Certificate
$ rpki-client -vvf dev.tw/rpki/AS945/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
File: A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer (raw, json)
Hash identifier: bb5mx9iOWNJr8uBLBHWQYLlt4TWLo1gzoz0UE9Dej1A=
Subject key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 3BF1A723DECF78B8D83B4350B66A4ECD76081B7D
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Manifest: rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
caRepository: rsync://rpki.co/repo/Riffi/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sat 12 Oct 2024 16:34:03 +0000
Certificate not after: Sat 11 Oct 2025 16:39:03 +0000
Subordinate resources: IP: 2a12:dd47:8046::/48
IP: 2a12:dd47:8700::/40
IP: 2a12:dd47:d000::/40
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f1:a7:23:de:cf:78:b8:d8:3b:43:50:b6:6a:4e:cd:76:08:1b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 12 16:34:03 2024 GMT
Not After : Oct 11 16:39:03 2025 GMT
Subject: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:1d:ca:f2:de:9a:52:4a:9e:8b:ba:56:16:
ad:7e:f7:6a:54:42:38:0f:1c:a7:55:89:d1:76:bb:
20:65:eb:8d:a3:3e:52:f0:7c:8c:3e:3d:05:4a:88:
ce:e3:85:01:64:7d:ab:52:b6:17:32:e5:80:cb:9a:
d3:d8:21:f3:77:7b:ab:55:10:ba:5a:95:1a:d9:cc:
79:c2:06:d1:7d:f9:b1:b1:29:62:a3:15:6b:a3:2c:
91:98:16:6d:a5:1e:fe:62:78:54:4c:0a:fe:78:ff:
12:21:1c:aa:23:20:e7:16:52:e1:ea:4f:0c:88:2b:
5e:eb:44:8d:25:58:e1:ca:2f:de:9f:9f:d2:92:77:
51:38:b6:fd:91:4f:65:ca:8c:22:dc:b5:f0:e4:b3:
ea:7f:c4:a2:f4:99:e2:b7:28:32:16:0a:37:c0:00:
cc:df:80:52:08:bb:73:82:21:4e:03:f9:39:c6:60:
ff:a1:b2:84:a0:21:db:c1:82:f5:78:5b:a4:47:01:
ab:ef:75:4e:b8:e1:ec:a9:f2:8f:27:43:ed:8e:82:
c7:d0:48:07:87:b5:32:56:51:93:48:6b:ce:c0:3a:
15:73:89:bd:39:18:f0:e7:1e:11:4d:1b:7b:1c:e1:
6b:4c:d0:2a:73:d3:86:1b:db:fb:11:15:fa:34:5f:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Riffi/1/
RPKI Manifest - URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8046::/48
2a12:dd47:8700::/40
2a12:dd47:d000::/40
Signature Algorithm: sha256WithRSAEncryption
1a:76:db:24:4e:88:20:d3:e2:73:6c:5e:f3:06:86:aa:28:af:
e1:80:17:5d:99:15:c0:3a:69:a0:d1:72:c5:29:8c:88:61:d7:
d3:b3:ee:85:82:8e:78:12:be:d5:4d:16:92:0c:fc:ba:46:bb:
9e:b6:3d:4d:bb:3a:78:bf:97:ea:59:9a:86:a9:00:bf:45:e3:
8e:61:3c:d3:d8:41:7c:f6:29:f4:6b:da:a1:b0:c7:8d:f2:57:
83:dd:a4:ee:d8:a7:cc:95:39:56:7c:0d:30:5b:df:b3:35:68:
42:76:37:e2:1e:6e:62:bb:5e:00:b8:ae:49:f9:0e:57:00:cd:
21:0f:e9:1d:a7:b3:ec:8b:4a:b2:20:bd:ae:7f:57:f0:81:00:
ce:a8:dc:d7:99:ad:73:8f:7a:76:df:ee:84:89:4f:f0:fe:57:
14:c9:fc:f4:df:cc:d7:ca:19:62:d9:f6:2a:1c:9d:28:67:59:
40:bc:05:f7:dd:8c:75:8e:f1:9d:b3:fc:02:b6:59:6d:66:a0:
46:7a:07:22:e8:31:34:2e:f0:c8:ca:9c:99:a1:3f:62:38:75:
f0:dd:21:97:9a:69:f6:99:21:d6:8b:cc:f6:42:dc:1e:2a:28:
cf:f2:9f:7b:45:20:9b:c1:7c:16:1b:3c:df:63:38:be:de:2d:
6c:46:d3:34
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUO/GnI97PeLjYO0NQtmpOzXYIG30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI5NjIwMjhBMTgxRTc1OEI4OTkwQTZDQTRGMDRBOTk4
QTY5MzExRTAeFw0yNDEwMTIxNjM0MDNaFw0yNTEwMTExNjM5MDNaMDMxMTAvBgNV
BAMTKEE3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFFMjlFQzcwM0M4NkExMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlR3K8t6aUkqei7pWFq1+92pU
QjgPHKdVidF2uyBl642jPlLwfIw+PQVKiM7jhQFkfatSthcy5YDLmtPYIfN3e6tV
ELpalRrZzHnCBtF9+bGxKWKjFWujLJGYFm2lHv5ieFRMCv54/xIhHKojIOcWUuHq
TwyIK17rRI0lWOHKL96fn9KSd1E4tv2RT2XKjCLctfDks+p/xKL0meK3KDIWCjfA
AMzfgFIIu3OCIU4D+TnGYP+hsoSgIdvBgvV4W6RHAavvdU644eyp8o8nQ+2OgsfQ
SAeHtTJWUZNIa87AOhVzib05GPDnHhFNG3sc4WtM0Cpz04Yb2/sRFfo0X6YPAgMB
AAGjggJCMIICPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSn293kW5vtnBfL
IPKuKexwPIahNjAfBgNVHSMEGDAWgBQSliAooYHnWLiZCmyk8EqZimkxHjAOBgNV
HQ8BAf8EBAMCAQYwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9kZXYudHcvcnBr
aS9BUzk0NS8xLzEyOTYyMDI4QTE4MUU3NThCODk5MEE2Q0E0RjA0QTk5OEE2OTMx
MUUuY3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvNS8xMjk2MjAyOEExODFFNzU4Qjg5OTBBNkNBNEYwNEE5
OThBNjkzMTFFLmNlcjCBygYIKwYBBQUHAQsEgb0wgbowKQYIKwYBBQUHMAWGHXJz
eW5jOi8vcnBraS5jby9yZXBvL1JpZmZpLzEvMFUGCCsGAQUFBzAKhklyc3luYzov
L3Jwa2kuY28vcmVwby9SaWZmaS8xL0E3REJEREU0NUI5QkVEOUMxN0NCMjBGMkFF
MjlFQzcwM0M4NkExMzYubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAucnBr
aS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAyBggrBgEFBQcBBwEB/wQjMCEwHwQCAAIwGQMHACoS3UeARgMGACoS3UeH
AwYAKhLdR9AwDQYJKoZIhvcNAQELBQADggEBABp22yROiCDT4nNsXvMGhqoor+GA
F12ZFcA6aaDRcsUpjIhh19Oz7oWCjngSvtVNFpIM/LpGu562PU27Oni/l+pZmoap
AL9F445hPNPYQXz2KfRr2qGwx43yV4PdpO7Yp8yVOVZ8DTBb37M1aEJ2N+IebmK7
XgC4rkn5DlcAzSEP6R2ns+yLSrIgva5/V/CBAM6o3NeZrXOPenbf7oSJT/D+VxTJ
/PTfzNfKGWLZ9iocnShnWUC8BffdjHWO8Z2z/AK2WW1moEZ6ByLoMTQu8MjKnJmh
P2I4dfDdIZeaafaZIdaLzPZC3B4qKM/yn3tFIJvBfBYbPN9jOL7eLWxG0zQ=
-----END CERTIFICATE-----
Generated at Wed Oct 23 03:59:11 2024 by rpki-client on console-fra.rpki-client.org