$ rpki-client -vvf dev.tw/rpki/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer File: AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer (raw, json) Hash identifier: ikhUjpRWejkGQR+nABqIgF7BQVv0UBeOIjRuymd1Y7c= Subject key identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E Certificate serial: 1BA51A50211714087E907C8796F84087BDC19DA8 Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 11 Oct 2024 21:58:28 +0000 Certificate not after: Fri 10 Oct 2025 22:03:28 +0000 Subordinate resources: IP: 2a12:dd47:3300::/40 Validation: OK Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 12:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a5:1a:50:21:17:14:08:7e:90:7c:87:96:f8:40:87:bd:c1:9d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E Validity Not Before: Oct 11 21:58:28 2024 GMT Not After : Oct 10 22:03:28 2025 GMT Subject: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:0a:1a:9f:16:1f:5e:ef:c5:85:a0:e2:34: 17:27:7d:de:11:4e:04:9a:b6:78:49:01:a9:fb:e0: 92:fc:ce:d4:c2:c0:22:46:9b:b1:31:e0:cb:83:ff: 10:ce:b1:6d:3a:84:cd:0f:75:b7:ff:7b:40:3c:0a: 56:25:b5:50:bd:8b:34:f2:2f:4f:dd:8a:6e:03:29: 56:a1:ec:c1:04:e4:47:70:7f:98:ac:6a:e0:f9:10: f1:b0:0a:00:9a:39:82:10:96:2b:c9:1c:63:aa:30: 95:c8:80:3b:8f:83:58:61:7c:09:e4:1b:a1:02:b8: 3f:ce:99:fb:73:84:31:99:6f:9e:f7:d3:5d:6a:67: 28:1f:bd:ef:c2:88:b6:b7:3c:8b:bd:9e:5f:96:5a: d7:be:6b:cc:61:f5:fe:2b:b9:88:d0:42:71:c5:f5: bd:ad:e4:50:57:7a:03:54:07:ba:2e:11:4d:f5:f2: f5:a8:b8:0c:dd:16:d9:8a:ac:28:14:42:fc:66:c5: 82:a8:b6:ff:f0:77:0c:9b:c3:d9:41:05:27:16:dd: 45:1c:87:9b:20:7c:aa:c2:36:20:44:fb:f5:c6:96: ce:3f:09:a6:f8:7b:58:99:34:4e:9b:53:07:fe:58: c1:74:0b:3f:78:71:f0:f0:83:71:55:e8:61:bd:03: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF X509v3 Authority Key Identifier: keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:3300::/40 Signature Algorithm: sha256WithRSAEncryption 96:1f:4d:c0:34:44:32:44:ba:d8:e1:4c:e1:f8:33:d6:10:b7: d3:5a:12:32:90:ad:5c:85:52:a2:b3:f4:6f:8a:68:6f:d6:f4: 58:dc:7f:8b:cf:57:f5:32:46:c2:c0:1d:62:38:82:96:1d:cb: b9:a4:07:6b:07:ba:28:13:52:f7:1d:5d:30:96:19:5a:04:50: ac:b0:c1:a6:8c:0f:25:b7:62:01:2d:7d:69:e2:a1:f2:67:bf: b4:94:a9:20:bf:73:76:1f:ad:a0:7c:c8:a2:ba:ef:c2:65:41: 85:3f:8e:e4:e6:99:39:09:72:49:5f:fb:23:b6:e5:a0:13:fc: 2c:3b:a3:a7:4d:71:03:6c:9f:25:32:e1:f2:1a:7a:5c:9a:63: 18:cb:23:e4:dc:df:b1:26:05:23:b4:a5:ed:05:96:33:34:c8: ee:59:0f:b2:46:d5:6d:0e:fb:67:f0:51:b6:43:f5:af:b5:16: bc:e5:b7:db:25:76:8b:27:f5:85:8f:4b:9f:d0:fa:14:20:be: cf:8d:fd:38:e3:aa:d5:2a:0e:ae:61:ec:76:8e:a4:1c:8a:22: cb:fb:ec:19:3c:5c:7a:52:09:a3:c0:70:3f:07:e4:67:21:bd: 17:9f:fc:7f:11:ed:09:0e:64:6e:87:2c:cb:73:ad:a7:82:c2: ec:08:af:66 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUG6UaUCEXFAh+kHyHlvhAh73BnagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5NjIwMjhBMTgxRTc1OEI4OTkwQTZDQTRGMDRBOTk4 QTY5MzExRTAeFw0yNDEwMTEyMTU4MjhaFw0yNTEwMTAyMjAzMjhaMDMxMTAvBgNV BAMTKEFFMTI0NzJEQTFFMEFGRDJCMEU5RDVEQzZGNEVERTE2QzREMTExQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mwoanxYfXu/FhaDiNBcnfd4R TgSatnhJAan74JL8ztTCwCJGm7Ex4MuD/xDOsW06hM0Pdbf/e0A8ClYltVC9izTy L0/dim4DKVah7MEE5Edwf5isauD5EPGwCgCaOYIQlivJHGOqMJXIgDuPg1hhfAnk G6ECuD/OmftzhDGZb573011qZygfve/CiLa3PIu9nl+WWte+a8xh9f4ruYjQQnHF 9b2t5FBXegNUB7ouEU318vWouAzdFtmKrCgUQvxmxYKotv/wdwybw9lBBScW3UUc h5sgfKrCNiBE+/XGls4/Cab4e1iZNE6bUwf+WMF0Cz94cfDwg3FV6GG9A6B1AgMB AAGjggKnMIICozAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuEkctoeCv0rDp 1dxvTt4WxNERzzAfBgNVHSMEGDAWgBQSliAooYHnWLiZCmyk8EqZimkxHjAOBgNV HQ8BAf8EBAMCAQYwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9kZXYudHcvcnBr aS9BUzk0NS8xLzEyOTYyMDI4QTE4MUU3NThCODk5MEE2Q0E0RjA0QTk5OEE2OTMx MUUuY3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYu dHcvcnBraS9BdWd1c3QvNS8xMjk2MjAyOEExODFFNzU4Qjg5OTBBNkNBNEYwNEE5 OThBNjkzMTFFLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWG U3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzEy ODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVjLzIvMIGLBggrBgEFBQcw CoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9j MTI4MjcxZS1jMjY5LTQ5NTQtODdkYi1kMTg0ZGYxN2Y4NWMvMi9BRTEyNDcyREEx RTBBRkQyQjBFOUQ1REM2RjRFREUxNkM0RDExMUNGLm1mdDA8BggrBgEFBQcwDYYw aHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1s MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqEt1HMzANBgkqhkiG9w0BAQsFAAOCAQEAlh9NwDREMkS62OFM4fgz 1hC301oSMpCtXIVSorP0b4pob9b0WNx/i89X9TJGwsAdYjiClh3LuaQHawe6KBNS 9x1dMJYZWgRQrLDBpowPJbdiAS19aeKh8me/tJSpIL9zdh+toHzIorrvwmVBhT+O 5OaZOQlySV/7I7bloBP8LDujp01xA2yfJTLh8hp6XJpjGMsj5NzfsSYFI7Sl7QWW MzTI7lkPskbVbQ77Z/BRtkP1r7UWvOW32yV2iyf1hY9Ln9D6FCC+z439OOOq1SoO rmHsdo6kHIoiy/vsGTxcelIJo8BwPwfkZyG9F5/8fxHtCQ5kbocsy3Otp4LC7Aiv Zg== -----END CERTIFICATE-----Generated at Wed Oct 23 03:59:11 2024 by rpki-client on console-fra.rpki-client.org