Certificate
$ rpki-client -vvf dev.tw/rpki/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
File: 40C513034911811188EE6887BB01091E1FE7EE0D.cer (raw, json)
Hash identifier: bNmvnpBnCGpzPT9Nb44zRa7/u9WijJyFzAtSocc9B6M=
Subject key identifier: 40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 727658C105C8ED132A321399B4ECF422F29DAB43
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Manifest: rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
caRepository: rsync://rpki.co/repo/Simple/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sat 12 Oct 2024 07:58:04 +0000
Certificate not after: Sat 11 Oct 2025 08:03:04 +0000
Subordinate resources: IP: 2a12:dd46:1000::/36
IP: 2a12:dd47:f200::/40
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 03:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:76:58:c1:05:c8:ed:13:2a:32:13:99:b4:ec:f4:22:f2:9d:ab:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 12 07:58:04 2024 GMT
Not After : Oct 11 08:03:04 2025 GMT
Subject: CN=40C513034911811188EE6887BB01091E1FE7EE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f1:44:a3:16:26:5c:f9:49:43:8d:1f:51:77:
03:e6:ca:57:b7:ca:f3:7c:09:8e:28:f6:83:96:8b:
ad:0e:22:f1:6f:23:d9:9d:97:d4:a5:6f:68:24:82:
65:db:c2:86:c0:4f:6d:89:97:23:16:bd:31:32:32:
3e:f1:e1:be:d4:20:af:0e:88:e9:8c:b5:64:fb:32:
0f:8a:08:be:ff:ef:9b:dc:e2:48:97:aa:7a:71:88:
9d:1b:27:ea:93:51:69:11:b0:90:53:8a:e4:7e:f7:
f5:bb:7c:e5:17:dd:cf:1e:de:b3:0d:5b:53:69:2b:
a9:fe:d5:cd:47:f2:51:46:fa:0a:59:60:3d:e9:d6:
9f:e6:fa:f2:37:57:7c:27:25:2e:4a:f8:cc:4e:12:
73:63:f6:79:bb:3d:35:66:15:1b:53:5b:a8:32:ac:
e2:7b:fa:ae:ee:3a:b4:99:a1:1d:c1:df:d2:2b:29:
2c:09:cc:df:e3:6f:f2:b7:0b:7b:1b:cf:31:a5:fd:
04:a8:0e:50:71:e1:9f:9a:78:56:80:02:af:e6:72:
c5:17:9c:bc:7d:99:3d:99:6d:19:cf:99:df:e2:f7:
bf:5c:73:21:83:f6:8b:98:f9:6c:7d:00:d8:d2:e7:
44:b3:b0:0f:72:41:a7:3b:7e:8c:fe:cd:9f:75:e3:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Simple/1/
RPKI Manifest - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd46:1000::/36
2a12:dd47:f200::/40
Signature Algorithm: sha256WithRSAEncryption
c4:21:59:74:59:23:92:96:a9:44:60:7a:b1:7a:2e:92:77:fc:
52:f4:32:b9:da:6b:95:de:e8:19:69:03:0e:87:d5:aa:38:dd:
d2:cd:bb:7e:5b:5d:e8:5c:6e:e9:cd:c8:bc:5d:11:ed:da:e6:
f9:63:7c:95:94:56:8a:3d:e0:c6:a0:02:33:00:e5:5c:da:1c:
71:6e:70:6c:db:ae:41:40:21:9c:51:9c:ac:06:93:07:55:97:
2a:9e:45:31:5b:2f:36:4a:9a:78:10:2b:6d:68:76:35:e2:64:
8c:cb:f3:12:1f:33:c8:6c:b0:34:30:b4:db:0f:90:32:42:36:
a9:1e:ee:0d:5c:be:9e:1a:a6:15:d4:3d:26:fb:ad:51:fc:e7:
17:6c:ce:e3:c6:17:92:6b:7c:ad:a5:ad:11:ba:3f:30:ce:07:
f7:20:c4:33:8e:e9:33:dd:ff:f3:93:6b:90:fa:ec:82:25:86:
f2:d0:22:6c:e6:b0:cf:70:cc:e1:cf:5d:d3:06:90:ec:32:fd:
56:c2:aa:84:1e:77:8d:a4:bf:77:b8:34:4e:3d:67:d3:7c:df:
9d:0c:ea:45:a5:66:15:7f:29:9e:93:69:2f:f8:5c:4a:8f:58:
f4:7f:15:21:32:35:c5:c0:83:5a:b5:37:dd:94:7f:34:a9:d8:
72:ff:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org