Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
File:                     7cBFehQLLUNs5_rmfYSRz_xufz4.cer (raw, json)
Hash identifier:          ar2eQrhhn/HKYciEyrAgwVH8p0LLie+JHkuiMQGJNT8=
Subject key identifier:   ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 26 Aug 2024 01:57:12 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.123.0.0/22
                          IP: 2403:9a40::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11555 (0x2d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Aug 26 01:57:12 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:c1:3d:9e:79:c9:a8:c5:75:f0:22:b3:eb:
                    f8:79:bd:01:66:36:d0:00:34:a3:39:81:33:9f:92:
                    d8:c9:92:8c:f8:a6:c5:cb:70:7b:33:16:cf:6d:17:
                    8b:ea:d1:8e:7c:dd:43:fe:c2:f6:ff:71:01:fe:80:
                    11:ea:13:e8:81:f9:37:8a:e6:5e:af:12:17:3b:4f:
                    a1:79:b3:e8:52:92:9a:d8:a0:d0:08:56:7a:05:91:
                    01:a8:7c:20:ea:60:0a:0e:b9:08:b1:2a:e4:3f:5e:
                    13:cc:4b:ef:d8:47:6f:e2:bf:13:fa:ee:e3:a3:69:
                    58:62:42:5c:1a:b3:60:d7:23:eb:62:f1:5f:01:73:
                    21:5e:3b:ce:c7:ca:cb:32:de:3d:f0:ba:d0:42:f1:
                    3f:36:37:e7:53:59:22:83:d0:1c:36:1a:9f:cf:21:
                    86:3d:3c:f4:6c:7e:5f:63:91:cc:6a:60:f7:bb:46:
                    5f:eb:f0:f1:41:86:18:f9:e1:09:25:66:f4:db:da:
                    75:60:56:cc:23:a3:3e:96:89:88:46:3c:73:a2:25:
                    b3:a5:72:43:ee:d7:37:d5:45:6f:47:f2:30:ef:8c:
                    2f:49:7d:b7:c1:20:92:e3:ce:1b:b0:89:56:19:83:
                    d5:3e:da:0a:7d:3c:b8:93:a6:d0:96:9e:af:0c:b6:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.0.0/22
                IPv6:
                  2403:9a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:42:14:81:af:07:2e:cf:e0:f4:90:c5:8d:46:ce:f1:44:ef:
         fa:97:30:5c:64:16:2e:d2:37:09:aa:0f:e2:a3:a8:83:a2:eb:
         d5:1f:72:c3:d2:85:76:21:96:0f:8f:34:07:48:d0:a6:bd:58:
         c6:4d:3d:8f:41:94:5f:1e:9b:cd:9e:26:66:63:36:fb:d0:c6:
         f5:32:01:02:fa:8e:0d:ad:6d:75:e8:b9:64:19:13:d3:0a:af:
         49:27:eb:ec:f5:ab:b1:45:63:30:a6:33:71:d3:72:b9:09:15:
         57:62:89:51:81:aa:61:10:30:e5:3e:98:6b:6f:7f:a7:88:05:
         29:50:27:e4:f0:35:c0:6f:92:31:39:46:3a:85:8c:00:4c:0d:
         80:6a:f7:3c:fc:74:ed:1c:e5:86:da:c0:08:07:0c:c6:b3:2e:
         a1:22:1d:bf:cd:6c:c8:ce:e5:e1:1d:95:de:e6:71:c1:ee:d2:
         2f:ad:33:b1:77:1a:b4:3d:7f:7b:11:91:65:bd:e5:06:0d:33:
         38:b8:91:2a:34:86:ce:41:dd:22:07:cf:39:8d:54:fa:15:40:
         12:c1:a8:22:57:62:c4:a2:6d:aa:f3:25:78:ce:4c:12:a0:74:
         6e:cf:da:64:66:1a:56:ee:22:4d:fc:c3:e4:15:e7:d4:78:3f:
         00:ff:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----