Certificate

$ rpki-client -vvf rpki.co/repo/AS945/3/ROUTER-000003B1-510F485D29A29DB7B515F9C478F8ED3CB7AA7D23.cer
File:                     ROUTER-000003B1-510F485D29A29DB7B515F9C478F8ED3CB7AA7D23.cer (raw, json)
Hash identifier:          I5Yfjo0iEjhfNAuoCKr0lrWltdtN/7vu0COtlx2kEac=
Subject key identifier:   51:0F:48:5D:29:A2:9D:B7:B5:15:F9:C4:78:F8:ED:3C:B7:AA:7D:23
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Certificate issuer:       /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial:       2EC13004657DB6A97D8904B318CDFBA0D6181AD8
Authority info access:    rsync://dev.tw/rpki/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
BGPsec ECDSA public key:  MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEhv5HEBGixUjKJTlenvcD1Axyi07rFdVY1KhN4vMPYy5y0Mx6zfaiEqJN27jK/l61xC36Vsaezd7eXAsZ1AEEsQ==
Router key not before:    Mon 11 Mar 2024 03:08:37 +0000
Router key not after:     Mon 10 Mar 2025 03:13:37 +0000
Subordinate resources:    AS: 945
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c1:30:04:65:7d:b6:a9:7d:89:04:b3:18:cd:fb:a0:d6:18:1a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
        Validity
            Not Before: Mar 11 03:08:37 2024 GMT
            Not After : Mar 10 03:13:37 2025 GMT
        Subject: CN=510F485D29A29DB7B515F9C478F8ED3CB7AA7D23
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:86:fe:47:10:11:a2:c5:48:ca:25:39:5e:9e:f7:
                    03:d4:0c:72:8b:4e:eb:15:d5:58:d4:a8:4d:e2:f3:
                    0f:63:2e:72:d0:cc:7a:cd:f6:a2:12:a2:4d:db:b8:
                    ca:fe:5e:b5:c4:2d:fa:56:c6:9e:cd:de:de:5c:0b:
                    19:d4:01:04:b1
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0F:48:5D:29:A2:9D:B7:B5:15:F9:C4:78:F8:ED:3C:B7:AA:7D:23
            X509v3 Authority Key Identifier:
                keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                BGPsec Router
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:9c:17:7f:c2:47:44:dd:c3:1a:cd:0a:a5:f7:8e:98:90:
         5e:ab:92:07:81:72:f1:3e:0f:fa:45:f7:1b:0e:06:df:aa:7f:
         b8:d2:67:05:67:63:c1:70:f6:fc:e9:f5:34:f6:79:41:e6:a3:
         91:a9:9e:bd:6c:78:a0:b2:21:51:0c:6f:4f:45:20:d9:0e:78:
         0a:61:2a:36:e9:ad:73:9e:15:72:88:ac:2d:ed:3a:6a:9b:ab:
         52:55:d1:36:90:fe:7b:76:d7:90:c1:83:6c:c4:53:f6:71:3f:
         8c:b5:93:a8:a4:b3:18:ee:c7:f8:f6:bb:27:dc:ef:d2:3e:22:
         2d:40:e0:22:2f:2a:bb:32:c1:9f:75:cb:7d:d6:9e:da:ad:64:
         40:af:a8:f8:ac:ab:58:88:c3:c5:6d:45:84:42:40:3a:30:2a:
         43:f8:11:01:c6:58:19:9d:d6:a5:b8:30:c4:01:36:fd:2f:d9:
         41:54:b4:0f:de:a6:b3:ca:9a:06:c8:e8:64:f5:0e:1e:32:2c:
         7d:1d:86:ab:06:8a:a6:a7:e9:60:74:08:5d:c0:42:c5:0b:a1:
         54:62:cd:10:f4:e0:af:19:4b:98:30:64:27:e9:c9:cc:46:4a:
         f0:c0:32:29:7e:7c:a4:1d:21:99:96:9b:28:60:bc:f8:cb:ca:
         4e:c4:c6:11
-----BEGIN CERTIFICATE-----
MIIDjDCCAnSgAwIBAgIULsEwBGV9tql9iQSzGM37oNYYGtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk5RTM2NzdGOEUyREVGMkE1ODM3QzNENEE3Njg2QzdD
ODlCNTFDNjAeFw0yNDAzMTEwMzA4MzdaFw0yNTAzMTAwMzEzMzdaMDMxMTAvBgNV
BAMTKDUxMEY0ODVEMjlBMjlEQjdCNTE1RjlDNDc4RjhFRDNDQjdBQTdEMjMwWTAT
BgcqhkjOPQIBBggqhkjOPQMBBwNCAASG/kcQEaLFSMolOV6e9wPUDHKLTusV1VjU
qE3i8w9jLnLQzHrN9qISok3buMr+XrXELfpWxp7N3t5cCxnUAQSxo4IBYTCCAV0w
HQYDVR0OBBYEFFEPSF0pop23tRX5xHj47Ty3qn0jMB8GA1UdIwQYMBaAFNmeNnf4
4t7ypYN8PUp2hsfIm1HGMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEF
BQcDHjBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0
NS8zL0Q5OUUzNjc3RjhFMkRFRjJBNTgzN0MzRDRBNzY4NkM3Qzg5QjUxQzYuY3Js
MGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcvcnBr
aS9BdWd1c3QvMC9EOTlFMzY3N0Y4RTJERUYyQTU4MzdDM0Q0QTc2ODZDN0M4OUI1
MUM2LmNlcjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/
BAowCKAGMAQCAgOxMA0GCSqGSIb3DQEBCwUAA4IBAQB9WJwXf8JHRN3DGs0KpfeO
mJBeq5IHgXLxPg/6RfcbDgbfqn+40mcFZ2PBcPb86fU09nlB5qORqZ69bHigsiFR
DG9PRSDZDngKYSo26a1znhVyiKwt7Tpqm6tSVdE2kP57dteQwYNsxFP2cT+MtZOo
pLMY7sf49rsn3O/SPiItQOAiLyq7MsGfdct91p7arWRAr6j4rKtYiMPFbUWEQkA6
MCpD+BEBxlgZndaluDDEATb9L9lBVLQP3qazypoGyOhk9Q4eMix9HYarBoqmp+lg
dAhdwELFC6FUYs0Q9OCvGUuYMGQn6cnMRkrwwDIpfnykHSGZlpsoYLz4y8pOxMYR
-----END CERTIFICATE-----