Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer
File:                     nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer (raw, json)
Hash identifier:          0nSRuUa91RFn2leTeYhynDjqbOYWcim0WHlJTbc6POU=
Subject key identifier:   9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       2A52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 31 Oct 2023 07:12:57 +0000
Certificate not after:    Sat 31 Aug 2024 03:10:53 +0000
Subordinate resources:    IP: 2403:b040::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10834 (0x2a52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Oct 31 07:12:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9EEBB531831504906C0086DB42969683D64BBAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:22:7b:05:fa:4b:73:55:5e:23:6c:4e:54:
                    de:f8:b9:f2:e9:be:bb:c0:38:cc:c1:6b:c8:c0:f4:
                    24:94:5e:eb:af:6b:41:22:e0:4a:9e:b0:31:46:9c:
                    65:aa:4f:75:9c:14:89:d3:e3:7e:ab:bb:85:56:23:
                    16:b0:a1:76:85:46:d2:83:b8:28:e0:3a:b7:fb:38:
                    c4:a9:35:1b:d1:ae:13:74:b7:33:29:20:23:bd:86:
                    6e:ef:ef:29:f4:d7:1b:0d:07:61:ff:35:d8:6e:94:
                    05:7c:79:04:32:b5:4c:6d:3a:ad:39:d8:4e:d3:7e:
                    91:ac:d1:e3:6b:3b:b7:36:3e:e5:24:56:9b:a2:e7:
                    e6:3b:c0:1b:ab:66:a1:10:6d:75:96:05:bd:b4:28:
                    97:e7:45:6d:d9:a5:4e:fa:76:21:92:e8:dd:37:c8:
                    4d:eb:09:2b:d5:78:f5:b7:7b:6f:c8:80:20:cf:23:
                    3b:34:72:bc:63:8a:53:35:1c:7c:99:5b:05:c7:a3:
                    69:96:39:c7:4c:c7:e0:6f:1e:d8:3f:64:0a:db:ba:
                    db:da:c8:cd:2a:af:f4:f6:78:b3:dc:98:db:8e:cf:
                    82:c5:42:3a:a4:96:51:00:b6:f2:73:b2:65:d8:85:
                    97:b4:50:20:ca:d1:5c:3b:41:b1:81:4f:70:59:4f:
                    ca:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b040::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:71:37:93:4e:a3:54:2b:b1:14:50:b3:eb:81:b7:c4:89:
         bd:10:02:02:2d:4a:ee:e0:12:f0:48:b4:e1:13:b8:00:6c:1c:
         b2:c2:0b:97:db:70:f2:7c:4b:31:3a:a0:41:b7:b2:83:04:d0:
         d5:8b:74:6e:d2:13:ef:8e:c6:1b:ef:48:22:14:28:91:9f:bd:
         dd:ea:4d:26:bd:90:9d:07:ba:58:44:fd:9d:3c:47:80:a2:d4:
         2b:a7:e5:a1:ee:f3:24:9c:1b:ab:6d:d0:45:da:cf:d7:32:1d:
         8e:7c:cb:42:92:c0:96:57:bd:57:61:97:48:44:3c:69:32:15:
         1b:51:84:35:47:96:26:15:6c:ed:3f:0d:34:ba:c5:3f:f2:01:
         ac:5b:6e:e0:23:01:79:6e:26:eb:01:ff:d0:6c:76:50:5a:ec:
         58:7d:10:40:e9:45:01:84:c6:9b:aa:65:03:f9:eb:84:57:d5:
         e8:33:d2:24:f3:b0:47:de:08:ae:a7:34:39:91:82:69:aa:b8:
         5f:3f:20:14:f6:c4:0e:29:07:df:f4:72:c1:62:e8:7a:fd:4e:
         0a:f0:a4:92:4a:2a:e3:e9:60:35:27:c8:d9:13:14:a5:32:4d:
         56:38:6b:ce:24:14:43:cb:64:04:0f:b6:c2:41:3d:90:ff:9f:
         0b:57:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----