Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/4qWxClzYqtKSLHXj3XsUJtoGJAk.cer
File:                     4qWxClzYqtKSLHXj3XsUJtoGJAk.cer (raw, json)
Hash identifier:          ygenPVi3T2qxJjOZ0wJa+qaXa/TzwDKV9s4KKp2W+ao=
Subject key identifier:   E2:A5:B1:0A:5C:D8:AA:D2:92:2C:75:E3:DD:7B:14:26:DA:06:24:09
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1D1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/HUEIDING/4qWxClzYqtKSLHXj3XsUJtoGJAk.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/HUEIDING/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Fri 26 Feb 2021 04:14:48 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 2404:6ec0::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7453 (0x1d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Feb 26 04:14:48 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E2A5B10A5CD8AAD2922C75E3DD7B1426DA062409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:df:ff:5a:7f:d9:51:c2:38:6b:02:57:68:20:
                    29:e3:9c:ee:28:60:ca:ad:16:e2:40:40:3b:92:ea:
                    d4:4f:72:62:77:7c:be:3f:64:08:0a:ef:60:e8:59:
                    77:e4:33:69:bd:44:e1:c3:3a:89:25:dd:65:e6:fc:
                    1d:9b:3c:b6:98:a9:75:f1:05:c2:cc:ac:8c:0c:49:
                    a5:2c:be:7a:81:fc:99:c3:0a:8e:ed:4b:1d:81:ef:
                    00:e0:56:cb:f5:93:ee:63:77:fe:dd:d3:df:39:0e:
                    dc:20:e5:b0:72:8f:45:fa:d5:0d:3f:ad:4a:64:c4:
                    81:bb:7a:6b:73:7c:3f:df:7e:18:cc:94:43:55:d5:
                    46:dc:4f:e7:23:f8:42:88:ee:0f:16:29:6b:34:cc:
                    90:a2:b4:2a:f4:1b:65:9b:59:cc:d7:b7:9f:1f:4c:
                    9c:3e:5c:6d:fb:09:07:b9:de:56:f7:d3:a1:c5:51:
                    7a:e5:82:de:5f:8a:3f:e4:5e:19:e3:3f:4a:8c:fd:
                    0c:d3:38:92:4d:5a:f3:ff:16:29:62:9e:a8:e0:18:
                    7e:8e:7b:e1:9b:0a:77:04:fc:cd:42:b1:44:6f:fb:
                    56:78:f0:84:7b:e7:c4:af:d7:ac:91:c3:c8:b4:7b:
                    c6:ea:3f:19:84:98:cd:8f:b7:06:c2:4d:ff:ad:cd:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:B1:0A:5C:D8:AA:D2:92:2C:75:E3:DD:7B:14:26:DA:06:24:09
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUEIDING/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUEIDING/4qWxClzYqtKSLHXj3XsUJtoGJAk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:a9:86:38:4a:b8:9d:9e:9e:47:f2:eb:3d:46:7b:08:d6:
         e5:69:9e:34:e5:86:41:71:ff:83:2b:d0:7b:88:57:a2:09:ff:
         a5:c8:cf:47:4c:84:66:8d:19:81:30:93:60:3e:c0:4d:21:e2:
         a3:e1:0b:54:d3:7a:12:0f:9a:67:ca:8d:f3:fe:59:9d:66:8b:
         0f:30:96:66:3c:f7:bf:7e:58:ac:9f:b8:ea:ec:f3:79:32:37:
         9a:db:96:6b:b0:74:e0:fe:2f:c3:f3:5c:b3:f4:5c:3c:11:4e:
         a9:8e:60:38:b4:85:12:58:f5:1d:17:79:2b:9d:e5:8f:8f:85:
         b2:a9:87:b8:e1:7c:ae:98:f0:7a:5f:bc:eb:83:b9:01:f1:81:
         8a:1c:60:78:3a:a0:dd:c5:fd:f3:49:e3:b2:d5:7a:60:f4:3a:
         60:63:df:ff:d4:30:82:16:22:e8:42:48:6c:e9:9d:b3:0e:2f:
         de:27:eb:50:f6:bb:88:79:cf:0f:18:07:f6:dd:6a:52:7b:98:
         9f:78:5a:a5:a5:9a:6d:32:fd:0d:6c:b4:9c:6d:80:c6:f9:4b:
         aa:36:ba:90:54:d3:33:d4:f9:b4:76:0a:6d:6e:e9:52:44:c5:
         9c:b7:f5:57:6f:8d:75:1e:79:19:e1:25:0f:d1:97:13:94:12:
         6d:be:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----