Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
File:                     NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (raw, json)
Hash identifier:          UjZTOIWXU1rMa/a9zSSs8eyBYkf2wSmzDVHfqvQXghw=
Subject key identifier:   37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       19F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:28 +0000
Certificate not after:    Tue 26 Aug 2025 01:57:03 +0000
Subordinate resources:    IP: 64.78.160.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6647 (0x19f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:28 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:f1:b8:2d:ca:d3:63:08:2b:e4:0f:82:12:
                    fe:c1:1c:8e:b5:21:63:8c:1f:64:ab:77:95:70:ae:
                    ba:24:06:0f:77:bd:cb:89:75:4e:ac:fc:75:1e:65:
                    3a:13:32:85:3c:59:fe:68:7e:d7:05:83:d4:ea:48:
                    3b:01:8f:8b:12:db:24:40:35:ac:da:b9:fb:61:16:
                    18:fd:66:cf:0f:c3:e1:76:93:cf:bd:63:f6:16:c2:
                    64:b7:90:cc:0b:51:3e:7c:b7:4c:83:5a:9c:36:9e:
                    0a:bf:5e:ae:8d:79:01:a4:d1:09:76:81:1b:bf:9c:
                    d6:7c:56:df:52:fe:0d:8b:36:28:f6:05:61:9e:e2:
                    70:6e:df:11:7d:36:d5:ce:4b:89:e4:ae:49:15:01:
                    f7:56:99:83:02:43:90:ef:46:3b:95:08:54:ea:f7:
                    4c:61:96:c9:b1:b5:45:e6:9b:9f:db:b0:40:22:b9:
                    fc:b6:3b:12:d0:2f:f5:11:d6:af:79:d4:b1:85:71:
                    53:ae:d0:3f:1e:69:ff:bc:5b:80:c7:9c:a5:1b:53:
                    27:af:76:1b:b6:68:7e:04:85:72:18:65:fb:2b:8a:
                    db:34:d4:00:ec:75:4c:6f:72:1f:d8:dd:2e:43:a3:
                    3b:67:f9:7a:6b:11:27:ba:a4:12:d1:04:ca:9c:64:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.78.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:de:3a:a7:02:eb:3c:2a:5c:ab:ef:4f:14:37:1c:e8:72:
         4a:5f:48:f1:0a:85:57:89:ee:e9:c5:2d:e4:92:cd:e1:13:f8:
         fc:fb:29:45:64:70:81:31:83:e8:c1:ca:4a:66:cc:18:12:03:
         b4:e4:d4:4c:56:0c:55:2a:3d:89:ed:38:19:39:df:ec:70:68:
         3d:94:33:f6:1d:a1:2d:3d:71:dc:1c:11:f8:0f:57:71:a0:86:
         6e:86:b0:06:06:6d:45:9c:14:92:f9:8f:12:81:88:96:fe:7d:
         c8:d9:36:8f:07:dc:be:2e:4f:fa:a8:8e:23:92:ee:3b:78:6f:
         97:92:c3:dd:ff:86:54:90:8d:6c:38:3d:73:ca:33:1d:1b:81:
         9c:2c:0d:ee:c8:37:48:37:d5:e3:2b:5e:97:42:85:7c:6a:83:
         26:1b:30:9a:7e:e8:9b:d5:d1:32:fb:bf:ac:d9:f1:9a:02:a0:
         f9:09:f4:05:5e:6f:44:44:17:0e:31:1b:81:17:b7:aa:c1:b9:
         90:de:0f:56:6e:df:93:9d:a0:e5:d3:99:cf:67:b0:c9:54:f8:
         2c:6e:23:e9:d8:51:ae:c6:bf:2a:6a:c7:43:fe:a3:63:f8:3f:
         38:ac:b2:6a:1a:12:b7:af:37:90:db:99:2a:c6:8a:cb:2a:17:
         46:da:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:56:46 2025 by rpki-client