Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/Ut75M0f2lyKg8Q9hezeAc6fUeDc.cer
File:                     Ut75M0f2lyKg8Q9hezeAc6fUeDc.cer (raw, json)
Hash identifier:          +/0wyNaNgu6uLzgxLUTrfLYO0NoS+DTa8Uy6n2oPaNg=
Subject key identifier:   52:DE:F9:33:47:F6:97:22:A0:F1:0F:61:7B:37:80:73:A7:D4:78:37
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1A08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:37 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.130.80.0/22
                          IP: 2403:b5c0::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6664 (0x1a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=52DEF93347F69722A0F10F617B378073A7D47837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:9e:5f:02:75:20:99:26:73:e2:2c:a9:57:
                    1c:ec:ec:64:12:20:d3:42:aa:7e:1f:b3:19:d3:2f:
                    a9:d2:f5:38:62:a6:07:c1:dd:ad:93:5d:d2:e7:58:
                    79:b1:a3:f4:9d:8c:40:fe:0e:8a:dd:e1:35:73:b8:
                    05:26:3a:7a:d6:db:ac:14:5c:a8:02:6c:70:b4:72:
                    5d:65:eb:7d:2a:e1:7e:5c:0e:e5:5f:c2:70:c7:8e:
                    71:2d:3e:ef:5a:3a:ec:ae:6b:7c:f2:9e:45:bf:41:
                    90:88:84:46:83:d2:5f:73:3a:c6:2b:4a:4a:82:93:
                    5b:75:eb:a0:14:96:ed:88:56:46:9a:60:05:66:e3:
                    ef:6f:ab:0f:86:f8:3f:ae:4f:20:d5:50:54:25:df:
                    ea:8a:c6:37:0f:32:83:a5:dc:a9:2c:24:f8:52:2e:
                    72:80:c4:00:2e:e8:57:a5:40:40:cd:ed:82:9f:a5:
                    3d:1a:12:bf:c1:8d:66:84:17:84:0e:b6:fa:05:6a:
                    25:1d:4d:d7:53:2a:0b:59:c6:81:38:54:67:a8:2e:
                    8c:00:72:4f:18:1d:51:ea:92:51:0a:fb:41:9b:91:
                    84:36:c7:7a:6b:89:a6:2a:bb:ce:f7:bf:fb:9d:97:
                    15:3c:40:fa:05:4a:30:77:d7:9e:ac:8b:c2:96:ab:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:F9:33:47:F6:97:22:A0:F1:0F:61:7B:37:80:73:A7:D4:78:37
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDMII/Ut75M0f2lyKg8Q9hezeAc6fUeDc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.80.0/22
                IPv6:
                  2403:b5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:01:b8:f3:64:c7:47:ac:56:9e:24:54:26:3a:c1:d3:44:02:
         c1:aa:c2:8e:1e:c5:05:4a:b3:3e:2e:21:ff:c0:bd:d2:35:49:
         2f:f3:b9:f4:f4:f9:0f:b5:fb:80:e0:b1:fc:25:21:f8:60:c6:
         51:42:c9:19:09:e0:8e:95:92:52:28:fd:d1:a3:b0:9f:ed:c4:
         55:1f:95:3a:19:98:7b:44:c5:cb:73:2b:1b:12:ce:51:b7:ef:
         bd:78:b0:cc:8a:ca:7b:9f:0d:c1:4a:8d:cf:79:a4:99:f8:da:
         6e:0c:bd:0d:d4:7e:0f:23:f4:fc:6d:88:1d:69:4b:1a:b7:72:
         ea:8d:d4:a5:aa:67:35:9e:10:9f:81:30:7f:71:46:52:06:a2:
         99:63:4d:c6:27:03:10:14:fe:08:14:6b:d6:97:24:b6:12:66:
         3a:20:86:8e:74:94:b6:32:bc:04:4d:a8:78:6f:47:96:d4:f9:
         6f:ad:1e:05:32:e8:0c:38:66:74:a1:06:ab:7a:84:5d:a7:b3:
         4c:fd:1a:9f:be:8b:6e:ba:34:8c:00:0f:28:78:10:f4:90:d6:
         01:4a:b3:22:88:d3:21:8f:59:bf:eb:76:be:bc:e6:36:3e:5c:
         39:f9:83:9a:bf:fd:d9:76:2f:f4:9c:ec:ff:40:cb:79:de:d8:
         0b:d0:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----