Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
File:                     Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (raw, json)
Hash identifier:          MzHenGjoLUcNjoiVfdlbYk2J+bq8Saitp2yC91azKsU=
Subject key identifier:   06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       19FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:29 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 139.223.0.0/16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6653 (0x19fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:29 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:ec:7c:fc:c1:a8:cf:cc:b1:e4:0d:b1:20:
                    9b:fa:75:ac:85:35:eb:5c:6d:bb:64:57:1b:0a:98:
                    b7:99:2d:e0:80:6a:b2:f6:69:98:ac:c3:f9:7e:57:
                    f4:7b:e3:84:d0:b9:7b:a9:5f:83:df:c4:33:53:9f:
                    40:35:d0:f3:7c:c9:9f:ce:81:ef:e2:02:b2:cc:15:
                    5b:d3:be:59:1f:97:27:b0:6b:28:9d:b6:76:3b:22:
                    16:2f:1a:24:fc:c7:b4:04:da:6d:55:a9:f3:6c:f1:
                    21:92:b3:e2:88:a6:e0:42:58:3a:04:ff:be:b3:ee:
                    d4:41:c4:4a:16:00:83:cc:04:e8:f8:c4:13:85:8f:
                    93:67:2d:de:91:21:74:35:25:1b:fd:fb:d8:0f:78:
                    0f:99:a7:4e:b4:86:fc:6e:56:ac:09:ae:6b:c6:ac:
                    43:a0:21:64:21:e5:86:23:87:50:92:a4:6b:bb:12:
                    d7:c1:4b:db:4a:58:38:11:51:56:ab:e7:d8:71:78:
                    37:69:38:62:a0:c7:df:da:b3:12:9f:50:ec:6f:6b:
                    45:90:6e:a4:7c:f9:07:80:41:92:ca:0b:97:9a:82:
                    4a:20:cc:e5:29:35:29:82:f8:54:08:7e:a2:50:dd:
                    2d:7a:5a:a6:97:c9:43:74:93:95:5f:61:8a:fa:b2:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:01:d3:00:5b:28:db:fe:a2:f6:9f:43:86:58:82:5b:67:5f:
         00:8d:71:d3:bb:29:30:cd:5e:06:52:01:9a:68:8f:e0:83:57:
         d8:7d:10:0d:0e:08:00:cc:e3:1f:f0:d2:7b:fa:da:cb:37:14:
         e3:a3:ce:00:98:d7:43:23:1d:6b:37:70:90:cc:ae:97:c2:64:
         ee:0a:c1:12:56:f9:70:da:ed:50:5e:48:a9:ec:3d:ca:59:cf:
         1b:89:1e:a9:dc:2a:f3:c5:f3:af:62:d3:d1:f1:90:f4:32:83:
         7d:a9:e3:82:8c:5a:a2:6c:22:fc:f4:46:c3:37:83:e1:1c:18:
         98:b6:65:35:7e:2e:15:4b:e8:e4:08:9f:98:56:91:5e:9b:aa:
         35:d5:d2:ae:3f:a1:76:b8:76:f0:2e:ca:a8:8f:d2:ed:74:82:
         09:d8:b4:0e:6c:19:ab:64:b0:16:bc:20:5c:0d:53:15:ea:50:
         bc:da:af:e6:ff:0a:54:30:b6:f5:bf:fa:2e:2b:ac:87:24:53:
         fd:f2:ab:a0:03:36:b2:c0:86:e0:91:63:74:83:0c:32:32:c3:
         b1:33:97:e6:ba:24:d1:42:78:60:10:92:38:b3:88:c4:23:ad:
         a2:cb:d6:ab:2d:64:d9:1c:be:da:c8:5c:2d:5d:81:96:41:c5:
         88:7a:10:23
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICGf0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF
RUExNzgxODYxNzQzMB4XDTI1MDIxMDE0MjkyOVoXDTI1MDgyNjAxNTcwM1owMzEx
MC8GA1UEAxMoMDZBRTE0ODBDRUZDNUNFMDgwMjkyOTdGNEQ0OUNCQ0FCRDZDRTJG
MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6W7Hz8wajPzLHkDbEg
m/p1rIU161xtu2RXGwqYt5kt4IBqsvZpmKzD+X5X9HvjhNC5e6lfg9/EM1OfQDXQ
83zJn86B7+ICsswVW9O+WR+XJ7BrKJ22djsiFi8aJPzHtATabVWp82zxIZKz4oim
4EJYOgT/vrPu1EHEShYAg8wE6PjEE4WPk2ct3pEhdDUlG/372A94D5mnTrSG/G5W
rAmua8asQ6AhZCHlhiOHUJKka7sS18FL20pYOBFRVqvn2HF4N2k4YqDH39qzEp9Q
7G9rRZBupHz5B4BBksoLl5qCSiDM5Sk1KYL4VAh+olDdLXpappfJQ3STlV9hivqy
o4kCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBQGrhSAzvxc4IApKX9NScvKvWzi8jAf
BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy
L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdYGCCsGAQUFBwELBIHJMIHGMDgGCCsGAQUFBzAF
hixyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElTTkVULzBX
BggrBgEFBQcwCoZLcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1RJU05FVC9CcTRVZ003OFhPQ0FLU2xfVFVuTHlyMXM0dkkubWZ0MDEGCCsGAQUF
BzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAi98wDQYJKoZIhvcNAQELBQADggEBACIB
0wBbKNv+ovafQ4ZYgltnXwCNcdO7KTDNXgZSAZpoj+CDV9h9EA0OCADM4x/w0nv6
2ss3FOOjzgCY10MjHWs3cJDMrpfCZO4KwRJW+XDa7VBeSKnsPcpZzxuJHqncKvPF
869i09HxkPQyg32p44KMWqJsIvz0RsM3g+EcGJi2ZTV+LhVL6OQIn5hWkV6bqjXV
0q4/oXa4dvAuyqiP0u10ggnYtA5sGatksBa8IFwNUxXqULzar+b/ClQwtvW/+i4r
rIckU/3yq6ADNrLAhuCRY3SDDDIyw7Ezl+a6JNFCeGAQkjiziMQjraLL1qstZNkc
vtrIXC1dgZZBxYh6ECM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:33 2025 by rpki-client