Certificate

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/wi_m_sr973Q6HPym4bMer--LfAw.cer
File:                     wi_m_sr973Q6HPym4bMer--LfAw.cer (raw, json)
Hash identifier:          bwHQEr4GdwFGsFCFqohF239XffqBPLoNgnC7s29QbR0=
Subject key identifier:   C2:2F:E6:FE:CA:FD:EF:74:3A:1C:FC:A6:E1:B3:1E:AF:EF:8B:7C:0C
Authority key identifier: A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E
Certificate issuer:       /CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
Certificate serial:       1A78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
Manifest:                 rsync://rpkica.twnic.tw/rpki/TWNICCA/DATACUBE/wi_m_sr973Q6HPym4bMer--LfAw.mft
caRepository:             rsync://rpkica.twnic.tw/rpki/TWNICCA/DATACUBE/
Notify URL:               https://rrdp.twnic.tw/rrdp/notify.xml
Certificate not before:   Tue 29 Sep 2020 09:53:43 +0000
Certificate not after:    Wed 29 Sep 2021 09:51:23 +0000
Subordinate resources:    IP: 103.131.196.0/22
                          IP: 2403:d040::/32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6776 (0x1a78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000/serialNumber=A23A7C63547118AAE497F03E13121C96AB34547E
        Validity
            Not Before: Sep 29 09:53:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C22FE6FECAFDEF743A1CFCA6E1B31EAFEF8B7C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:a5:d9:eb:f8:ab:b3:11:2e:34:33:a7:ea:
                    db:24:2b:33:0f:f6:03:40:e4:41:ce:79:7b:83:89:
                    0d:74:1a:49:0f:32:07:65:e0:3c:c9:c6:7e:08:e2:
                    68:b5:8a:72:ff:6f:76:5e:0b:16:74:d7:d0:bc:ff:
                    2d:5a:59:f9:9c:4a:03:2a:6b:2b:25:49:f0:fb:e6:
                    9a:a5:2b:8e:a9:18:72:10:98:0a:98:ca:55:0e:9a:
                    cb:b3:93:02:83:06:0d:05:6b:87:09:f3:a2:d9:fa:
                    a7:72:df:13:28:9f:8e:dd:5e:40:90:02:ec:18:3e:
                    c4:42:78:74:52:2a:cb:8a:d3:7e:aa:76:16:aa:f0:
                    ec:ea:c4:64:6b:b9:ff:0b:eb:8a:00:56:9b:8e:bf:
                    f5:94:0a:e3:13:fe:bb:75:5d:f7:ee:5e:8e:d2:b2:
                    5d:4f:f9:20:3e:1d:f8:03:8d:e6:85:cc:91:78:82:
                    2b:a6:8a:67:39:20:9e:ef:d6:cd:37:74:ee:6c:05:
                    ac:13:85:86:4d:76:dd:b8:39:f1:0b:47:ac:c6:9b:
                    30:d2:b3:b8:9f:b9:38:05:33:04:73:dc:62:bd:2f:
                    38:ed:0f:c9:64:2e:76:ca:ff:0d:9b:20:1d:11:60:
                    9e:2c:c0:3b:de:c3:e6:05:02:70:ed:03:49:1b:e6:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2F:E6:FE:CA:FD:EF:74:3A:1C:FC:A6:E1:B3:1E:AF:EF:8B:7C:0C
            X509v3 Authority Key Identifier:
                keyid:A2:3A:7C:63:54:71:18:AA:E4:97:F0:3E:13:12:1C:96:AB:34:54:7E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Subject Information Access:
                CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DATACUBE/
                RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DATACUBE/wi_m_sr973Q6HPym4bMer--LfAw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.196.0/22
                IPv6:
                  2403:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:56:12:51:66:c5:f0:18:66:b1:36:51:41:02:6e:be:9d:
         4c:1a:7e:43:76:8a:70:1c:a0:48:b2:b5:df:e4:74:83:1f:2b:
         03:98:e4:46:45:34:ba:bd:d1:54:88:bf:65:0f:f5:2a:83:7f:
         bb:f4:7b:fc:2e:b6:cb:0f:2e:10:d9:8d:8d:2f:dc:6e:52:05:
         55:e7:9a:81:1c:36:e9:13:9f:f2:cc:ee:ae:1c:d3:d2:93:f1:
         97:64:4b:65:29:fe:d4:2e:28:7f:c1:98:d9:4c:bb:64:4d:66:
         dc:09:2e:c4:e1:91:49:74:0d:9f:ab:53:9f:91:14:13:03:95:
         db:a5:20:90:87:57:3c:40:24:cf:8b:8e:a4:ca:cd:6f:6c:1b:
         43:ef:fd:34:af:f6:cc:27:d9:1b:c5:22:18:d2:03:d8:52:87:
         d5:79:56:61:98:98:03:23:c0:56:f6:69:16:f7:04:f6:76:0e:
         dc:67:56:cf:af:80:7e:57:ab:56:19:87:56:6c:d2:e8:da:e7:
         bb:df:83:73:3f:60:ee:32:76:90:68:d0:9e:4e:d3:fc:0f:ae:
         73:99:8c:9f:db:b4:ea:24:b5:e2:6e:d0:90:8d:2a:7d:ae:d3:
         1b:f1:02:75:ae:20:96:83:81:53:9b:d2:ca:93:c0:7f:fe:5d:
         7a:cb:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----