Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Ha0eTscVpJU-dsA6WxSAY2zsar0.cer
File:                     Ha0eTscVpJU-dsA6WxSAY2zsar0.cer (raw, json)
Hash identifier:          cFx3rLYUvwjJfzYEcC04SUHQWIpfzDZKmoOx3LE/51c=
Subject key identifier:   1D:AD:1E:4E:C7:15:A4:95:3E:76:C0:3A:5B:14:80:63:6C:EC:6A:BD
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1854
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/JMC/Ha0eTscVpJU-dsA6WxSAY2zsar0.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/JMC/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:51:41 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.130.16.0/22
                          IP: 2403:aec0::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6228 (0x1854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:51:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1DAD1E4EC715A4953E76C03A5B1480636CEC6ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:f0:cd:16:e3:db:90:8f:01:ba:5d:cb:66:
                    2b:6c:9b:e7:5f:95:b5:f2:19:a0:65:86:c9:78:a7:
                    a7:6d:98:25:ec:c7:8e:74:fc:12:af:db:39:0b:78:
                    45:ed:90:8e:93:91:74:02:30:57:bd:fe:94:d5:3f:
                    fd:fd:31:f1:98:db:cf:80:55:5c:10:0e:6f:c1:d5:
                    ff:d9:b4:71:a5:61:0d:07:cc:24:55:d8:b4:7a:f7:
                    6b:fd:1c:4b:63:ff:23:29:7e:e1:e2:7a:d4:b3:36:
                    9e:75:83:17:cf:b9:e5:9d:b7:cd:ee:35:b9:d6:be:
                    a5:4d:ad:47:1a:53:c9:bf:34:55:fd:ef:76:4d:c5:
                    70:0e:a4:1c:19:6a:29:f3:ac:6c:d4:95:88:d0:86:
                    b6:29:26:07:11:01:4f:3d:c0:44:48:4c:db:e9:ca:
                    55:c2:33:0b:43:84:2d:ec:e6:44:fe:26:62:36:b5:
                    a9:53:76:4a:eb:4c:87:0c:23:2b:7e:19:f6:4d:9d:
                    09:4b:c5:69:8f:ba:27:ef:a3:ca:8f:6a:ed:e7:7a:
                    02:d6:e3:4a:3f:3b:78:2c:a4:d8:9d:1b:6a:19:6f:
                    26:e2:bc:f7:1f:9e:6e:30:f1:fd:f3:a8:e6:7b:fd:
                    30:8a:42:28:4a:34:8e:03:a3:89:a5:50:66:01:3e:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AD:1E:4E:C7:15:A4:95:3E:76:C0:3A:5B:14:80:63:6C:EC:6A:BD
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JMC/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JMC/Ha0eTscVpJU-dsA6WxSAY2zsar0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.16.0/22
                IPv6:
                  2403:aec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:e1:c3:62:3f:70:d9:28:0d:f4:92:07:10:b1:3c:54:37:
         18:69:c2:d0:86:b4:e3:2c:cd:db:a9:f2:c6:18:d4:e0:8d:24:
         3e:2b:2a:bc:9b:3a:14:b1:2a:47:28:bb:d0:8c:1b:ae:92:c2:
         81:9d:ba:3b:f0:b4:61:84:41:a4:bd:a2:0c:e8:83:71:75:d6:
         1b:80:6f:08:40:bc:8d:5b:8a:6f:dd:e7:16:22:1d:c0:6e:81:
         6f:1c:0b:e6:8f:f9:c4:79:af:5e:4a:9b:5d:90:19:37:1b:80:
         e9:54:e8:01:b9:34:60:6a:57:cd:97:89:e8:06:19:3d:23:98:
         ad:d3:a7:38:6f:fd:94:aa:63:24:a4:30:a4:e5:5a:3d:c1:2f:
         c2:9d:53:a3:44:b4:0d:a1:20:58:59:5a:3c:a3:7b:da:87:b6:
         02:b3:45:cb:f4:bc:cb:bd:97:40:a4:78:0e:d6:cd:50:c6:b0:
         79:bc:19:0f:6e:cc:1d:97:d4:ac:0a:64:6a:55:13:c4:b0:3b:
         b4:51:bc:89:95:0d:f7:b2:59:9d:cb:2b:04:da:23:f2:4c:a4:
         e5:ae:8e:a1:d6:00:af:50:91:47:3d:4b:8b:18:d9:49:a6:44:
         cc:a2:c8:85:6f:7d:95:6a:de:5b:6b:69:6d:34:4d:ad:80:0e:
         f9:47:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----