Certificate

$ rpki-client -vvf dev.tw/rpki/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
File:                     40C513034911811188EE6887BB01091E1FE7EE0D.cer (raw, json)
Hash identifier:          bNmvnpBnCGpzPT9Nb44zRa7/u9WijJyFzAtSocc9B6M=
Subject key identifier:   40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Certificate issuer:       /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial:       727658C105C8ED132A321399B4ECF422F29DAB43
Authority info access:    rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Manifest:                 rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
caRepository:             rsync://rpki.co/repo/Simple/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sat 12 Oct 2024 07:58:04 +0000
Certificate not after:    Sat 11 Oct 2025 08:03:04 +0000
Subordinate resources:    IP: 2a12:dd46:1000::/36
                          IP: 2a12:dd47:f200::/40

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
                          rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
                          rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 12:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:76:58:c1:05:c8:ed:13:2a:32:13:99:b4:ec:f4:22:f2:9d:ab:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
        Validity
            Not Before: Oct 12 07:58:04 2024 GMT
            Not After : Oct 11 08:03:04 2025 GMT
        Subject: CN=40C513034911811188EE6887BB01091E1FE7EE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f1:44:a3:16:26:5c:f9:49:43:8d:1f:51:77:
                    03:e6:ca:57:b7:ca:f3:7c:09:8e:28:f6:83:96:8b:
                    ad:0e:22:f1:6f:23:d9:9d:97:d4:a5:6f:68:24:82:
                    65:db:c2:86:c0:4f:6d:89:97:23:16:bd:31:32:32:
                    3e:f1:e1:be:d4:20:af:0e:88:e9:8c:b5:64:fb:32:
                    0f:8a:08:be:ff:ef:9b:dc:e2:48:97:aa:7a:71:88:
                    9d:1b:27:ea:93:51:69:11:b0:90:53:8a:e4:7e:f7:
                    f5:bb:7c:e5:17:dd:cf:1e:de:b3:0d:5b:53:69:2b:
                    a9:fe:d5:cd:47:f2:51:46:fa:0a:59:60:3d:e9:d6:
                    9f:e6:fa:f2:37:57:7c:27:25:2e:4a:f8:cc:4e:12:
                    73:63:f6:79:bb:3d:35:66:15:1b:53:5b:a8:32:ac:
                    e2:7b:fa:ae:ee:3a:b4:99:a1:1d:c1:df:d2:2b:29:
                    2c:09:cc:df:e3:6f:f2:b7:0b:7b:1b:cf:31:a5:fd:
                    04:a8:0e:50:71:e1:9f:9a:78:56:80:02:af:e6:72:
                    c5:17:9c:bc:7d:99:3d:99:6d:19:cf:99:df:e2:f7:
                    bf:5c:73:21:83:f6:8b:98:f9:6c:7d:00:d8:d2:e7:
                    44:b3:b0:0f:72:41:a7:3b:7e:8c:fe:cd:9f:75:e3:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
            X509v3 Authority Key Identifier:
                keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Simple/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:1000::/36
                  2a12:dd47:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:21:59:74:59:23:92:96:a9:44:60:7a:b1:7a:2e:92:77:fc:
         52:f4:32:b9:da:6b:95:de:e8:19:69:03:0e:87:d5:aa:38:dd:
         d2:cd:bb:7e:5b:5d:e8:5c:6e:e9:cd:c8:bc:5d:11:ed:da:e6:
         f9:63:7c:95:94:56:8a:3d:e0:c6:a0:02:33:00:e5:5c:da:1c:
         71:6e:70:6c:db:ae:41:40:21:9c:51:9c:ac:06:93:07:55:97:
         2a:9e:45:31:5b:2f:36:4a:9a:78:10:2b:6d:68:76:35:e2:64:
         8c:cb:f3:12:1f:33:c8:6c:b0:34:30:b4:db:0f:90:32:42:36:
         a9:1e:ee:0d:5c:be:9e:1a:a6:15:d4:3d:26:fb:ad:51:fc:e7:
         17:6c:ce:e3:c6:17:92:6b:7c:ad:a5:ad:11:ba:3f:30:ce:07:
         f7:20:c4:33:8e:e9:33:dd:ff:f3:93:6b:90:fa:ec:82:25:86:
         f2:d0:22:6c:e6:b0:cf:70:cc:e1:cf:5d:d3:06:90:ec:32:fd:
         56:c2:aa:84:1e:77:8d:a4:bf:77:b8:34:4e:3d:67:d3:7c:df:
         9d:0c:ea:45:a5:66:15:7f:29:9e:93:69:2f:f8:5c:4a:8f:58:
         f4:7f:15:21:32:35:c5:c0:83:5a:b5:37:dd:94:7f:34:a9:d8:
         72:ff:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 03:59:11 2024 by rpki-client on console-fra.rpki-client.org