Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/58F8DA0D99B41E19A9B5E94FF00725C7628168AB.cer
File:                     58F8DA0D99B41E19A9B5E94FF00725C7628168AB.cer (raw, json)
Hash identifier:          8Y34vSyh7oG693tCrUEwNbYdEcv6DcGe34q+cXVn41w=
Subject key identifier:   58:F8:DA:0D:99:B4:1E:19:A9:B5:E9:4F:F0:07:25:C7:62:81:68:AB
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       2593F107C1B9A9AB5DD64526804048CB797CB82B
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/AS200566/2/58F8DA0D99B41E19A9B5E94FF00725C7628168AB.mft
caRepository:             rsync://rpki.co/repo/AS200566/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 13 May 2024 08:20:32 +0000
Certificate not after:    Mon 12 May 2025 08:25:32 +0000
Subordinate resources:    IP: 2a12:dd47:d300::/40

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 09:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:93:f1:07:c1:b9:a9:ab:5d:d6:45:26:80:40:48:cb:79:7c:b8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: May 13 08:20:32 2024 GMT
            Not After : May 12 08:25:32 2025 GMT
        Subject: CN=58F8DA0D99B41E19A9B5E94FF00725C7628168AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:89:54:26:f3:dd:f2:a9:3e:04:29:be:2e:
                    c0:a7:c9:20:18:3b:4c:f2:f8:45:6c:30:1c:cb:f8:
                    b4:a0:4b:51:c7:c2:96:92:b1:5d:54:38:b6:f9:f0:
                    ff:d1:cd:b6:68:c7:6e:02:45:5d:ba:70:dc:af:f7:
                    0d:a1:2a:d6:0a:d4:3e:81:90:00:f8:7b:b6:72:06:
                    ed:3f:f6:34:6d:f3:dc:09:7e:04:cd:6f:61:ac:6e:
                    69:b2:0a:5e:78:57:d4:52:05:5b:65:84:22:fa:0d:
                    a9:21:45:a5:5c:a6:89:a5:e9:9b:b1:35:d7:fe:c4:
                    07:89:96:84:f8:4f:f7:d7:12:53:62:49:9c:23:4b:
                    8c:56:25:61:fc:fa:90:14:50:07:a9:59:78:72:bb:
                    5e:ee:08:09:4e:ba:88:1f:b3:45:cd:f1:1e:a8:1a:
                    dd:69:d0:8a:61:0e:9a:c0:51:46:0d:5e:a7:1f:5d:
                    1a:71:15:db:68:85:de:cc:66:cf:fb:ec:8b:7f:09:
                    95:f5:44:bd:24:b2:6c:d3:5d:43:1f:bb:8d:1e:b1:
                    2b:9d:db:3c:c6:68:9c:03:46:4f:b4:8d:74:64:3c:
                    73:90:30:90:77:1f:a3:4b:eb:0c:e5:2f:3c:0f:71:
                    66:f2:1b:aa:32:e7:5a:ec:e9:f6:48:a8:5a:0d:d6:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:F8:DA:0D:99:B4:1E:19:A9:B5:E9:4F:F0:07:25:C7:62:81:68:AB
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS200566/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS200566/2/58F8DA0D99B41E19A9B5E94FF00725C7628168AB.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:a4:9e:de:9c:e1:55:e3:06:99:2c:05:9c:7b:2a:b0:b2:e5:
         02:25:04:bd:eb:47:75:2b:d5:f1:e7:1b:ef:db:53:de:e0:a1:
         0f:bb:06:05:5e:d3:77:ce:f7:f1:64:7b:cf:8f:e1:f4:c4:72:
         b8:81:7e:db:11:6f:a6:d1:f2:93:6d:cf:4b:42:9f:91:ca:5d:
         0d:1a:06:a6:95:fa:c4:22:da:2a:84:c5:7b:13:32:a0:0e:49:
         68:71:57:82:24:13:7a:f5:31:59:1a:d5:9b:d5:05:88:a3:e8:
         25:1e:cb:b1:ac:03:dc:ac:79:c3:e4:46:ff:92:50:ab:46:64:
         8e:46:49:33:f3:5b:07:9d:ea:e9:a2:e0:c2:e2:1c:fc:9c:10:
         96:73:16:eb:9d:d3:6c:ff:39:2e:7b:da:d0:95:d0:37:e2:92:
         a5:f4:42:0b:12:45:b6:5e:f8:38:50:32:d0:90:f7:20:d0:e4:
         68:69:e9:e4:e0:35:6c:82:72:78:38:55:b1:f5:95:65:ca:cd:
         f0:2b:0a:35:18:2c:01:06:41:7f:fc:5c:57:ae:78:5b:15:f4:
         59:e9:8d:0a:5c:a3:8a:a7:89:20:b9:ea:93:23:e2:54:85:de:
         dc:b1:e4:73:63:99:cc:c9:f2:24:55:1f:87:2c:30:88:a3:39:
         06:37:c9:12
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUJZPxB8G5qatd1kUmgEBIy3l8uCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yNDA1MTMwODIwMzJaFw0yNTA1MTIwODI1MzJaMDMxMTAvBgNV
BAMTKDU4RjhEQTBEOTlCNDFFMTlBOUI1RTk0RkYwMDcyNUM3NjI4MTY4QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKIlUJvPd8qk+BCm+LsCnySAY
O0zy+EVsMBzL+LSgS1HHwpaSsV1UOLb58P/RzbZox24CRV26cNyv9w2hKtYK1D6B
kAD4e7ZyBu0/9jRt89wJfgTNb2GsbmmyCl54V9RSBVtlhCL6DakhRaVcpoml6Zux
Ndf+xAeJloT4T/fXElNiSZwjS4xWJWH8+pAUUAepWXhyu17uCAlOuogfs0XN8R6o
Gt1p0IphDprAUUYNXqcfXRpxFdtohd7MZs/77It/CZX1RL0ksmzTXUMfu40esSud
2zzGaJwDRk+0jXRkPHOQMJB3H6NL6wzlLzwPcWbyG6oy51rs6fZIqFoN1kTzAgMB
AAGjggI4MIICNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRY+NoNmbQeGam1
6U/wByXHYoFoqzAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2
LnR3L3Jwa2kvQXVndXN0LzUvNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0Mw
NUJGRDk5RjNFNi5jZXIwgdAGCCsGAQUFBwELBIHDMIHAMCwGCCsGAQUFBzAFhiBy
c3luYzovL3Jwa2kuY28vcmVwby9BUzIwMDU2Ni8yLzBYBggrBgEFBQcwCoZMcnN5
bmM6Ly9ycGtpLmNvL3JlcG8vQVMyMDA1NjYvMi81OEY4REEwRDk5QjQxRTE5QTlC
NUU5NEZGMDA3MjVDNzYyODE2OEFCLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9y
cmRwLnJwa2kuY28vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H0zAN
BgkqhkiG9w0BAQsFAAOCAQEAs6Se3pzhVeMGmSwFnHsqsLLlAiUEvetHdSvV8ecb
79tT3uChD7sGBV7Td8738WR7z4/h9MRyuIF+2xFvptHyk23PS0KfkcpdDRoGppX6
xCLaKoTFexMyoA5JaHFXgiQTevUxWRrVm9UFiKPoJR7LsawD3Kx5w+RG/5JQq0Zk
jkZJM/NbB53q6aLgwuIc/JwQlnMW653TbP85Lnva0JXQN+KSpfRCCxJFtl74OFAy
0JD3INDkaGnp5OA1bIJyeDhVsfWVZcrN8CsKNRgsAQZBf/xcV654WxX0WemNClyj
iqeJILnqkyPiVIXe3LHkc2OZzMnyJFUfhywwiKM5BjfJEg==
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:53:41 2024 by rpki-client on console-ams.rpki-client.org