Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/_WpgT9ea80dwCOcepO1c31iMpmQ.cer
File:                     _WpgT9ea80dwCOcepO1c31iMpmQ.cer (raw, json)
Hash identifier:          HdEMdO/VmAHWHjnmmXyEKX6potW+UkJRIvuu8Ljuk84=
Subject key identifier:   FD:6A:60:4F:D7:9A:F3:47:70:08:E7:1E:A4:ED:5C:DF:58:8C:A6:64
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2A4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/_WpgT9ea80dwCOcepO1c31iMpmQ.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 31 Oct 2023 07:12:30 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    IP: 2403:b140::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10831 (0x2a4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Oct 31 07:12:30 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FD6A604FD79AF3477008E71EA4ED5CDF588CA664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:73:36:68:0c:cb:58:cb:dd:4e:b2:5f:83:
                    0e:b3:43:5a:54:9f:c3:6c:3a:20:99:80:61:7f:2b:
                    2f:f5:a8:7c:8a:ca:eb:06:be:ac:bc:a0:62:b4:88:
                    cf:de:ec:30:fa:0f:5f:56:5c:54:01:89:46:ff:01:
                    3f:6c:e7:76:5d:94:65:5f:b5:24:ec:c5:57:d7:45:
                    3a:9e:b5:a8:25:ed:ee:cc:ea:b5:a9:c1:32:45:1c:
                    f4:03:c9:be:67:e3:53:9f:c4:11:bb:d7:a7:89:b7:
                    aa:0e:9e:ad:44:cc:0b:92:95:51:97:db:a3:0b:d6:
                    1f:c7:af:be:91:d1:c9:42:c4:2b:72:02:62:10:b1:
                    04:7c:40:7a:4f:9c:80:b9:9d:98:03:b8:1d:1b:6e:
                    1a:de:26:83:86:9f:3d:86:01:55:f3:45:0f:2e:d2:
                    eb:ed:53:8b:d6:19:5b:91:79:b8:c7:b0:e8:eb:ae:
                    34:07:fd:98:4c:c5:90:2f:18:e8:b8:e8:ec:16:96:
                    36:b2:98:10:d2:34:65:ee:86:31:09:a8:a4:3a:88:
                    5e:65:fa:75:63:30:c5:af:03:56:f4:df:f8:a5:91:
                    7b:3c:5a:75:dd:d0:88:b5:81:78:69:94:cd:67:bf:
                    c7:31:3e:99:45:65:cc:33:7b:d9:03:e0:aa:d7:f1:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:60:4F:D7:9A:F3:47:70:08:E7:1E:A4:ED:5C:DF:58:8C:A6:64
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/_WpgT9ea80dwCOcepO1c31iMpmQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:02:9d:6f:c3:9c:92:ab:9c:dc:18:a2:a1:ec:dd:59:72:a3:
         1b:09:0c:e9:0e:50:0f:3c:ee:a9:c1:7c:e9:6f:ef:1c:de:7d:
         da:28:5c:9e:64:f7:2c:d0:ff:9d:bc:90:4d:1d:24:a3:24:7d:
         c8:2d:8a:be:77:70:6a:9a:21:af:ba:45:a2:2e:f8:e6:42:0e:
         b9:5a:44:e5:ee:a9:56:b9:8b:e5:d0:9f:16:19:5d:21:40:bd:
         ac:49:44:0e:9a:52:a0:58:ec:a3:50:b9:48:2f:00:70:ae:6e:
         13:ec:c1:fa:87:71:67:99:6b:2b:62:8b:5e:cc:96:4b:b0:83:
         3a:3b:71:6b:93:c1:9b:16:39:15:8c:97:73:04:3d:a1:4e:4a:
         77:f0:d4:87:fd:69:65:06:e3:ce:50:46:de:e4:26:06:ed:4e:
         cb:8e:d0:1c:43:d9:c6:fb:08:11:ba:2e:68:0b:ca:b1:e0:88:
         11:58:f9:0a:58:3b:df:f0:5d:c4:22:c0:3c:5d:15:61:0d:83:
         3f:d1:f6:d6:12:66:a1:8f:d5:7b:b1:92:5a:f5:2c:5e:20:b9:
         19:b5:c5:da:a5:5e:12:9c:e8:31:a2:14:51:a5:e5:24:74:1c:
         1e:ac:54:95:24:ea:05:25:43:20:e9:68:49:8a:c4:47:7b:a1:
         bf:d1:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----