Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VSoHAdbvvQstqPGUHi8DxbAbn20.cer
File:                     VSoHAdbvvQstqPGUHi8DxbAbn20.cer (raw, json)
Hash identifier:          LOua3liKDILgyILSc5pKVpCPSHlGksVvadHpS7l64O8=
Subject key identifier:   55:2A:07:01:D6:EF:BD:0B:2D:A8:F1:94:1E:2F:03:C5:B0:1B:9F:6D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1946
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/VSoHAdbvvQstqPGUHi8DxbAbn20.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:28 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.127.216.0/22
                          IP: 2404:2740::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6470 (0x1946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=552A0701D6EFBD0B2DA8F1941E2F03C5B01B9F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:2e:b7:34:01:4c:47:b9:d4:25:53:ea:da:
                    63:2d:2e:d2:25:c9:0c:66:12:bc:cf:e3:f8:35:f7:
                    40:e4:11:a7:40:ae:af:7e:c9:e0:92:a4:9f:36:e7:
                    62:d6:e2:f4:35:fd:0e:0b:10:1b:7b:4c:d1:94:96:
                    79:33:58:d9:63:d0:64:25:3d:71:72:fd:c2:c7:1b:
                    31:36:7a:56:f9:27:83:96:44:03:19:48:eb:51:15:
                    53:91:f8:90:2c:37:8f:57:34:87:6e:ba:de:2c:75:
                    c2:93:73:85:d6:97:99:90:b4:4b:ea:56:f1:25:2e:
                    94:e2:4d:0f:10:ee:c9:16:7c:8e:67:6c:3c:94:d7:
                    05:9d:c6:56:42:2b:01:a1:83:f7:ac:78:24:40:81:
                    a5:24:9a:7b:7a:cc:55:8a:7d:e0:00:3e:c1:c9:c7:
                    5c:cf:a5:8f:9a:ee:29:09:6b:8f:62:06:11:75:0b:
                    ad:69:38:ca:d3:f0:60:4b:50:61:05:12:b4:4b:84:
                    f9:6f:26:8c:2a:dd:c4:40:9e:11:92:a2:2b:07:8b:
                    d6:21:b4:73:e6:0f:a1:4d:f7:21:86:60:cc:d4:8a:
                    d7:b2:b1:9e:00:8c:0b:d6:d0:f8:f2:ae:bd:82:e7:
                    5f:f3:a4:d2:4a:d0:cb:6c:e2:d3:b5:64:cc:c5:f6:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:07:01:D6:EF:BD:0B:2D:A8:F1:94:1E:2F:03:C5:B0:1B:9F:6D
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEEPANDFAR/VSoHAdbvvQstqPGUHi8DxbAbn20.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.216.0/22
                IPv6:
                  2404:2740::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:ab:79:24:c1:f6:a6:07:3f:f7:0a:4d:e1:9b:d5:f7:64:
         de:bf:f2:d5:7d:6b:85:c4:84:d7:a1:b7:23:2f:97:91:04:03:
         18:cb:7a:75:db:00:75:1d:00:98:ad:b1:cc:ec:cf:27:6a:7b:
         f3:1b:6a:c2:2c:f6:37:36:99:91:64:64:d3:ce:54:c5:d6:64:
         ee:77:a5:de:d9:af:ff:48:69:30:8c:a4:6b:94:d3:28:48:0a:
         0f:67:04:1e:18:ab:0b:8b:d6:d1:1d:77:26:f0:c3:d1:20:cd:
         6b:25:65:fb:b2:9b:0c:53:7f:1e:90:2a:e2:77:de:f2:3c:18:
         44:bd:4d:32:30:46:56:b6:83:1e:71:8e:d2:27:1a:a0:f4:db:
         e6:bf:93:99:c3:f0:4a:b2:00:07:fa:08:17:23:54:b5:5b:f3:
         c6:7e:44:a8:eb:80:4a:fc:cf:d3:9d:d2:29:9e:7f:d2:34:32:
         63:2f:8a:d9:72:0f:4e:32:5c:f2:75:b6:72:64:8e:ae:36:2f:
         a8:cd:2e:a3:12:15:42:87:45:04:fe:6c:63:50:d0:59:b9:ba:
         b0:51:9d:5b:75:df:70:6d:0e:0e:fa:4a:36:2d:6c:83:b8:4b:
         39:60:79:3a:23:b2:54:79:e1:f8:56:dc:40:b2:02:74:f6:e1:
         3b:a7:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----