Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer
File:                     C9olxjD4_0bjB7GUzSqtHm0GMx0.cer (raw, json)
Hash identifier:          VZ4YvkM3URoi8FlDipq66S6wzV4S/+Er2SAzenjcp/4=
Subject key identifier:   0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       35AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:16 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 103.126.88.0/22
                          IP: 2405:67c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13743 (0x35af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:16 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:14:f1:c6:f0:0e:91:35:77:e3:0d:e5:78:
                    22:bf:76:47:b6:aa:20:9e:b4:df:c9:b5:7a:5a:38:
                    83:3a:c2:69:4d:42:1e:c0:26:ca:85:57:18:e1:4e:
                    3f:bf:78:84:89:11:fe:80:b7:6a:56:c6:f0:45:df:
                    b9:a4:09:b6:27:83:99:72:3c:f0:c9:a6:04:a0:56:
                    b7:a9:85:ff:fd:97:fd:ff:5a:9b:12:26:e5:98:ef:
                    b3:15:ea:7c:bd:a1:38:6e:1e:91:be:9d:f4:fa:8d:
                    ac:62:83:92:30:21:38:ad:cb:df:7d:9a:a7:f6:71:
                    5a:57:4f:56:3f:12:9b:cf:54:93:38:67:12:36:46:
                    67:bc:c3:74:1e:f7:23:f3:40:44:96:ea:ac:58:aa:
                    5d:ce:50:a1:a3:0e:87:fa:e9:ed:3d:06:84:a1:1d:
                    32:64:77:77:2a:20:10:35:12:74:88:16:e0:4a:2d:
                    dc:1a:60:16:d6:c7:b0:d3:41:11:7c:5b:59:89:9b:
                    92:e4:c5:7a:b1:57:10:6b:f3:cd:a9:2e:86:4f:f1:
                    7a:1e:27:34:b4:82:f3:fe:11:05:ed:a5:33:24:b7:
                    83:e5:75:b1:0b:44:28:27:01:7a:91:d2:f8:7c:fe:
                    f9:72:9a:7e:ce:ec:30:b6:3e:50:85:53:15:37:be:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.88.0/22
                IPv6:
                  2405:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:70:77:28:00:e1:6d:0a:80:12:f9:ac:f4:78:ea:2e:fc:
         54:32:36:71:d5:92:36:f5:03:eb:32:76:f2:d4:2e:57:28:24:
         f6:40:81:26:69:d5:4e:14:b2:d3:da:c9:c2:24:73:2f:2e:4f:
         ff:c0:5b:43:39:06:75:9a:56:ce:1e:eb:68:9d:8b:74:d9:94:
         02:90:0e:26:31:74:10:ff:1b:28:75:c1:0a:86:ac:af:cc:03:
         6c:4f:7e:26:5d:38:ba:ca:d5:07:56:0e:5a:1d:fc:5b:ce:d3:
         a5:e2:67:c0:d6:5e:df:8a:87:04:6b:f2:03:9a:25:51:70:4a:
         09:a3:e2:24:ec:e0:7d:e1:ac:92:c3:c3:88:04:d3:65:c8:42:
         57:b2:98:be:11:ab:75:af:57:6b:d8:ac:44:c3:e7:a4:53:0d:
         e9:70:a3:32:9b:6e:8d:18:e0:6f:5b:5f:9f:2c:52:d3:a4:2e:
         eb:38:68:9c:24:15:42:16:42:c2:a3:ce:5d:a1:8f:b7:d4:2e:
         d3:f9:f3:14:29:7b:50:65:94:0f:c7:5e:5d:d2:13:c8:f8:e6:
         6c:aa:a5:3f:84:f1:07:b3:04:a4:60:78:63:c7:57:89:0d:61:
         90:68:c2:b8:35:77:20:32:94:5c:13:eb:b3:df:a8:7c:8e:0e:
         f8:cd:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:21:09 2025 by rpki-client