Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0p22aJ2cWC1_oPCyYvTCT3qZB84.cer
File:                     0p22aJ2cWC1_oPCyYvTCT3qZB84.cer (raw, json)
Hash identifier:          Zrt+PHqTRfpyxvPQ9khVIqHFnbp8ZCwGCTTtjnSARuE=
Subject key identifier:   D2:9D:B6:68:9D:9C:58:2D:7F:A0:F0:B2:62:F4:C2:4F:7A:99:07:CE
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1930
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANLIFE/0p22aJ2cWC1_oPCyYvTCT3qZB84.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANLIFE/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:27 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.127.132.0/22
                          IP: 2404:20c0::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6448 (0x1930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D29DB6689D9C582D7FA0F0B262F4C24F7A9907CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:2d:44:06:f1:7a:6f:d2:49:2a:1d:c1:ef:
                    7b:05:ea:04:0c:66:70:37:cb:b6:a5:55:e4:6f:e1:
                    8f:06:2b:2c:67:bb:52:fb:7d:d3:8e:8f:a0:37:23:
                    b9:4f:1d:b6:4e:05:da:a3:f8:ae:b9:d2:ce:bf:dd:
                    58:f6:22:3f:b8:08:f5:91:6d:49:2f:c0:ba:33:0f:
                    76:51:13:9b:79:26:c1:8e:1a:37:52:40:65:d2:ad:
                    1f:24:b4:49:5b:6f:63:db:49:0d:24:a4:3f:95:3b:
                    83:29:3e:50:4c:90:bd:ba:77:83:02:93:09:e2:a3:
                    0d:8b:01:ee:ad:a6:b4:04:fc:1d:c4:1a:65:fb:47:
                    da:62:d6:e6:5d:4d:b9:f6:c3:9f:76:e4:73:d4:2b:
                    1b:91:6e:6e:0d:c8:ed:79:88:b2:47:39:4c:02:33:
                    ab:06:d8:bd:04:83:17:cb:de:b6:29:cf:8b:b5:22:
                    07:6b:f1:bb:da:60:ea:6b:fe:00:f2:3e:ed:f6:c2:
                    63:26:46:2c:ab:4b:62:5e:0a:09:34:8a:71:f6:ad:
                    5b:e7:6c:72:83:89:a1:b3:9a:7e:6f:53:96:28:a1:
                    d2:b1:21:11:0c:bd:7b:4d:5b:f4:11:6b:4d:2e:59:
                    71:16:f5:1b:b2:0b:53:18:3a:70:8c:3a:20:63:d1:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9D:B6:68:9D:9C:58:2D:7F:A0:F0:B2:62:F4:C2:4F:7A:99:07:CE
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANLIFE/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANLIFE/0p22aJ2cWC1_oPCyYvTCT3qZB84.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.132.0/22
                IPv6:
                  2404:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:d5:c0:e8:a6:36:49:1c:0f:8e:88:64:e4:67:f9:47:c9:b5:
         89:81:c0:c8:6d:50:fd:42:99:bb:b6:1e:8f:58:fa:03:db:e2:
         75:4f:b0:1f:f1:79:b1:8f:be:5c:ab:6b:00:ef:0b:c9:90:e2:
         ca:a8:17:16:a9:c9:9a:ef:30:84:63:35:08:02:1b:f3:35:29:
         bd:fa:09:33:a6:39:52:d4:eb:03:11:59:d8:22:f5:9f:13:e9:
         64:a8:85:61:89:74:81:8a:7d:af:d9:86:32:5c:64:05:23:3e:
         d4:6a:2b:33:bb:2e:ff:c6:dc:d9:d5:bb:86:df:cb:2a:9a:90:
         4c:15:a9:cb:24:71:ae:02:83:2b:b0:9f:07:29:1f:aa:12:b5:
         46:73:19:6b:33:a0:6d:76:d8:96:6f:35:f6:f7:a6:16:c0:70:
         00:c2:04:27:d9:39:4e:81:e7:6b:f5:c7:12:31:88:92:9f:f3:
         a6:23:79:a8:46:44:00:30:f4:50:8b:2d:4b:25:e6:7c:dc:5b:
         a1:29:8a:85:9a:78:b3:9f:22:e5:4a:1d:fd:33:4b:20:82:65:
         de:06:ab:30:6d:61:c4:82:0e:79:d6:7a:80:d9:af:d5:b0:0c:
         fd:81:6b:14:59:ca:c8:b5:d6:83:0a:a0:84:ea:18:3e:5e:54:
         99:66:33:5a
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgICGTAwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIwMDkyOTA5NTMyN1oXDTIxMDkyOTA5NTEyM1owMzEx
MC8GA1UEAxMoRDI5REI2Njg5RDlDNTgyRDdGQTBGMEIyNjJGNEMyNEY3QTk5MDdD
RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeKLUQG8Xpv0kkqHcHv
ewXqBAxmcDfLtqVV5G/hjwYrLGe7Uvt9046PoDcjuU8dtk4F2qP4rrnSzr/dWPYi
P7gI9ZFtSS/AujMPdlETm3kmwY4aN1JAZdKtHyS0SVtvY9tJDSSkP5U7gyk+UEyQ
vbp3gwKTCeKjDYsB7q2mtAT8HcQaZftH2mLW5l1NufbDn3bkc9QrG5Fubg3I7XmI
skc5TAIzqwbYvQSDF8vetinPi7UiB2vxu9pg6mv+API+7fbCYyZGLKtLYl4KCTSK
cfatW+dscoOJobOafm9Tliih0rEhEQy9e01b9BFrTS5ZcRb1G7ILUxg6cIw6IGPR
2u8CAwEAAaOCAmcwggJjMB0GA1UdDgQWBBTSnbZonZxYLX+g8LJi9MJPepkHzjAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgd4GCCsGAQUFBwELBIHRMIHOMDwGCCsGAQUFBzAF
hjByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTElG
RS8wWwYIKwYBBQUHMAqGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9UQUlXQU5MSUZFLzBwMjJhSjJjV0MxX29QQ3lZdlRDVDNxWkI4NC5tZnQw
MQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnf4QwDQQCAAIwBwMFACQE
IMAwDQYJKoZIhvcNAQELBQADggEBAA3VwOimNkkcD46IZORn+UfJtYmBwMhtUP1C
mbu2Ho9Y+gPb4nVPsB/xebGPvlyrawDvC8mQ4sqoFxapyZrvMIRjNQgCG/M1Kb36
CTOmOVLU6wMRWdgi9Z8T6WSohWGJdIGKfa/ZhjJcZAUjPtRqKzO7Lv/G3NnVu4bf
yyqakEwVqcskca4CgyuwnwcpH6oStUZzGWszoG122JZvNfb3phbAcADCBCfZOU6B
52v1xxIxiJKf86YjeahGRAAw9FCLLUsl5nzcW6EpioWaeLOfIuVKHf0zSyCCZd4G
qzBtYcSCDnnWeoDZr9WwDP2BaxRZysi11oMKoITqGD5eVJlmM1o=
-----END CERTIFICATE-----