Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gt16R4XcAHsLd69wVZfG-TArTfE.cer
File:                     gt16R4XcAHsLd69wVZfG-TArTfE.cer (raw, json)
Hash identifier:          V9LAGOQfEwMx/rQdqjziegLoDJ/NYU986z6nHXK2caQ=
Subject key identifier:   82:DD:7A:47:85:DC:00:7B:0B:77:AF:70:55:97:C6:F9:30:2B:4D:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B0FCAFDBC1
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.august.tw/repo/localname/3/82DD7A4785DC007B0B77AF705597C6F9302B4DF1.mft
caRepository:             rsync://rpki.august.tw/repo/localname/3
Notify URL:               https://rpki.august.tw/rrdp/notification.xml
Certificate not before:   Thu 28 Apr 2022 15:24:23 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    IP: 2a12:dd40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760153627585 (0xb0fcafdbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Apr 28 15:24:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82dd7a4785dc007b0b77af705597c6f9302b4df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:19:f5:3e:5d:0c:98:6f:e4:72:e8:9f:2a:
                    0d:83:34:e6:fe:af:76:34:c9:a7:99:73:6f:85:f4:
                    af:c2:6d:ce:41:fd:57:a0:33:3c:a2:a9:e6:18:73:
                    b0:41:9a:87:49:9f:8e:ea:37:8a:cc:55:74:5e:31:
                    13:86:51:5e:11:91:e8:a8:4b:e3:ab:14:09:85:45:
                    a2:a5:ef:17:07:62:2f:2e:2c:6c:89:0a:9a:b3:2a:
                    5a:36:25:29:e6:56:ae:ba:4b:ba:a9:04:4a:36:44:
                    b0:d8:19:ad:b3:fd:a7:0a:7b:3f:87:a4:fd:1b:5d:
                    3c:22:3d:c5:fd:88:ab:52:50:23:b6:0e:da:e7:13:
                    24:2c:43:8a:29:40:7b:a4:c1:59:22:3d:30:f1:51:
                    3e:8d:df:53:d8:22:1c:9b:86:9f:89:0a:ca:a8:e7:
                    db:cf:e8:73:96:72:82:0a:79:d7:95:c8:c3:16:e1:
                    4f:61:6b:ea:85:e4:e5:2c:04:d9:bc:b2:72:4b:34:
                    51:a9:f7:8a:dd:cd:13:da:57:4b:7f:7b:c8:f8:e2:
                    5e:70:5d:76:48:3a:32:9b:70:7c:bd:e0:d9:aa:1a:
                    cd:0f:45:a4:96:da:14:0e:88:11:11:eb:24:f2:fa:
                    5d:f4:87:38:51:fc:5d:37:c3:14:d2:1f:4e:2f:07:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DD:7A:47:85:DC:00:7B:0B:77:AF:70:55:97:C6:F9:30:2B:4D:F1
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.august.tw/repo/localname/3
                RPKI Manifest - URI:rsync://rpki.august.tw/repo/localname/3/82DD7A4785DC007B0B77AF705597C6F9302B4DF1.mft
                RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:e9:fb:33:b8:43:15:f2:ac:18:7f:c8:ff:77:53:23:6e:78:
         a3:d4:7f:bb:8f:44:3d:2a:6a:42:09:57:12:9c:24:18:6a:27:
         68:fe:e5:32:9c:b4:6b:6b:da:56:d8:60:02:11:e4:dd:89:52:
         d2:b0:75:7d:9a:ec:e2:38:56:95:6f:10:a2:d2:f9:05:43:72:
         c8:62:08:36:91:47:a4:88:39:30:7c:c8:62:6e:84:d9:f5:38:
         00:eb:8f:bf:72:e7:ba:d2:a9:c1:97:4c:f8:c7:3d:e5:4f:39:
         da:fb:7c:ab:02:30:c0:cb:56:07:8d:3d:4f:91:bf:da:07:4d:
         78:a0:ae:e9:3f:ce:a1:41:7f:d9:2f:11:b8:a8:8c:72:3e:62:
         46:54:a6:56:71:be:84:f1:44:97:4d:9d:6b:d4:d8:5d:05:fb:
         d8:76:ca:99:b8:c2:22:d3:03:f1:74:1d:c3:d0:57:bd:af:e4:
         e6:44:f4:35:ad:3f:5c:ed:52:4f:a6:f3:15:d3:60:b3:87:8b:
         8a:07:51:10:6d:fe:81:fa:7a:79:b8:c7:d7:3c:bc:f2:5c:ac:
         7b:a9:f5:a7:d2:d4:9d:df:7c:80:c1:84:14:d8:72:67:af:c4:
         9e:ac:04:23:fa:fc:ac:de:63:44:ca:ca:e1:d2:f1:06:2f:3b:
         ed:27:06:71
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIGALD8r9vBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
NDI4MTUyNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MmRkN2E0Nzg1
ZGMwMDdiMGI3N2FmNzA1NTk3YzZmOTMwMmI0ZGYxMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA6cUZ9T5dDJhv5HLonyoNgzTm/q92NMmnmXNvhfSvwm3O
Qf1XoDM8oqnmGHOwQZqHSZ+O6jeKzFV0XjEThlFeEZHoqEvjqxQJhUWipe8XB2Iv
LixsiQqasypaNiUp5lauuku6qQRKNkSw2Bmts/2nCns/h6T9G108Ij3F/YirUlAj
tg7a5xMkLEOKKUB7pMFZIj0w8VE+jd9T2CIcm4afiQrKqOfbz+hzlnKCCnnXlcjD
FuFPYWvqheTlLATZvLJySzRRqfeK3c0T2ldLf3vI+OJecF12SDoym3B8veDZqhrN
D0WkltoUDogREesk8vpd9Ic4UfxdN8MU0h9OLwcgaQIDAQABo4ICQjCCAj4wHQYD
VR0OBBYEFILdekeF3AB7C3evcFWXxvkwK03xMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
geEGCCsGAQUFBwELBIHUMIHRMDMGCCsGAQUFBzAFhidyc3luYzovL3Jwa2kuYXVn
dXN0LnR3L3JlcG8vbG9jYWxuYW1lLzMwYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBr
aS5hdWd1c3QudHcvcmVwby9sb2NhbG5hbWUvMy84MkREN0E0Nzg1REMwMDdCMEI3
N0FGNzA1NTk3QzZGOTMwMkI0REYxLm1mdDA4BggrBgEFBQcwDYYsaHR0cHM6Ly9y
cGtpLmF1Z3VzdC50dy9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBO
oEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9L
cFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqEt1AMA0GCSqG
SIb3DQEBCwUAA4IBAQCs6fszuEMV8qwYf8j/d1Mjbnij1H+7j0Q9KmpCCVcSnCQY
aido/uUynLRra9pW2GACEeTdiVLSsHV9muziOFaVbxCi0vkFQ3LIYgg2kUekiDkw
fMhiboTZ9TgA64+/cue60qnBl0z4xz3lTzna+3yrAjDAy1YHjT1Pkb/aB014oK7p
P86hQX/ZLxG4qIxyPmJGVKZWcb6E8USXTZ1r1NhdBfvYdsqZuMIi0wPxdB3D0Fe9
r+TmRPQ1rT9c7VJPpvMV02Czh4uKB1EQbf6B+np5uMfXPLzyXKx7qfWn0tSd33yA
wYQU2HJnr8SerAQj+vys3mNEysrh0vEGLzvtJwZx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:09 2024 by rpki-client on console-ams.rpki-client.org