Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/-6Qt6VN-ifLU1P34t5WGihqKBew.cer
File:                     -6Qt6VN-ifLU1P34t5WGihqKBew.cer (raw, json)
Hash identifier:          7wDW8DmF6BKlDhq3J/FxyrdMfKzJMmHDI/KDWNySFEE=
Subject key identifier:   FB:A4:2D:E9:53:7E:89:F2:D4:D4:FD:F8:B7:95:86:8A:1A:8A:05:EC
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1A2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CYSWORLD/-6Qt6VN-ifLU1P34t5WGihqKBew.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CYSWORLD/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:39 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.129.100.0/22
                          IP: 2403:7ac0::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6700 (0x1a2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FBA42DE9537E89F2D4D4FDF8B795868A1A8A05EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:1f:b0:17:af:46:b7:2d:b3:40:bd:2d:b5:
                    b4:0b:0e:a6:a2:cd:65:09:07:2b:6c:ca:c3:20:c9:
                    e6:9f:50:f9:ae:cb:60:28:0d:aa:ee:b5:3f:cc:67:
                    6e:ea:9d:fe:4b:9e:46:1f:de:27:e4:ec:41:6e:ed:
                    98:47:c4:ee:25:69:7a:6a:75:02:55:41:ee:c7:8c:
                    82:ca:81:44:74:c7:fd:ae:61:17:07:9d:bd:f5:b3:
                    3e:76:39:c3:d1:1f:b5:6f:91:77:ad:ac:38:1c:fb:
                    df:eb:ee:9b:f8:51:aa:c7:2d:b2:37:8f:37:19:7d:
                    18:18:d5:1a:19:02:52:25:e0:e7:9b:a2:b8:e1:35:
                    98:ea:93:57:19:10:43:51:9d:b8:d9:9b:61:d0:c9:
                    0b:ee:71:48:a9:ea:b5:c2:d1:22:4a:3d:79:77:19:
                    87:b3:dc:3a:2e:a9:a1:a2:4a:d8:fc:09:2e:82:e1:
                    14:72:0d:e7:3c:95:46:85:c1:8b:c5:ea:fb:f2:84:
                    74:13:d4:fc:29:5d:4a:a1:fb:03:d9:94:f9:74:a0:
                    07:ef:01:dd:86:78:2e:cb:71:27:bd:d8:0b:e2:84:
                    d9:91:20:98:4d:39:46:9f:d1:aa:8f:e3:58:b3:73:
                    64:3f:d3:d8:04:05:8f:e3:9b:e9:36:bb:40:6a:f8:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:2D:E9:53:7E:89:F2:D4:D4:FD:F8:B7:95:86:8A:1A:8A:05:EC
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYSWORLD/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYSWORLD/-6Qt6VN-ifLU1P34t5WGihqKBew.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.100.0/22
                IPv6:
                  2403:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:4a:2e:2c:e8:60:8d:1f:bd:c2:c1:56:34:1f:db:ec:f6:af:
         cf:af:94:7d:1a:11:a8:c5:88:19:84:f1:ae:5a:a0:cb:a5:5d:
         62:39:7c:7f:e1:e1:d7:c7:54:13:85:37:86:f5:03:bc:76:e9:
         a9:9b:1e:28:d3:52:b0:75:c0:ed:1c:b8:3e:66:bd:05:59:82:
         52:0b:c6:fd:3c:37:70:9f:a5:fd:33:50:b3:4e:f1:d2:02:a4:
         68:1a:33:c6:c4:41:ed:33:ff:5c:6b:0d:9e:78:ea:85:b9:e3:
         d7:bb:4a:3c:15:74:a3:77:bb:57:ef:d1:fe:64:99:4e:ec:9f:
         dc:4f:2f:5b:61:27:ab:1e:7a:23:ca:d9:8d:4c:f5:42:91:df:
         10:b3:08:ee:21:36:5c:92:c2:3b:e4:5d:14:d9:1b:47:5c:3a:
         aa:15:c7:4a:19:65:d2:97:35:6f:f7:79:3f:26:d3:10:9a:c2:
         23:b8:ae:22:c0:59:b8:88:15:61:70:0c:cb:4a:92:6f:e8:21:
         f2:84:de:7d:ad:17:ac:ee:61:98:77:ab:84:12:9e:47:a4:68:
         e7:b7:bd:c8:ad:93:0c:6e:d2:46:7d:13:b4:c2:2d:f1:b6:c3:
         e9:c4:64:ea:4c:63:4e:3e:eb:72:2f:b4:f2:14:ab:74:9a:e1:
         43:e9:16:c2
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgICGiwwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIwMDkyOTA5NTMzOVoXDTIxMDkyOTA5NTEyM1owMzEx
MC8GA1UEAxMoRkJBNDJERTk1MzdFODlGMkQ0RDRGREY4Qjc5NTg2OEExQThBMDVF
QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ2eH7AXr0a3LbNAvS21
tAsOpqLNZQkHK2zKwyDJ5p9Q+a7LYCgNqu61P8xnbuqd/kueRh/eJ+TsQW7tmEfE
7iVpemp1AlVB7seMgsqBRHTH/a5hFwedvfWzPnY5w9EftW+Rd62sOBz73+vum/hR
qsctsjePNxl9GBjVGhkCUiXg55uiuOE1mOqTVxkQQ1GduNmbYdDJC+5xSKnqtcLR
Iko9eXcZh7PcOi6poaJK2PwJLoLhFHIN5zyVRoXBi8Xq+/KEdBPU/CldSqH7A9mU
+XSgB+8B3YZ4LstxJ73YC+KE2ZEgmE05Rp/Rqo/jWLNzZD/T2AQFj+Ob6Ta7QGr4
YIkCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBT7pC3pU36J8tTU/fi3lYaKGooF7DAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdoGCCsGAQUFBwELBIHNMIHKMDoGCCsGAQUFBzAF
hi5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lTV09STEQv
MFkGCCsGAQUFBzAKhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ1lTV09STEQvLTZRdDZWTi1pZkxVMVAzNHQ1V0dpaHFLQmV3Lm1mdDAxBggr
BgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmeBZDANBAIAAjAHAwUAJAN6wDAN
BgkqhkiG9w0BAQsFAAOCAQEAYkouLOhgjR+9wsFWNB/b7Pavz6+UfRoRqMWIGYTx
rlqgy6VdYjl8f+Hh18dUE4U3hvUDvHbpqZseKNNSsHXA7Ry4Pma9BVmCUgvG/Tw3
cJ+l/TNQs07x0gKkaBozxsRB7TP/XGsNnnjqhbnj17tKPBV0o3e7V+/R/mSZTuyf
3E8vW2Enqx56I8rZjUz1QpHfELMI7iE2XJLCO+RdFNkbR1w6qhXHShll0pc1b/d5
PybTEJrCI7iuIsBZuIgVYXAMy0qSb+gh8oTefa0XrO5hmHerhBKeR6Ro57e9yK2T
DG7SRn0TtMIt8bbD6cRk6kxjTj7rci+08hSrdJrhQ+kWwg==
-----END CERTIFICATE-----