Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/rgp7PoiiSoG-kaCWlWkdXRhFGU0.cer
File:                     rgp7PoiiSoG-kaCWlWkdXRhFGU0.cer (raw, json)
Hash identifier:          ydc9A+v9Z/HE+IhMSKGL0C7EZcTK6z27XwRY32Mas6Y=
Subject key identifier:   AE:0A:7B:3E:88:A2:4A:81:BE:91:A0:96:95:69:1D:5D:18:45:19:4D
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       345F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/rgp7PoiiSoG-kaCWlWkdXRhFGU0.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Mon 10 Feb 2025 14:29:02 +0000
Certificate not after:    Tue 14 Oct 2025 15:30:32 +0000
Subordinate resources:    AS: 152616
                          IP: 2401:cd20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13407 (0x345f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000
        Validity
            Not Before: Feb 10 14:29:02 2025 GMT
            Not After : Oct 14 15:30:32 2025 GMT
        Subject: CN=AE0A7B3E88A24A81BE91A09695691D5D1845194D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:86:8d:a0:75:ad:fd:d4:83:db:6f:98:01:
                    46:06:40:8d:cd:30:c2:c6:64:4e:cf:5a:6c:4a:44:
                    ec:4a:df:e6:2d:fa:65:21:e4:c1:67:9f:10:c2:c8:
                    0f:f2:21:6b:aa:2c:02:fc:5f:bc:26:3f:fe:90:f3:
                    f2:1f:86:48:d0:b7:be:61:fd:dc:98:2e:5e:94:d4:
                    43:3d:6e:a6:b3:0b:8d:04:73:2b:19:3b:2a:0d:01:
                    3d:60:d4:e9:80:9a:24:5f:e8:b1:8b:cb:64:49:fa:
                    dc:21:37:1b:2b:e3:ea:2c:5e:97:6a:a8:e6:0a:53:
                    ff:95:32:18:f8:ea:25:01:7a:4f:89:d4:86:85:75:
                    9d:fe:3e:d6:5c:ca:cd:85:10:5e:8d:82:e7:93:eb:
                    e7:b2:a8:c2:e5:74:52:b5:6c:c4:65:aa:84:52:cd:
                    77:82:80:47:75:e0:9b:78:15:9b:d7:9e:b6:fd:19:
                    c9:15:82:2f:f5:82:26:55:0a:1b:d1:a9:99:a1:65:
                    2c:c0:1f:4a:a0:27:e3:a6:ec:fe:3e:82:ed:51:a5:
                    39:5c:e2:15:5a:2e:d6:b4:f3:4c:1a:63:0c:21:fa:
                    8b:86:db:c7:74:ac:42:32:f1:62:50:fc:88:df:eb:
                    1a:e8:89:9a:4c:24:6a:f8:cc:99:5f:33:6e:74:c7:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0A:7B:3E:88:A2:4A:81:BE:91:A0:96:95:69:1D:5D:18:45:19:4D
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/rgp7PoiiSoG-kaCWlWkdXRhFGU0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152616

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:cd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:58:2d:4f:46:c3:08:12:e4:18:bf:47:44:91:25:6b:dd:a1:
         ef:2e:93:e6:35:22:26:b4:4f:bf:1f:5f:40:ea:af:ff:87:60:
         a5:61:aa:df:dd:7b:a5:71:d7:61:b5:e4:02:e1:fa:b3:d7:fe:
         45:34:e3:8f:93:99:d5:fd:eb:1a:81:68:61:ed:fd:cc:87:2f:
         0b:5f:80:a1:ae:1e:ad:36:67:59:1b:b7:3f:9a:f9:dc:af:d2:
         34:bd:a7:99:c6:1f:26:98:29:2e:d5:1c:11:8c:54:32:17:0b:
         1b:b4:11:c6:ae:ed:22:d1:2b:09:79:6b:d1:12:17:10:cd:f7:
         67:b3:a4:ec:36:58:c9:9a:18:7f:1f:9a:bb:eb:92:f8:56:b0:
         58:49:a1:b3:1d:1a:c0:ec:8e:1e:cc:08:a4:df:97:6a:b4:6e:
         86:3f:ec:e8:77:39:83:da:ad:dd:9c:77:28:cf:fb:cd:eb:a5:
         ef:38:9e:51:6e:19:b0:92:1e:58:93:15:3d:b0:22:9d:4f:c0:
         3e:f2:23:fd:64:4e:00:11:4b:b0:f2:1f:e9:ce:7f:12:c3:e2:
         0b:50:51:98:43:eb:89:4b:36:1a:e5:f5:a2:32:fe:77:15:ff:
         e8:f3:8b:e5:17:33:5d:5c:76:f7:60:82:52:bb:6f:62:c3:5f:
         a2:a1:8a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:37:48 2025 by rpki-client