Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
File:                     TmCbp0GG0LDjoanAENod8FWaGYI.cer (raw, json)
Hash identifier:          e6MeOxxazFRjg0Edbdkcx7TcvHqO3/Q/K7lR76V0GDs=
Subject key identifier:   4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2A0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 03 Oct 2023 07:04:38 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    IP: 2403:81c0::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10765 (0x2a0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Oct  3 07:04:38 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:3d:c5:64:c3:5e:ae:a2:bf:1e:21:bf:ce:
                    b9:73:bb:85:8f:87:4e:1e:ea:ec:59:62:7c:27:1a:
                    54:f5:8f:a6:40:53:ba:1a:b1:fe:b2:d8:5f:db:93:
                    c0:79:b7:2c:7e:63:c7:21:bb:87:ae:12:da:9d:74:
                    35:54:b3:29:80:06:f0:56:cf:86:d6:27:91:27:dd:
                    54:af:19:4c:cb:d9:28:bf:6d:8e:6b:31:cb:8f:1a:
                    ac:c5:9e:05:17:7c:78:46:cb:1e:bc:f7:60:19:c3:
                    95:93:42:ae:69:5b:ce:21:d3:cb:90:2c:4e:8a:2a:
                    c9:6d:e2:e1:fc:8c:0b:e5:62:34:3c:43:ba:58:21:
                    eb:f6:fc:d2:7b:36:32:35:f2:ad:50:6d:28:42:ce:
                    e2:01:e9:26:4b:42:e2:79:1b:57:ac:0f:1b:e2:70:
                    fe:b7:5c:4d:06:0d:8c:cf:1b:37:bf:12:21:b0:10:
                    6c:13:d6:d0:9d:ba:43:be:ae:03:12:d3:32:e5:8a:
                    84:0f:b3:cd:f5:9f:36:32:ec:a7:7b:5e:89:cf:06:
                    e1:ed:32:22:53:cb:09:27:16:e7:28:be:70:47:cd:
                    fd:d0:31:ad:de:dc:b9:1d:b7:cf:dc:3a:d2:e7:fe:
                    30:36:19:5e:2d:a6:d9:9f:f5:03:a9:2d:c9:2d:17:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:81c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:69:ce:6a:cc:bf:36:ea:de:97:46:21:df:83:20:20:a6:
         0e:b1:21:fd:50:27:fb:e7:09:1b:9c:cb:5b:c7:96:fd:e0:01:
         04:9e:6d:22:70:df:69:c4:c8:0b:3a:2c:95:36:28:da:cd:79:
         1d:16:64:55:f3:12:4c:c0:cb:13:88:af:73:c5:06:9d:c4:1e:
         c7:b8:e3:af:9c:2b:58:d5:d4:d8:a4:3e:66:25:61:4a:e8:70:
         67:74:70:9e:b0:40:fc:60:54:eb:d7:3d:79:a9:a5:0e:5f:b8:
         02:40:6d:f0:9b:2b:cb:79:7f:9f:e2:d5:05:89:eb:ca:20:c9:
         77:69:87:43:4f:bb:9d:34:0b:5e:ff:e5:28:25:f6:be:ab:f8:
         e6:a7:af:8a:28:e3:94:63:f3:de:51:4a:9b:f1:d9:88:a8:4d:
         e0:e9:ea:46:15:f0:0f:5d:af:31:20:d5:a6:fb:b4:4e:8b:eb:
         76:7e:a9:71:30:0f:1a:5d:0a:47:2a:a6:8b:0f:e0:6b:a2:a0:
         52:22:0d:0e:c8:30:7f:f2:b4:66:2f:ba:40:82:1f:99:85:ce:
         ab:2a:0e:f4:81:df:45:74:ea:f5:4d:5c:82:e7:d0:84:1c:03:
         5a:6d:3b:6b:98:61:92:c2:5d:73:16:61:9a:16:f5:8c:1c:b7:
         80:5a:7e:fc
-----BEGIN CERTIFICATE-----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