Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
File:                     AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer (raw, json)
Hash identifier:          M+z9fVEFEVVYhzoo9vnuaHUeKO1mHQI/gZyAF8erx94=
Subject key identifier:   02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       34FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:08 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    AS: 38042
                          AS: 134823
                          IP: 103.123.132.0/22
                          IP: 103.137.22.0/23
                          IP: 103.208.196.0/23
                          IP: 103.246.218.0/23
                          IP: 123.253.140.0/23
                          IP: 202.153.4.0/23
                          IP: 2001:df0:4e00::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13567 (0x34ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:08 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:9e:ed:2c:58:64:7c:90:05:d1:85:47:27:
                    00:fa:6f:23:3b:38:f2:d9:0f:a3:5e:ef:4c:e0:3c:
                    b9:b8:6b:67:d6:60:4f:cf:ec:ba:05:e3:f3:ad:5e:
                    8f:dd:75:35:26:61:7b:1d:3b:8f:38:d6:d0:10:d7:
                    7a:c3:92:d5:ab:d8:fe:aa:ef:90:43:66:bc:e3:ab:
                    60:d5:8b:4d:77:b0:ee:54:b2:24:46:04:07:0b:86:
                    ec:dd:fb:19:42:cd:41:e7:a3:37:c7:08:9b:df:3c:
                    58:3f:2a:ac:42:74:6b:d8:b4:e9:7a:82:b0:76:23:
                    21:25:4a:5c:0e:bc:41:38:47:76:2d:cd:ff:1d:0d:
                    5c:f6:93:d0:63:13:36:5e:e1:47:98:76:80:34:fc:
                    a8:73:22:4b:11:29:e6:97:88:f1:f8:c9:71:2a:a3:
                    12:03:42:21:94:7c:e4:aa:80:fb:ec:c5:46:5e:e1:
                    7f:87:4f:df:3a:91:33:01:9a:5f:b1:41:79:6a:e1:
                    58:72:bb:6b:7e:ae:8a:69:c7:23:46:5a:63:07:95:
                    53:82:23:27:45:43:70:39:10:3d:43:e0:ca:a8:0c:
                    22:f4:4b:13:fd:89:d8:58:74:a0:06:06:e4:af:cb:
                    41:18:44:f0:c3:49:97:a8:bb:7f:10:86:ee:d3:5e:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38042
                  134823

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.132.0/22
                  103.137.22.0/23
                  103.208.196.0/23
                  103.246.218.0/23
                  123.253.140.0/23
                  202.153.4.0/23
                IPv6:
                  2001:df0:4e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:71:35:a5:55:00:98:e5:ef:e7:c1:63:28:ea:e8:78:82:
         e5:50:19:06:13:9c:88:43:87:dd:d1:fb:a2:4d:05:66:cc:32:
         41:57:94:df:af:ab:d7:1e:8a:32:e4:9c:ca:90:53:86:cc:9b:
         24:90:e5:76:c7:ab:6d:b9:5a:76:bf:e8:c1:04:e7:88:38:70:
         36:4f:27:29:fd:4f:8c:3b:2c:39:68:b5:d4:c5:1f:67:95:d9:
         08:24:d5:f5:af:bd:4e:51:ee:a2:31:0e:3a:64:1b:a5:66:eb:
         7f:61:97:6f:62:06:15:c8:9a:db:ea:a9:e8:bc:3a:a2:28:50:
         8b:f5:c2:b1:5b:57:42:00:1b:a2:9f:4c:fb:ae:64:9c:92:ab:
         9b:b3:14:1c:b4:7a:67:f7:6b:ea:18:bb:12:25:71:f6:2f:e5:
         ad:86:52:71:81:fa:f2:7b:7a:6c:f9:35:84:5b:d3:e6:c3:f9:
         8e:b4:90:0f:98:cc:fc:9d:da:0d:8c:8a:b0:c2:65:6d:7d:cd:
         d1:67:c9:22:f3:40:1c:1a:18:f5:27:1f:cb:0f:63:6d:17:ca:
         c2:7c:9e:43:88:27:01:22:96:4c:68:4a:50:e0:55:b3:6f:57:
         65:ee:92:09:fc:a7:e7:8d:01:5d:f2:2a:36:fe:67:93:25:4a:
         02:a6:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:36 2025 by rpki-client