Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VE_PyyrJVPJAIqnCanfCOo6OGGg.cer
File:                     VE_PyyrJVPJAIqnCanfCOo6OGGg.cer (raw, json)
Hash identifier:          oK6e5ykATCQXPSZIkc1VahSTfWOHNqvly0f98Hz1IvU=
Subject key identifier:   54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1904
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:24 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.135.64.0/22
                          IP: 2404:7640::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6404 (0x1904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=544FCFCB2AC954F24022A9C26A77C23A8E8E1868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:93:67:d5:a9:70:d9:85:92:94:c5:f2:d8:a8:
                    67:b2:72:32:1b:60:07:14:11:89:f9:f6:0e:26:8b:
                    c2:35:af:23:67:2c:44:c2:e9:27:c4:76:a8:ab:59:
                    2d:35:c5:2a:79:ec:cb:f6:1a:a8:bf:70:3e:ae:bc:
                    19:81:e4:91:66:5a:3a:08:ca:6a:1e:26:c9:2f:7f:
                    a1:d3:b5:90:66:9e:8b:34:f3:fb:fc:9a:95:94:cd:
                    e2:68:b8:27:99:c6:c3:93:b2:01:86:33:20:1e:3e:
                    1b:43:cf:42:ed:e0:30:f2:f2:99:4c:08:47:99:e3:
                    ae:5d:cd:56:45:5d:df:bd:f5:16:42:52:9b:5e:08:
                    ea:ea:c1:83:7e:4a:6d:35:21:8a:c6:56:72:09:7d:
                    29:a7:43:49:d8:76:90:98:36:25:cc:1f:fc:1b:a4:
                    70:1b:52:47:1c:f6:34:48:58:64:49:24:c0:dc:16:
                    34:15:da:31:b5:71:af:8c:7b:20:d3:d7:be:25:94:
                    c8:e1:80:11:76:51:71:99:bc:03:b1:96:9e:f5:5e:
                    8d:8f:08:9a:d3:31:cd:f0:5f:42:a1:a7:5a:92:dc:
                    23:0b:28:ba:3d:68:e9:6a:08:66:99:05:70:36:b3:
                    35:cf:5b:8d:20:2d:73:3c:50:4a:07:5b:b3:17:74:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.64.0/22
                IPv6:
                  2404:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:2e:30:5b:98:26:cf:0a:5e:b1:98:1e:7a:08:f6:f6:98:
         7b:ee:a9:53:83:65:8f:71:7d:4d:a0:68:1b:b0:9a:1b:f6:97:
         74:d7:bc:63:02:99:4d:28:95:09:1b:65:e0:eb:c8:eb:2f:5e:
         67:69:19:8b:b7:02:1d:31:33:64:c7:3a:cb:4a:c1:e3:ef:d2:
         06:8d:a3:3f:9f:49:39:e4:cb:23:ab:86:a9:5c:b4:65:62:fb:
         5c:5d:33:24:6e:fd:7d:da:f8:95:43:74:8c:6b:c6:7a:61:cc:
         e9:0c:e8:de:e4:f8:23:58:70:a1:3c:30:91:9b:8e:52:13:74:
         e9:6b:ef:c8:c8:2d:91:49:7b:cd:88:a3:da:23:8f:17:43:b8:
         9e:66:64:80:37:43:75:3f:58:25:c3:ed:3a:be:dd:a6:6b:73:
         8a:9e:68:7e:86:ad:a4:36:57:35:d3:4a:b6:c1:18:bd:8b:38:
         6a:88:75:d0:fe:9d:2a:95:a0:9f:85:21:ea:5c:7d:f9:42:46:
         c4:a2:53:11:d3:48:a0:c6:6f:50:d7:9d:75:bc:66:d6:2e:0e:
         ed:85:97:51:5c:8d:34:3a:eb:52:56:47:18:14:8e:7d:b2:43:
         aa:5f:75:04:e2:91:ee:c5:a9:63:94:0f:24:50:d2:c7:a8:ed:
         28:24:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----