Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EfvFgvupE-mlR2EHWLtx20AE36s.cer
File:                     EfvFgvupE-mlR2EHWLtx20AE36s.cer (raw, json)
Hash identifier:          aPgcstETos2+cgrdrwAGcq227chQwfba/JRpKKpfiD0=
Subject key identifier:   11:FB:C5:82:FB:A9:13:E9:A5:47:61:07:58:BB:71:DB:40:04:DF:AB
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       19F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CCDIGITAL/EfvFgvupE-mlR2EHWLtx20AE36s.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CCDIGITAL/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:36 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.124.20.0/22
                          IP: 2403:d740::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6642 (0x19f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=11FBC582FBA913E9A547610758BB71DB4004DFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:bd:58:15:77:08:bb:04:18:49:17:0b:5d:
                    e8:0f:b6:c6:a8:a5:21:4a:83:1a:f6:48:31:85:45:
                    40:be:f6:10:1e:40:46:85:ae:8c:d9:ad:5c:df:44:
                    14:41:dc:99:58:06:64:c0:87:83:52:e0:d5:e5:dd:
                    ea:8a:21:13:99:fc:48:65:a5:b2:1d:47:db:2b:5a:
                    ee:a0:9b:33:66:bb:ba:5c:e1:3c:3c:5e:29:ef:8e:
                    c0:a7:1e:ec:d4:9c:7b:e8:d2:60:c7:f6:be:bf:62:
                    ec:e7:e8:4a:9a:c4:c9:4d:a9:08:b6:04:48:40:e5:
                    52:5c:64:0f:97:95:79:73:09:ea:12:2f:32:6d:a4:
                    d7:47:76:c5:a9:83:39:0f:74:57:3a:10:d2:80:c8:
                    55:df:ab:2b:77:d4:41:81:fd:38:bb:41:8e:7f:f6:
                    ea:04:65:52:36:c3:1e:53:48:f5:f5:82:8e:73:68:
                    01:2b:f6:68:7e:47:e9:56:67:c1:e9:f3:3c:9f:79:
                    08:4f:b8:a7:98:e0:b8:d5:32:80:d6:60:d6:79:e1:
                    68:f1:d8:68:92:6b:4e:26:f2:2f:7a:c5:a1:90:5b:
                    3e:36:7d:52:2f:f6:37:8b:a3:d2:a8:b8:c4:6a:8c:
                    8e:38:57:19:34:fd:87:2b:10:25:f1:f6:2f:fe:53:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FB:C5:82:FB:A9:13:E9:A5:47:61:07:58:BB:71:DB:40:04:DF:AB
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCDIGITAL/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCDIGITAL/EfvFgvupE-mlR2EHWLtx20AE36s.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.20.0/22
                IPv6:
                  2403:d740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:ae:93:7f:41:fc:9e:af:f2:38:30:b7:27:16:e8:2f:76:
         51:78:00:7f:ef:fb:32:fe:f6:4d:df:da:fe:83:06:64:f7:29:
         0c:e9:56:d9:72:8e:a0:9d:d4:da:f8:39:ce:3c:16:5a:1a:fd:
         1d:60:52:15:c8:8a:d7:b2:b2:f4:1a:31:87:bd:a4:f0:1b:65:
         03:ae:ac:4b:2f:b6:be:7b:a8:0b:1b:90:1b:b2:61:91:29:7e:
         bd:15:0f:fd:a0:56:28:4c:3c:fd:4f:8b:ab:34:18:ea:98:07:
         44:ab:aa:50:c3:0e:f3:48:16:1b:5f:c6:7c:a9:0a:de:75:f8:
         15:c4:2a:12:77:0f:6d:62:5e:a8:21:da:70:dc:1e:32:dd:2d:
         78:f8:16:d5:47:84:34:51:68:25:34:9f:10:d9:c5:2c:0d:35:
         7c:52:20:5b:60:54:2d:f7:6f:90:91:d5:75:13:b1:c4:30:8a:
         1f:73:8b:bf:b9:85:9a:c2:f3:2a:ed:1d:03:42:a1:c1:37:06:
         50:cd:71:d3:69:c0:4f:3f:76:2c:73:0c:dc:a0:f7:eb:f3:43:
         e5:1a:42:a1:88:54:98:2f:13:65:69:1f:46:15:9b:b9:ff:e1:
         be:53:56:68:1f:5e:13:8d:c4:3a:71:2b:90:28:70:54:db:77:
         b8:b3:8a:e5
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgICGfIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIwMDkyOTA5NTMzNloXDTIxMDkyOTA5NTEyM1owMzEx
MC8GA1UEAxMoMTFGQkM1ODJGQkE5MTNFOUE1NDc2MTA3NThCQjcxREI0MDA0REZB
QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMPwvVgVdwi7BBhJFwtd
6A+2xqilIUqDGvZIMYVFQL72EB5ARoWujNmtXN9EFEHcmVgGZMCHg1Lg1eXd6ooh
E5n8SGWlsh1H2yta7qCbM2a7ulzhPDxeKe+OwKce7NSce+jSYMf2vr9i7OfoSprE
yU2pCLYESEDlUlxkD5eVeXMJ6hIvMm2k10d2xamDOQ90VzoQ0oDIVd+rK3fUQYH9
OLtBjn/26gRlUjbDHlNI9fWCjnNoASv2aH5H6VZnwenzPJ95CE+4p5jguNUygNZg
1nnhaPHYaJJrTibyL3rFoZBbPjZ9Ui/2N4uj0qi4xGqMjjhXGTT9hysQJfH2L/5T
bOsCAwEAAaOCAmUwggJhMB0GA1UdDgQWBBQR+8WC+6kT6aVHYQdYu3HbQATfqzAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdwGCCsGAQUFBwELBIHPMIHMMDsGCCsGAQUFBzAF
hi9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NESUdJVEFM
LzBaBggrBgEFBQcwCoZOcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0NDRElHSVRBTC9FZnZGZ3Z1cEUtbWxSMkVIV0x0eDIwQUUzNnMubWZ0MDEG
CCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1s
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3wUMA0EAgACMAcDBQAkA9dA
MA0GCSqGSIb3DQEBCwUAA4IBAQBLeK6Tf0H8nq/yODC3JxboL3ZReAB/7/sy/vZN
39r+gwZk9ykM6VbZco6gndTa+DnOPBZaGv0dYFIVyIrXsrL0GjGHvaTwG2UDrqxL
L7a+e6gLG5AbsmGRKX69FQ/9oFYoTDz9T4urNBjqmAdEq6pQww7zSBYbX8Z8qQre
dfgVxCoSdw9tYl6oIdpw3B4y3S14+BbVR4Q0UWglNJ8Q2cUsDTV8UiBbYFQt92+Q
kdV1E7HEMIofc4u/uYWawvMq7R0DQqHBNwZQzXHTacBPP3YscwzcoPfr80PlGkKh
iFSYLxNlaR9GFZu5/+G+U1ZoH14TjcQ6cSuQKHBU23e4s4rl
-----END CERTIFICATE-----