Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/b-JnyUI7znZ445GyWUEwNmtQmSs.cer
File:                     b-JnyUI7znZ445GyWUEwNmtQmSs.cer (raw, json)
Hash identifier:          +neinvV5/MmFE6Hhmmt1VZS1Hx29DMZup0pFVAkq8ic=
Subject key identifier:   6F:E2:67:C9:42:3B:CE:76:78:E3:91:B2:59:41:30:36:6B:50:99:2B
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       19C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/KHI/b-JnyUI7znZ445GyWUEwNmtQmSs.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/KHI/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:34 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.132.40.0/22
                          IP: 2404:2e40::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6598 (0x19c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6FE267C9423BCE7678E391B2594130366B50992B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:e4:88:72:12:7d:b2:43:cd:70:20:4a:b7:
                    4b:28:04:6d:0a:96:da:40:57:1c:13:14:6a:c9:e8:
                    24:c4:02:1a:c4:cf:49:ff:4c:28:18:7f:3a:12:b0:
                    a0:cf:70:e1:18:b7:a8:45:97:db:16:f2:4b:48:9f:
                    c8:72:f4:a0:b5:fa:01:06:3a:d6:89:f3:55:d8:02:
                    ca:a3:f0:f5:a6:92:88:de:5c:2e:ad:a1:69:40:5b:
                    13:25:a5:35:a1:4c:54:d4:3a:bb:7e:41:3f:b6:f7:
                    36:60:50:b1:62:94:cf:10:6c:32:9f:70:37:cb:ab:
                    08:09:4e:da:c0:88:18:a8:58:9f:d9:f6:d8:78:c2:
                    2e:b7:92:c8:c3:ca:9c:4d:6b:e0:7f:29:7e:43:e7:
                    b5:48:55:5b:f5:b4:df:11:6b:69:51:c1:c2:fd:98:
                    f6:dc:7c:70:61:ac:4c:31:fd:3e:1e:80:8a:ad:91:
                    01:eb:41:09:c1:f1:32:e0:d2:0e:a2:e1:49:4e:b9:
                    2b:80:4f:2d:74:8e:f7:72:84:98:e5:f0:e3:ce:e3:
                    d3:b2:d6:a5:f5:a2:1f:0f:4e:d7:85:49:07:65:64:
                    47:6b:d6:82:19:0f:64:c3:be:60:5b:18:20:74:d7:
                    ab:32:34:bc:c3:cc:3b:f9:fd:be:b5:b5:2b:d9:3a:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:67:C9:42:3B:CE:76:78:E3:91:B2:59:41:30:36:6B:50:99:2B
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KHI/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KHI/b-JnyUI7znZ445GyWUEwNmtQmSs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.40.0/22
                IPv6:
                  2404:2e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:9e:23:bf:9a:b7:f3:2e:7c:9e:54:40:6c:21:02:ad:e0:e3:
         f9:a8:11:73:ea:2c:d0:0b:ff:0c:cd:9f:72:5c:55:05:85:49:
         f1:40:43:92:b8:cf:f5:a1:34:0e:9b:d3:13:a3:29:ec:11:53:
         5d:f8:40:b1:01:8b:b8:04:34:14:18:21:a3:26:27:a9:64:aa:
         ca:53:71:1e:3b:04:0b:de:02:a2:1c:a3:ba:92:bf:a5:c8:fc:
         0d:d3:a6:88:e6:e4:c1:27:90:e0:69:79:8a:58:d4:4b:04:ad:
         68:2e:f0:98:95:c6:11:7c:9d:20:16:c3:ff:e1:3a:65:0c:0f:
         35:8b:1c:c5:89:89:15:6b:92:18:b1:8c:c6:84:17:36:f8:ff:
         bc:7c:de:39:d7:ba:01:9d:d1:d2:68:ba:f1:a3:ab:f4:fd:8b:
         8d:93:5b:c0:97:95:1b:c0:1b:92:02:f2:ea:6d:84:ef:62:68:
         31:57:64:1b:60:e0:97:5a:d1:4e:5c:eb:1f:80:b1:f9:4d:b1:
         99:0d:0b:d6:31:01:22:ba:e6:e2:7d:f9:95:4a:a2:5c:67:d9:
         49:c4:e0:15:ae:6e:c4:db:48:21:ce:30:d4:07:75:81:3a:3d:
         1e:5d:e9:1e:96:61:ed:b5:a0:59:c2:47:d5:bb:13:1e:20:2a:
         2f:6d:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----