Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/pVqvXtxylqkxqO56YkI0XZ7GjR0.cer
File:                     pVqvXtxylqkxqO56YkI0XZ7GjR0.cer (raw, json)
Hash identifier:          liXddx9eTFCz3LV4UgDV8uEz2ufTlfenW7KCz8gy2nw=
Subject key identifier:   A5:5A:AF:5E:DC:72:96:A9:31:A8:EE:7A:62:42:34:5D:9E:C6:8D:1D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       199E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:32 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.124.76.0/22
                          IP: 2403:db40::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6558 (0x199e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A55AAF5EDC7296A931A8EE7A6242345D9EC68D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d5:34:98:75:8b:d9:90:18:03:f2:8a:c0:9d:
                    8a:f6:0e:50:dc:8a:3f:d5:12:0d:91:38:a3:7f:e3:
                    8c:d7:b6:13:aa:f0:2d:e7:84:28:76:ad:27:d7:f6:
                    8a:49:c5:21:e0:c0:db:aa:35:68:46:31:27:4a:fe:
                    a5:18:47:b5:1b:b3:a6:b6:45:76:ee:b8:e8:19:1f:
                    bc:ff:7b:0c:11:85:4b:a1:01:57:90:33:ae:0a:81:
                    16:b8:e2:29:22:57:a9:f5:e7:d5:ad:5b:be:f9:ea:
                    b9:82:87:ef:6d:af:c2:31:ab:8d:98:6b:15:f2:91:
                    56:74:5f:c6:c8:2b:84:dd:9d:30:93:59:e2:82:4b:
                    4a:3c:b5:62:15:8a:c8:18:5e:b9:12:6a:ac:40:81:
                    cc:04:68:27:ae:44:b7:88:7b:bc:4a:f5:10:80:4b:
                    f6:37:54:d5:bf:44:25:0c:b7:3c:10:8a:e5:78:33:
                    a3:67:8b:af:4c:00:62:b9:88:23:9b:36:e2:46:0b:
                    16:50:0f:89:6e:35:37:db:2a:41:b1:1b:db:27:22:
                    f2:94:09:d8:49:4b:d9:82:ad:d9:c3:4b:13:cb:9a:
                    37:4b:a9:17:54:b5:e4:da:f5:12:86:68:1b:f2:b3:
                    03:3e:96:a9:51:df:ec:9f:0d:a2:de:7a:6a:10:2e:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5A:AF:5E:DC:72:96:A9:31:A8:EE:7A:62:42:34:5D:9E:C6:8D:1D
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINCEIE/pVqvXtxylqkxqO56YkI0XZ7GjR0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.76.0/22
                IPv6:
                  2403:db40::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:85:91:4f:4d:6c:cf:b9:22:80:45:df:01:bb:a0:5b:58:63:
         ae:35:4b:65:80:0f:45:ab:af:3a:c6:7a:dc:67:68:6d:d1:1c:
         a1:d3:23:6e:7b:3c:ba:dd:f7:93:dc:ce:ec:85:b5:16:39:8a:
         38:11:03:45:dc:33:6e:a0:f2:ea:87:cc:dc:03:bc:69:1b:d8:
         a6:58:ba:d2:c7:58:f1:fd:01:39:8a:29:8f:54:e5:84:61:d4:
         14:47:02:52:1c:3c:5b:99:82:ed:59:f6:88:20:c1:9c:d3:17:
         c9:26:4f:cf:d3:bb:76:eb:f6:71:02:fe:80:1e:30:45:d8:c5:
         5e:b7:36:87:fc:56:5b:73:23:8a:fb:8a:0e:3c:65:a3:ac:35:
         6a:f2:6c:09:65:38:cc:0c:61:9f:95:15:e0:9c:8a:94:1c:fd:
         13:c0:ab:51:fe:6b:70:d7:81:85:a2:17:03:40:a7:9a:29:1d:
         47:11:dc:42:14:ce:25:77:9f:3a:09:71:81:1e:48:45:19:3a:
         a6:e7:5a:65:5c:83:bf:c0:83:92:df:da:34:db:b0:f1:ba:31:
         41:1b:db:08:05:ec:38:00:8c:38:5a:6b:ee:23:22:e0:35:c5:
         d0:24:50:73:73:b4:88:20:97:2a:a6:da:73:c2:a3:6a:12:c7:
         32:d8:0d:e9
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICGZ4wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx
QkRCMjkwMDAwMTEwLwYDVQQFEyhBMjNBN0M2MzU0NzExOEFBRTQ5N0YwM0UxMzEy
MUM5NkFCMzQ1NDdFMB4XDTIwMDkyOTA5NTMzMloXDTIxMDkyOTA5NTEyM1owMzEx
MC8GA1UEAxMoQTU1QUFGNUVEQzcyOTZBOTMxQThFRTdBNjI0MjM0NUQ5RUM2OEQx
RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOHVNJh1i9mQGAPyisCd
ivYOUNyKP9USDZE4o3/jjNe2E6rwLeeEKHatJ9f2iknFIeDA26o1aEYxJ0r+pRhH
tRuzprZFdu646BkfvP97DBGFS6EBV5AzrgqBFrjiKSJXqfXn1a1bvvnquYKH722v
wjGrjZhrFfKRVnRfxsgrhN2dMJNZ4oJLSjy1YhWKyBheuRJqrECBzARoJ65Et4h7
vEr1EIBL9jdU1b9EJQy3PBCK5Xgzo2eLr0wAYrmII5s24kYLFlAPiW41N9sqQbEb
2yci8pQJ2ElL2YKt2cNLE8uaN0upF1S15Nr1EoZoG/KzAz6WqVHf7J8Not56ahAu
8S0CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSlWq9e3HKWqTGo7npiQjRdnsaNHTAf
BgNVHSMEGDAWgBSiOnxjVHEYquSX8D4TEhyWqzRUfjAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS9vanA4WTFSeEdLcmtsX0EtRXhJY2xxczBWSDQuY3Js
MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj
Lm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYy
L29qcDhZMVJ4R0tya2xfQS1FeEljbHFzMFZINC5jZXIwDwYDVR0TAQH/BAUwAwEB
/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUFBzAF
hi1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lOQ0VJRS8w
WAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9TSU5DRUlFL3BWcXZYdHh5bHFreHFPNTZZa0kwWFo3R2pSMC5tZnQwMQYIKwYB
BQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwLgYI
KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnfEwwDQQCAAIwBwMFACQD20AwDQYJ
KoZIhvcNAQELBQADggEBAIeFkU9NbM+5IoBF3wG7oFtYY641S2WAD0WrrzrGetxn
aG3RHKHTI257PLrd95PczuyFtRY5ijgRA0XcM26g8uqHzNwDvGkb2KZYutLHWPH9
ATmKKY9U5YRh1BRHAlIcPFuZgu1Z9oggwZzTF8kmT8/Tu3br9nEC/oAeMEXYxV63
Nof8VltzI4r7ig48ZaOsNWrybAllOMwMYZ+VFeCcipQc/RPAq1H+a3DXgYWiFwNA
p5opHUcR3EIUziV3nzoJcYEeSEUZOqbnWmVcg7/Ag5Lf2jTbsPG6MUEb2wgF7DgA
jDhaa+4jIuA1xdAkUHNztIgglyqm2nPCo2oSxzLYDek=
-----END CERTIFICATE-----