Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WHT2opJK4yTm2DFLXY4d3nlsjBw.cer
File:                     WHT2opJK4yTm2DFLXY4d3nlsjBw.cer (raw, json)
Hash identifier:          6qrzzOuTN7mSVxWl26qzCeUSAqNni9G7u7E8Xd4HEXI=
Subject key identifier:   58:74:F6:A2:92:4A:E3:24:E6:D8:31:4B:5D:8E:1D:DE:79:6C:8C:1C
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       23FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/WHT2opJK4yTm2DFLXY4d3nlsjBw.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 06 Sep 2022 03:05:06 +0000
Certificate not after:    Wed 06 Sep 2023 03:00:35 +0000
Subordinate resources:    IP: 103.142.152.0/23
                          IP: 2405:3b40::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9215 (0x23ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep  6 03:05:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5874F6A2924AE324E6D8314B5D8E1DDE796C8C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:79:e6:a7:5c:fe:24:6d:01:94:07:8b:d2:
                    6c:c1:c4:dd:29:f8:14:b6:3a:ab:33:c9:f7:50:83:
                    04:d7:74:2c:b0:10:b0:3e:2c:1b:96:ed:95:9a:25:
                    d8:7f:54:85:ea:bb:a4:cd:9b:88:97:01:25:1a:ac:
                    c4:9b:d8:c5:42:9f:22:be:4a:42:0f:6f:4e:be:36:
                    bf:6e:d2:b1:30:ca:98:c2:cd:95:ba:df:3a:89:bb:
                    a6:ea:28:a2:6a:3b:e3:a4:39:56:8f:01:5e:c6:ed:
                    dc:02:fd:f2:eb:73:8a:b0:82:aa:48:d3:7f:24:1b:
                    79:65:b2:7e:ff:fe:61:8d:e5:a8:f7:38:5e:de:f1:
                    3f:d7:10:e4:58:72:48:bf:a9:e7:97:d1:9a:b8:a3:
                    25:3e:1e:98:1a:89:34:9b:a3:25:e1:de:f3:51:6e:
                    58:a5:57:0e:a0:af:01:3b:be:1d:1f:7d:e7:3c:66:
                    74:98:c3:40:09:0e:fb:e4:39:97:be:09:3d:19:e8:
                    34:b5:15:a4:dc:c5:4a:30:0d:0f:c5:6c:4d:3d:18:
                    09:f4:31:f1:c6:9c:b2:f9:c2:5c:12:02:73:1a:f7:
                    ac:93:b0:60:5d:ee:bb:28:9f:74:fc:51:79:6f:0e:
                    c6:6d:89:f8:f2:ee:ea:77:ae:c6:33:f7:09:4c:57:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:74:F6:A2:92:4A:E3:24:E6:D8:31:4B:5D:8E:1D:DE:79:6C:8C:1C
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIHSUN/WHT2opJK4yTm2DFLXY4d3nlsjBw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.152.0/23
                IPv6:
                  2405:3b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:0f:a1:82:6c:a8:ce:d3:98:c3:f2:cc:fb:1f:95:dc:61:
         e3:6e:bd:91:f9:2d:ae:73:76:d7:38:c6:98:1d:88:1c:84:38:
         a2:08:1e:70:11:f0:f6:8c:37:f4:d5:25:44:9a:86:00:2b:dc:
         67:87:3c:69:3f:dd:9d:1d:ae:09:e6:96:0d:4e:0f:2d:a8:2e:
         c7:1c:22:20:9c:9f:c8:7f:5b:62:7a:08:9e:fd:f0:49:77:3a:
         7d:37:d2:00:cc:7d:7f:37:b4:66:25:74:c0:17:fc:db:d2:34:
         d8:f4:71:14:a1:fd:aa:06:82:ca:69:48:4b:ec:9c:94:aa:c6:
         88:2e:2a:dc:c5:59:7a:92:bf:c5:ab:8b:81:fb:12:da:85:a9:
         6d:7a:3f:23:9f:85:78:9c:f9:74:0d:a0:ae:02:0d:98:b0:1d:
         b4:70:16:cd:48:8a:59:8c:e4:20:f2:0d:0e:4d:1e:36:15:4c:
         9c:59:bb:05:5a:5c:66:75:e6:bf:4c:47:78:fb:87:04:8d:57:
         1b:c0:d4:f5:ae:73:73:04:7c:e1:36:bc:12:e3:39:48:d1:b6:
         f6:d9:34:04:99:a7:92:bc:54:40:5f:65:83:f0:f5:42:41:d6:
         08:ec:d7:95:41:86:dc:86:1e:dc:9d:56:3c:73:b8:31:fe:8e:
         10:13:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----