Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AwfjAL1ZTffAI3nfOP7oZsdYRW4.cer
File:                     AwfjAL1ZTffAI3nfOP7oZsdYRW4.cer (raw, json)
Hash identifier:          MK+VxUobJ1WYOQIy7upe23SBboxnNBPYVV1wSVgMTUA=
Subject key identifier:   03:07:E3:00:BD:59:4D:F7:C0:23:79:DF:38:FE:E8:66:C7:58:45:6E
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1960
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/FRAGRAN/AwfjAL1ZTffAI3nfOP7oZsdYRW4.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/FRAGRAN/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:29 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.122.204.0/22
                          IP: 2403:9440::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6496 (0x1960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0307E300BD594DF7C02379DF38FEE866C758456E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:78:4c:5c:8d:64:58:1d:95:db:e9:e6:e3:
                    4f:a2:2a:de:da:64:65:36:76:69:9c:34:20:57:48:
                    36:8a:b5:ec:7c:ee:de:57:fd:88:83:d3:c1:f8:ac:
                    33:7d:ce:1f:9f:d3:98:29:0f:7e:6b:67:ac:5b:1f:
                    06:f3:f9:4e:55:f1:79:9d:a2:1c:f7:7b:c7:25:cf:
                    7c:4a:00:80:9f:73:27:f3:b2:c2:75:2b:4d:3f:67:
                    ba:b0:b3:03:f5:40:59:8a:2e:ea:ef:52:96:d2:48:
                    9f:ea:46:31:3b:27:fc:fb:a0:51:32:da:eb:6e:2f:
                    10:a5:8e:3e:1c:98:9d:2a:82:3f:8a:8a:8b:00:64:
                    49:3b:ed:e7:4e:0a:11:e4:0f:eb:80:32:a0:d8:cf:
                    79:d5:ee:b9:de:8a:33:49:05:17:ce:81:fa:18:eb:
                    2e:06:7a:f9:ab:c5:0d:8e:77:1d:10:b7:ab:4e:cb:
                    3e:43:34:26:2c:9a:c3:67:39:78:f8:8c:00:e1:75:
                    ce:d9:bf:d7:7a:52:4c:52:e3:d8:ca:09:e2:6c:22:
                    33:91:ee:36:66:86:09:6f:01:ba:ec:5c:ba:e9:d7:
                    f0:1f:82:c3:85:5f:e7:e1:78:48:66:00:b2:25:1b:
                    e5:6e:d0:b8:3f:a7:82:ea:ae:49:9a:a4:45:53:70:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:E3:00:BD:59:4D:F7:C0:23:79:DF:38:FE:E8:66:C7:58:45:6E
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FRAGRAN/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FRAGRAN/AwfjAL1ZTffAI3nfOP7oZsdYRW4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.204.0/22
                IPv6:
                  2403:9440::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:71:81:3f:50:71:1f:e4:af:14:0c:78:6f:9b:26:4b:ee:
         db:d8:5d:93:37:72:fb:f4:24:57:b2:3b:95:8e:45:d3:ad:24:
         bc:61:ba:b9:f8:a4:21:14:68:5f:66:1d:c9:fa:a0:f8:52:97:
         38:18:69:c6:42:4c:34:3f:a6:8f:e5:77:61:c8:66:2e:cb:34:
         91:d0:ad:ee:7d:11:17:3f:7b:4e:c7:b0:19:a4:85:a4:e2:bd:
         45:d1:21:ba:6e:26:a2:2f:eb:98:7e:56:4b:34:6a:d2:55:4f:
         ce:2d:30:ba:3c:a4:67:5c:4c:74:0d:13:e6:94:38:b1:b3:00:
         3b:83:3f:2c:03:ef:11:cc:03:ce:8a:fc:6d:ab:39:20:13:7b:
         97:dd:95:cc:27:eb:42:89:da:37:1f:02:ea:ef:c1:72:02:9d:
         98:11:68:bc:6d:03:de:dd:b3:48:40:e3:bf:04:02:c4:49:d3:
         4c:db:cb:1d:68:34:c6:2f:75:10:28:5e:29:69:47:43:13:b5:
         3b:d8:7e:6b:c3:e4:8c:f7:e1:67:a2:09:48:d9:45:cb:fd:2c:
         6c:66:4b:27:da:5d:ad:f8:38:d7:2d:5e:f0:61:d8:69:5d:21:
         01:a5:d3:4d:10:a6:31:65:1a:9b:8b:b4:63:81:8d:cb:47:69:
         f9:d0:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----