Certificate

$ rpki-client -vvf rpki.august.tw/repo/HYSP/11/5E9D36179486AFAF638F163F0FD905DC3052B22E.cer
File:                     5E9D36179486AFAF638F163F0FD905DC3052B22E.cer (raw, json)
Hash identifier:          b1GZT/380Ur6oexa6WPKr2Ljnd0JZPrPfjimEX8CD7A=
Subject key identifier:   5E:9D:36:17:94:86:AF:AF:63:8F:16:3F:0F:D9:05:DC:30:52:B2:2E
Authority key identifier: 8D:28:79:AC:26:58:91:6B:9D:AA:AF:A6:2C:BF:7E:05:E2:DF:86:83
Certificate issuer:       /CN=8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683
Certificate serial:       43E6D222A7FD668405508F375FE823DE9C64F1AF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.cer
Manifest:                 rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/3/5E9D36179486AFAF638F163F0FD905DC3052B22E.mft
caRepository:             rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/3
Notify URL:               https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before:   Sun 18 Dec 2022 12:36:09 +0000
Certificate not after:    Sun 17 Dec 2023 12:41:09 +0000
Subordinate resources:    IP: 104.37.43.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e6:d2:22:a7:fd:66:84:05:50:8f:37:5f:e8:23:de:9c:64:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683
        Validity
            Not Before: Dec 18 12:36:09 2022 GMT
            Not After : Dec 17 12:41:09 2023 GMT
        Subject: CN=5E9D36179486AFAF638F163F0FD905DC3052B22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:79:31:06:d1:f8:54:1a:40:37:1a:8d:1b:
                    f5:ab:7a:87:4f:d7:0b:c0:6a:d1:a5:b2:5e:d2:ab:
                    e8:ed:26:2e:fe:c5:8d:f7:88:a0:2b:97:b4:07:75:
                    75:d9:99:b3:4d:33:03:44:31:ff:c6:01:e8:43:aa:
                    ae:b7:f9:6d:43:f5:ca:8b:ba:c5:34:dd:11:65:f1:
                    3a:bf:d7:03:4b:01:9a:47:37:60:56:98:bc:ca:4e:
                    36:ba:ef:04:5c:23:fd:6a:8d:86:7a:5c:dc:49:eb:
                    52:fc:01:77:b0:70:3d:b3:ea:8e:df:5f:0d:62:38:
                    10:c4:2b:bd:0a:be:21:f3:80:7a:6c:85:ee:15:0c:
                    27:0e:ef:f8:be:10:a4:e8:79:d8:40:7c:e1:10:e3:
                    b7:b9:76:69:09:b8:82:d0:64:07:7a:55:db:34:e7:
                    80:b8:13:07:43:09:68:58:b6:92:1f:9a:45:4e:b4:
                    97:82:fa:bd:cc:4c:a0:58:c3:97:d3:30:f3:ab:b0:
                    64:fc:82:fd:22:3a:02:70:61:ec:2a:9b:a9:b2:16:
                    55:62:ac:ab:35:3f:13:b8:5d:c3:9c:80:bd:3a:c2:
                    05:b5:3c:9a:78:6f:ae:0a:d1:eb:82:22:31:4c:c4:
                    b8:e9:5c:c1:50:36:11:ca:de:80:54:a8:53:90:36:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:9D:36:17:94:86:AF:AF:63:8F:16:3F:0F:D9:05:DC:30:52:B2:2E
            X509v3 Authority Key Identifier:
                keyid:8D:28:79:AC:26:58:91:6B:9D:AA:AF:A6:2C:BF:7E:05:E2:DF:86:83

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/11/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/8D2879AC2658916B9DAAAFA62CBF7E05E2DF8683.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/3
                RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/3/5E9D36179486AFAF638F163F0FD905DC3052B22E.mft
                RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:95:83:da:3d:88:e9:d9:76:84:71:17:ee:c5:69:d4:c1:56:
         89:57:4c:0b:b6:bf:31:5c:2d:30:ec:8e:ca:b5:48:09:51:d0:
         05:c3:eb:f0:fe:6d:6e:78:e0:38:48:71:01:d3:f2:fb:68:38:
         91:09:33:c6:13:17:28:a2:ad:f7:83:73:2e:94:fb:78:d0:ed:
         f0:b1:63:28:4b:38:d1:c3:f7:3c:01:e1:e4:0a:9d:9c:88:3a:
         83:f3:44:0f:fa:a8:76:bf:ba:46:bf:e0:bf:ad:b2:2b:29:ee:
         d9:f2:87:00:c8:4f:90:d2:39:66:44:6b:40:29:ed:23:48:70:
         f9:90:6e:ef:bd:c1:03:fb:2b:4a:15:41:14:92:95:bb:d2:ed:
         66:f9:69:c0:d7:d4:ad:cc:3e:d3:5c:fe:f6:6e:56:36:ab:06:
         1c:61:e0:03:27:2c:71:53:6b:20:c1:cc:cf:3c:c3:17:5c:65:
         b2:7f:6f:ed:05:fd:64:22:3b:e6:2a:11:50:9c:a6:f8:a1:16:
         1f:35:33:04:de:60:9d:c0:f9:50:01:d4:60:a5:cb:c4:54:2e:
         e5:67:56:30:e5:16:b0:28:d3:b2:28:c3:5f:0d:04:1f:f7:4b:
         2e:47:59:fe:02:3e:4a:b8:06:32:63:04:c8:95:ff:59:90:04:
         84:4f:32:11
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUQ+bSIqf9ZoQFUI83X+gj3pxk8a8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQyODc5QUMyNjU4OTE2QjlEQUFBRkE2MkNCRjdFMDVF
MkRGODY4MzAeFw0yMjEyMTgxMjM2MDlaFw0yMzEyMTcxMjQxMDlaMDMxMTAvBgNV
BAMTKDVFOUQzNjE3OTQ4NkFGQUY2MzhGMTYzRjBGRDkwNURDMzA1MkIyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1XkxBtH4VBpANxqNG/WreodP
1wvAatGlsl7Sq+jtJi7+xY33iKArl7QHdXXZmbNNMwNEMf/GAehDqq63+W1D9cqL
usU03RFl8Tq/1wNLAZpHN2BWmLzKTja67wRcI/1qjYZ6XNxJ61L8AXewcD2z6o7f
Xw1iOBDEK70KviHzgHpshe4VDCcO7/i+EKToedhAfOEQ47e5dmkJuILQZAd6Vds0
54C4EwdDCWhYtpIfmkVOtJeC+r3MTKBYw5fTMPOrsGT8gv0iOgJwYewqm6myFlVi
rKs1PxO4XcOcgL06wgW1PJp4b64K0euCIjFMxLjpXMFQNhHK3oBUqFOQNvsLAgMB
AAGjggKdMIICmTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRenTYXlIavr2OP
Fj8P2QXcMFKyLjAfBgNVHSMEGDAWgBSNKHmsJliRa52qr6Ysv34F4t+GgzAOBgNV
HQ8BAf8EBAMCAQYwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9ycGtpLmF1Z3Vz
dC50dy9yZXBvL0hZU1AvMTEvOEQyODc5QUMyNjU4OTE2QjlEQUFBRkE2MkNCRjdF
MDVFMkRGODY4My5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0
cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0
M2JmNjIwMTgyM2JkNDU0NzUyYmU2LzAvOEQyODc5QUMyNjU4OTE2QjlEQUFBRkE2
MkNCRjdFMDVFMkRGODY4My5jZXIwggEABggrBgEFBQcBCwSB8zCB8DBABggrBgEF
BQcwBYY0cnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8vRVJBVEVSU19V
SURfMTgyNDUvMzBtBggrBgEFBQcwCoZhcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vRVJBVEVSU19VSURfMTgyNDUvMy81RTlEMzYxNzk0ODZBRkFGNjM4
RjE2M0YwRkQ5MDVEQzMwNTJCMjJFLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6Ly9y
cGtpLnphcHBpZWhvc3QuY29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
aCUrMA0GCSqGSIb3DQEBCwUAA4IBAQB4lYPaPYjp2XaEcRfuxWnUwVaJV0wLtr8x
XC0w7I7KtUgJUdAFw+vw/m1ueOA4SHEB0/L7aDiRCTPGExcooq33g3MulPt40O3w
sWMoSzjRw/c8AeHkCp2ciDqD80QP+qh2v7pGv+C/rbIrKe7Z8ocAyE+Q0jlmRGtA
Ke0jSHD5kG7vvcED+ytKFUEUkpW70u1m+WnA19StzD7TXP72blY2qwYcYeADJyxx
U2sgwczPPMMXXGWyf2/tBf1kIjvmKhFQnKb4oRYfNTME3mCdwPlQAdRgpcvEVC7l
Z1Yw5RawKNOyKMNfDQQf90suR1n+Aj5KuAYyYwTIlf9ZkASETzIR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:59 2024 by rpki-client on console-fra.rpki-client.org