Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NkcOwuzWTbmkZbJ26vrXGCC3lYI.cer
File:                     NkcOwuzWTbmkZbJ26vrXGCC3lYI.cer (raw, json)
Hash identifier:          E4ufjPFeYcL57MU8HK1NzSBT5aDcpxTmhnVd78tu2N8=
Subject key identifier:   36:47:0E:C2:EC:D6:4D:B9:A4:65:B2:76:EA:FA:D7:18:20:B7:95:82
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1902
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/NkcOwuzWTbmkZbJ26vrXGCC3lYI.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:24 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.122.80.0/22
                          IP: 2403:8d40::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6402 (0x1902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=36470EC2ECD64DB9A465B276EAFAD71820B79582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1c:19:55:e8:e0:60:89:95:7b:e6:f3:ae:71:
                    df:88:de:44:de:2e:fa:ca:17:91:35:91:bb:af:c0:
                    f7:44:18:c4:2a:83:df:63:aa:31:28:ec:5e:56:8f:
                    6d:90:4d:8c:6b:35:d1:3a:40:af:4b:e8:1c:60:2d:
                    07:69:da:c8:49:df:32:72:03:6a:4c:98:74:8f:fa:
                    b7:14:94:d2:a7:f4:a9:fb:cf:df:49:6b:04:19:6d:
                    d7:1a:be:09:b9:2a:f9:5d:54:23:c2:2a:4a:03:57:
                    6c:d7:97:a9:01:c1:a2:59:20:c2:8b:91:92:41:22:
                    84:6d:7a:3f:da:41:71:96:8e:b3:30:46:d4:5c:79:
                    d0:97:3d:5f:01:4d:98:d2:6e:b4:74:91:91:82:86:
                    ed:10:8e:4f:97:6d:cd:83:54:08:b2:d6:e8:aa:1d:
                    34:c5:49:34:05:2e:cf:4a:94:de:cc:3e:72:96:4f:
                    3b:79:8c:3d:b0:5a:3f:07:09:6c:1c:e7:a1:8a:8d:
                    d5:bb:cd:ed:e5:f3:f9:d8:54:8b:10:5e:d3:3c:9b:
                    6b:c1:cb:a5:ef:f8:8c:c5:5f:54:96:a3:ca:73:61:
                    dd:b0:84:08:a6:dc:1e:10:14:7f:f9:e6:c5:62:38:
                    1e:d8:c7:b0:05:d9:1c:df:25:e6:82:00:46:0c:4c:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:0E:C2:EC:D6:4D:B9:A4:65:B2:76:EA:FA:D7:18:20:B7:95:82
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FREEDOM/NkcOwuzWTbmkZbJ26vrXGCC3lYI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.80.0/22
                IPv6:
                  2403:8d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:3c:32:6b:b9:38:09:77:68:1e:2b:a6:5d:81:5b:5e:a7:
         b6:fb:a4:b3:5e:74:04:21:44:a8:3d:3d:b2:aa:6b:c2:c0:c7:
         45:8d:f3:71:fd:1d:0f:b3:84:41:87:d8:5b:78:8b:be:62:83:
         3c:fd:a2:d9:71:60:8b:7c:24:58:c0:eb:c7:17:3a:05:24:66:
         c9:1a:93:40:d8:c0:6d:58:31:f8:2e:fa:43:16:f8:96:a0:af:
         49:3b:4c:a6:05:90:ee:78:bc:80:60:1f:43:ca:52:3a:70:b4:
         27:6b:55:f5:88:4d:44:5f:4a:1a:af:fa:d0:c2:41:f3:de:09:
         0e:4e:da:d9:79:8f:36:02:61:2d:4b:de:b1:fd:8a:6e:05:51:
         52:07:3d:41:a7:1c:b7:2e:5b:d2:1b:46:18:34:01:a1:2a:69:
         ac:7b:b4:8d:5b:0f:87:e8:7f:f4:0b:1a:a7:79:c5:c9:2c:b4:
         65:24:ae:09:09:a5:23:be:02:81:a9:98:65:86:8f:f4:56:b6:
         64:6a:a8:e2:eb:1f:6f:1a:70:1a:a8:b6:c0:71:b2:79:d9:83:
         d5:be:2c:a4:92:f5:e7:42:10:e7:9a:2f:30:a4:5e:ab:02:f8:
         19:d8:25:91:63:0d:53:37:c7:67:15:96:e8:cd:c0:8b:cb:3f:
         70:85:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----