Certificate
$ rpki-client -vvf dev.tw/rpki/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
File: 34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer (raw, json)
Hash identifier: M1RrIxtr5GZHA7XaK0aVFzCVtCfMvxcILM0IeWVizS8=
Subject key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 6B200CE42A32FD46CBC860F302DF2BCA9CC6A28E
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 12 Oct 2024 04:24:29 +0000
Certificate not after: Sat 11 Oct 2025 04:29:29 +0000
Subordinate resources: IP: 2a12:dd47:802c::/46
IP: 2a12:dd47:8230::/44
IP: 2a12:dd47:8400::/40
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:20:0c:e4:2a:32:fd:46:cb:c8:60:f3:02:df:2b:ca:9c:c6:a2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 12 04:24:29 2024 GMT
Not After : Oct 11 04:29:29 2025 GMT
Subject: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:72:3e:89:00:b2:cb:30:2a:54:7a:b5:1f:
e6:ab:16:9f:bc:0b:4d:12:e9:86:f7:f7:d6:78:ce:
a3:00:12:93:08:4a:53:d6:07:ff:b1:c8:73:78:c5:
7c:3a:6a:a2:b4:6b:d4:4b:2e:55:3a:7b:ad:c4:af:
17:a8:94:ad:94:81:c7:f3:47:7f:dc:e8:27:57:42:
9f:b4:f8:fc:d6:b5:6e:15:a8:11:61:6d:3d:7b:68:
4c:b7:4f:59:5e:27:c6:19:1f:a9:c6:7a:95:6e:dc:
c5:03:84:a3:59:5f:cc:a0:c6:47:82:4b:a4:bb:f0:
27:95:0f:03:a4:a8:f6:a6:3d:b9:4d:c7:92:68:f6:
e9:fa:9a:dd:92:d1:06:ee:b5:d1:bb:f7:de:36:c0:
5d:c1:b9:1d:c3:a4:ff:93:ef:35:81:19:65:e7:98:
d4:33:84:18:b5:e2:36:4f:35:1b:02:bb:86:87:f7:
64:11:63:89:c2:23:df:15:a7:d3:f2:0c:fa:bb:7e:
b4:5e:f6:3d:5e:e5:bf:e8:06:e2:86:dc:38:51:8e:
2a:37:40:4e:ab:e2:d6:40:e2:5b:1c:5a:48:69:84:
1c:c6:0d:85:89:2f:13:73:97:95:b4:e2:83:fc:fc:
d0:cc:d9:72:76:c1:b8:57:32:d2:56:dd:46:d9:03:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:802c::/46
2a12:dd47:8230::/44
2a12:dd47:8400::/40
Signature Algorithm: sha256WithRSAEncryption
02:0e:54:a8:01:30:7c:2c:b7:ce:bc:68:70:26:cd:d1:0c:77:
dd:37:89:79:c5:aa:f5:72:12:fe:2a:5d:e3:f4:55:70:30:75:
bb:be:55:de:16:76:54:9d:65:39:25:02:fe:b7:61:cb:a6:fc:
b3:f0:dc:c6:9f:35:97:08:5a:db:de:46:ba:e6:92:2e:f3:18:
08:61:5e:c1:24:2e:cd:eb:4a:ec:8c:10:ff:ac:02:66:30:58:
ea:35:35:94:c0:23:f0:1a:63:7a:05:bc:78:43:30:eb:42:8b:
11:f9:c4:6b:36:74:68:35:e5:ef:70:68:59:4f:61:1f:6b:6a:
ad:5e:ed:ae:88:76:0e:45:a9:91:42:e2:72:e3:fa:b3:da:65:
9e:47:df:c2:09:eb:5f:17:6f:ee:07:e5:e2:8e:e6:65:62:2f:
32:f9:5d:31:4a:f9:c1:f6:dd:17:40:09:39:dd:b2:75:be:3f:
cc:86:d8:43:4f:cc:98:f3:27:dc:44:a1:60:a3:b4:c0:d7:0c:
db:a9:c7:17:f1:5b:cc:63:c1:9b:6c:ff:f9:67:be:7e:6c:1f:
d2:66:17:a4:65:21:17:21:cb:3b:ab:d9:23:f7:b5:55:f3:82:
c7:a6:eb:67:7f:fc:62:d8:02:13:eb:b2:01:30:3a:73:04:0a:
1e:f0:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:38:58 2024 by rpki-client on console-ams.rpki-client.org