Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Jq2V1NoEioTVQt3wfdrHmK_qsjw.cer
File:                     Jq2V1NoEioTVQt3wfdrHmK_qsjw.cer (raw, json)
Hash identifier:          v01owAhTco38VgyksQnZOV98qrIvZsKasaP7icDr2rc=
Subject key identifier:   26:AD:95:D4:DA:04:8A:84:D5:42:DD:F0:7D:DA:C7:98:AF:EA:B2:3C
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1A20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/TGPF/Jq2V1NoEioTVQt3wfdrHmK_qsjw.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/TGPF/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:38 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.129.124.0/22
                          IP: 2403:7d40::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6688 (0x1a20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=26AD95D4DA048A84D542DDF07DDAC798AFEAB23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:73:1b:f7:8c:f3:dc:88:b6:2b:94:fd:4e:
                    52:2e:eb:0e:62:e0:a4:d4:05:4b:1c:a1:88:ac:f3:
                    e6:31:3b:27:93:e2:0a:84:9e:9d:cd:79:69:0c:db:
                    5f:15:a2:00:a9:63:e4:ea:b7:93:8c:a1:d0:a7:17:
                    fd:76:bf:b6:2e:7b:61:cf:d0:99:ba:9b:64:54:ce:
                    dd:e7:62:0e:8f:e4:9d:2d:53:f9:ff:34:ce:3f:6c:
                    49:b9:7e:00:10:25:e0:84:1e:c4:88:34:78:dc:1f:
                    dd:0f:a4:8b:78:a6:a4:c6:e3:96:04:65:80:06:40:
                    6c:cd:06:4b:19:f6:56:71:e4:2b:ca:d4:f6:e5:6e:
                    1b:c9:39:e5:2a:28:95:61:dc:50:85:29:70:b1:ff:
                    ec:67:ba:dc:9c:89:62:58:b4:57:de:ac:28:ba:27:
                    1d:84:40:d8:a8:81:d3:62:b5:16:cd:e6:7d:13:d1:
                    c9:d1:34:10:7a:b9:fe:c8:39:cf:65:7f:cc:c0:6d:
                    8f:a3:e0:e8:66:99:74:ab:54:b9:5a:41:ec:52:b6:
                    73:13:38:cd:96:e3:cb:f1:78:88:95:21:9a:38:61:
                    ff:8f:25:13:7e:e0:5f:14:ee:c9:1e:91:49:9d:23:
                    3a:29:45:39:50:f5:11:80:8c:39:05:af:13:ce:b4:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AD:95:D4:DA:04:8A:84:D5:42:DD:F0:7D:DA:C7:98:AF:EA:B2:3C
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGPF/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGPF/Jq2V1NoEioTVQt3wfdrHmK_qsjw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.124.0/22
                IPv6:
                  2403:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:8a:41:97:6b:c4:0c:25:18:ee:f0:1f:ab:a7:6b:71:af:
         95:bd:1f:2d:8d:8f:33:04:ed:85:04:89:d6:31:9b:10:10:44:
         29:05:79:0d:99:01:5f:c3:33:0e:f2:e8:48:54:33:9b:52:ef:
         ed:18:d6:7b:5d:ec:9c:b8:d3:70:28:0b:c7:11:0a:b0:7d:01:
         39:85:40:e1:7d:88:58:01:f9:19:91:b3:7a:3b:e4:03:4e:9e:
         bc:e8:6a:bf:b7:ca:ea:1b:be:39:51:47:7d:2a:32:e4:bf:ba:
         ef:7e:4e:2a:2e:7e:02:5a:3c:ab:ab:c0:d8:72:ef:b1:5b:0c:
         51:5b:64:30:31:04:b9:37:80:38:f8:bc:77:c1:58:2a:77:ec:
         e5:1d:49:5b:98:c8:28:ab:77:ab:51:e8:f1:0d:0a:d2:b7:a3:
         40:66:34:b6:dc:e9:4d:05:46:5b:e2:49:ad:3c:92:40:e7:8d:
         24:24:2b:27:6a:50:a7:75:80:20:a8:25:df:97:24:6b:33:cc:
         9a:9c:d8:95:17:68:24:b2:db:46:1d:63:54:3a:73:02:55:4b:
         e4:d5:a9:54:73:a9:0a:f1:c3:05:cc:ec:d1:5e:e0:3e:21:e6:
         cf:7d:42:3d:84:60:32:ee:57:0d:b0:7e:19:6d:7c:aa:6f:bf:
         bb:e6:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----