Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
File:                     UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer (raw, json)
Hash identifier:          sQ/NtQJnkNXgJT1XfwGj9GaRiOrcwHiFzlE8icL4cqU=
Subject key identifier:   53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       19CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:27 +0000
Certificate not after:    Tue 14 Oct 2025 15:30:32 +0000
Subordinate resources:    IP: 160.191.6.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6603 (0x19cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:27 2025 GMT
            Not After : Oct 14 15:30:32 2025 GMT
        Subject: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b3:78:8c:db:6a:85:6f:33:ef:7d:a2:66:7d:
                    f6:86:10:57:31:42:78:91:01:8d:e7:16:c4:0d:b6:
                    bd:31:6e:5e:b9:ac:89:b6:7f:81:06:af:46:89:87:
                    ed:59:eb:99:1e:18:54:5a:4b:71:dd:31:56:79:2c:
                    34:c7:dc:6c:cd:a2:2a:d3:a2:1d:93:0b:f4:1f:ac:
                    5e:3e:b1:bb:9d:b6:ef:0a:d7:d6:75:a5:60:e7:b8:
                    7b:66:14:d4:66:9b:81:a1:51:7c:25:7f:34:7f:26:
                    1f:f2:4d:f5:91:59:a0:e0:4f:fb:47:67:5a:d3:c8:
                    c3:12:85:d7:70:bb:6b:a1:7f:98:e1:fd:8d:33:89:
                    7c:71:44:9a:f1:0f:34:fb:27:ba:5b:a4:8e:08:09:
                    2b:0a:c7:8f:65:d9:42:ca:4a:db:c2:56:65:a9:59:
                    d5:9e:76:b7:10:76:34:cb:22:33:1c:2e:ee:2b:92:
                    b7:67:16:cc:0f:75:0f:5a:2b:f1:3b:49:ec:d6:b4:
                    fd:74:61:e8:5e:fc:90:3a:fa:b0:c2:2f:5a:49:8f:
                    81:d8:c5:6a:6d:71:f8:a2:7e:84:6b:4b:f2:c6:3c:
                    b5:90:42:fc:4f:1b:17:b9:c5:e3:87:83:19:a5:b7:
                    cb:8f:43:97:7d:1c:35:89:4e:e5:f2:5e:62:0a:b4:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:81:bb:02:0d:e3:61:58:b1:36:d2:2a:a7:05:84:a7:d4:e5:
         f8:cf:3e:64:43:f5:c0:d8:b7:dc:00:9c:a3:4f:56:b0:17:6a:
         47:7e:92:ac:08:a6:e9:b0:80:11:f1:1c:1b:8b:d7:0d:04:16:
         a3:ad:32:ac:ad:27:92:cc:fe:b0:05:6b:42:5d:e4:f7:21:cc:
         6b:d1:09:a9:75:9c:0f:57:bb:6c:01:dc:f8:56:96:c9:ff:05:
         75:21:da:2e:24:5e:0a:47:f9:83:46:a3:6f:74:b5:d6:65:4d:
         1f:05:23:df:45:78:49:59:95:80:c4:2c:50:09:41:d9:cf:ae:
         80:d6:d5:1a:2d:fb:34:cb:66:62:50:7d:dd:b7:74:9c:e8:51:
         80:2a:e9:21:90:80:30:36:d0:b5:2f:ce:67:ba:bc:a2:9f:a2:
         4b:c0:49:d9:42:c5:e7:ec:ca:07:cf:97:fc:55:fd:39:4c:3f:
         35:d8:ed:9d:26:53:cf:fe:7c:b2:af:f1:7b:ed:17:a8:77:7d:
         12:0c:fd:d7:40:24:88:23:9d:ab:77:5a:b4:2d:c1:7c:b3:ed:
         e3:59:39:2d:71:b6:58:fe:d7:7d:32:4d:76:ba:68:f9:f4:1b:
         74:8b:3f:f6:e6:e3:f8:5b:74:81:15:06:74:cf:88:d3:4d:fb:
         3e:04:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:29 2025 by rpki-client