Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BjirW1JL3OA4r7FO9J7LAuZcqSs.cer
File:                     BjirW1JL3OA4r7FO9J7LAuZcqSs.cer (raw, json)
Hash identifier:          ivLt0EPluWj+XTBfm0TmEQJpoOLDBzLxUTqPp4dgTsU=
Subject key identifier:   06:38:AB:5B:52:4B:DC:E0:38:AF:B1:4E:F4:9E:CB:02:E6:5C:A9:2B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       19F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/THEGLOBE/BjirW1JL3OA4r7FO9J7LAuZcqSs.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/THEGLOBE/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:36 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.131.136.0/22
                          IP: 2403:cb40::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6644 (0x19f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0638AB5B524BDCE038AFB14EF49ECB02E65CA92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1c:81:b3:cb:18:63:3e:6b:0f:b8:7c:9d:a1:
                    1a:bf:8a:09:96:cb:6b:25:f7:8b:3d:29:3d:03:4f:
                    9b:7b:ea:ec:ed:e3:af:1a:1d:8a:05:13:ab:74:29:
                    84:13:51:3e:a3:d6:15:a5:cd:f8:22:54:6d:07:fc:
                    48:4a:3c:79:69:24:3f:82:7c:0b:5b:fd:dd:f5:19:
                    67:e6:04:29:90:e2:c1:b0:f5:c3:80:ab:ac:16:6b:
                    a8:f1:fa:18:ef:2a:32:5d:f8:3f:5d:23:6a:3f:94:
                    51:4f:ae:48:b0:b1:fb:51:13:c7:21:97:6a:10:bf:
                    46:04:c0:3a:a1:e9:86:0d:1f:b8:44:86:53:82:0d:
                    81:59:e7:93:ac:74:bc:c7:70:41:e4:1a:bc:7f:2b:
                    81:0a:a6:d3:7c:00:c2:a0:18:34:02:3b:40:e6:4d:
                    66:63:e9:01:dc:cd:95:a2:a7:7f:16:af:86:76:80:
                    28:a1:34:18:fe:22:e7:05:8a:52:98:55:44:83:99:
                    af:b3:0b:7e:6f:ff:92:8c:0e:fd:78:bf:ed:39:a8:
                    84:f3:2e:75:c6:40:59:b7:94:2c:7e:ea:c2:3e:bf:
                    9f:08:85:6c:a9:b0:ec:4a:8f:c1:1a:2e:ed:2d:53:
                    eb:c1:a5:4b:a3:0c:2c:82:dd:bf:42:7a:24:e2:79:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:AB:5B:52:4B:DC:E0:38:AF:B1:4E:F4:9E:CB:02:E6:5C:A9:2B
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THEGLOBE/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THEGLOBE/BjirW1JL3OA4r7FO9J7LAuZcqSs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.136.0/22
                IPv6:
                  2403:cb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:85:24:35:4f:d2:24:d4:e4:da:5e:7d:95:8d:da:3f:77:
         10:3b:ab:bd:90:2b:4a:34:c1:d8:97:59:97:d6:70:e3:bb:9e:
         b3:69:7d:20:4b:fe:e1:3f:ee:24:3e:4e:13:69:42:2f:be:e3:
         cb:c3:e0:c6:a5:94:91:31:bb:60:88:ce:26:49:2f:ba:4d:38:
         ca:b3:05:d0:c4:7a:83:da:eb:2d:3b:c3:c6:6a:88:34:25:ce:
         39:c9:ec:0f:c5:30:8a:30:70:3f:18:5c:ca:17:06:6d:a0:72:
         86:d9:6e:d5:d4:35:3a:33:26:16:3e:a8:1c:a8:8e:25:61:8c:
         d8:61:85:ab:01:d2:35:99:33:02:8a:8c:b3:ee:74:54:13:66:
         fb:9b:3e:66:a8:4e:de:16:ec:63:ff:c4:13:d1:55:48:f5:d6:
         4a:c9:86:de:ee:13:7d:db:7d:e0:ad:90:71:ef:f5:26:a5:50:
         b0:d7:a2:7f:3f:11:c9:5c:71:73:8f:84:67:35:52:8f:da:91:
         50:76:b4:74:e5:f7:5a:22:a4:e3:9d:05:28:af:ba:ef:75:72:
         9f:d5:01:1e:45:ed:0f:96:60:fb:b7:89:09:ee:59:a1:ef:f3:
         89:67:fe:c6:93:ab:57:07:61:69:24:a8:3a:10:f0:fc:ec:ef:
         3d:82:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----