEC2BFD2FE556261FB4FFC4EC97A5FC1332CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2w7sK_0v5VYmH7T_xOyXpfwTMss.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/0/6B32D831587A40A0EB07B85A4E1246C93E561F86.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51930

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:e8:90:f2:9f:29:93:20:78:39:3b:8a:1e:41:7a:1a:57:
         cc:b7:46:dc:09:d5:2b:36:45:b7:06:2f:86:60:94:6c:4c:86:
         4e:69:63:63:c7:ff:67:d8:eb:c2:4a:27:96:4d:0d:00:31:04:
         dc:75:5c:e0:2b:3a:27:70:7a:ba:ce:83:fe:b4:64:b7:13:af:
         02:f0:42:15:af:60:f0:cb:b8:48:72:09:04:23:65:55:1c:dc:
         ca:9a:0a:0e:73:23:ef:68:a1:aa:07:6e:b8:f9:c0:81:14:44:
         32:26:29:1f:70:78:a0:31:0f:7b:36:77:3a:01:2a:af:d5:83:
         9b:0c:59:43:fa:32:1e:8c:3e:33:ef:05:53:2f:d8:de:31:df:
         1f:44:db:1f:97:51:43:f0:a8:4a:32:7e:ae:4e:dc:12:12:a3:
         9a:6b:2e:92:60:d2:88:b8:9c:c3:e2:cf:96:c5:f9:e4:be:83:
         04:7a:c8:f0:6e:c4:ff:17:22:d6:c8:c5:9b:d5:98:3f:24:cf:
         5a:7f:2d:4d:cd:a3:09:da:53:30:10:10:59:2c:d5:7a:bf:e0:
         75:db:47:db:5e:3f:a6:74:6a:03:89:e8:b7:b7:b9:d5:5e:03:
         34:db:46:4f:73:2d:c7:33:97:0e:8e:61:87:ad:52:c9:22:03:
         41:80:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----