$ rpki-client -vvf dev.tw/rpki/AS945/2/52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer File: 52E8DFFC6F676D33CB89DE115CEEF286B5017228.cer (raw, json) Hash identifier: UUr3nP4hnSEjSNPf0LpAd5jIPivw4aKa+lNUg2pGMlM= Subject key identifier: 52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28 Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56 Certificate issuer: /CN=1A8C29884038907EDD0174FADC751F16456E1C56 Certificate serial: 45C0ABB87C766A60A087FCB6556E92724F219538 Authority info access: rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 12 Oct 2024 04:24:36 +0000 Certificate not after: Sat 11 Oct 2025 04:29:36 +0000 Subordinate resources: IP: 2602:fc23:120::/44 Validation: OK Signature path: rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 13:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c0:ab:b8:7c:76:6a:60:a0:87:fc:b6:55:6e:92:72:4f:21:95:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56 Validity Not Before: Oct 12 04:24:36 2024 GMT Not After : Oct 11 04:29:36 2025 GMT Subject: CN=52E8DFFC6F676D33CB89DE115CEEF286B5017228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:aa:1b:c7:d2:c0:e0:12:17:5e:c9:f7:c8:60: ab:f8:0a:71:51:d4:7c:de:55:98:e7:31:85:f5:36: 73:68:d7:d8:fd:bc:36:9f:a5:cb:97:45:10:9f:96: 8f:32:0e:ba:d4:50:2b:df:39:73:cb:6b:7a:b6:ef: 51:77:1b:d0:f7:95:f8:ef:dd:98:b6:76:d8:78:c3: 8c:d1:8a:d2:80:da:3e:12:54:8f:1b:f7:94:8b:55: af:7b:59:04:da:0e:74:f9:35:d7:2c:9e:37:0c:49: 1c:a5:fd:0f:6c:ef:25:9f:6f:47:f3:69:de:e5:af: 8f:62:0f:79:48:05:6e:f0:49:dc:67:ec:11:b2:0e: fe:81:c2:d9:25:f9:46:6d:f2:f0:f2:3a:21:0c:60: 7d:c0:43:18:2f:0c:38:52:d0:5b:ae:1f:41:7b:d7: fb:f5:6e:74:0e:e0:2d:59:a4:7e:fc:53:90:42:d8: a6:99:3b:56:7b:be:3c:5c:65:51:c0:8d:00:dd:cd: 22:15:fe:03:7d:dd:82:d0:74:98:19:2e:83:f1:83: 72:6f:ac:33:24:54:67:8b:59:36:6c:18:1f:86:5b: 7d:92:71:ba:98:c7:0e:fc:b9:b1:4e:76:79:40:0f: 90:b3:c3:fa:4c:13:0e:f9:c5:7d:36:8d:f0:b0:4a: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:E8:DF:FC:6F:67:6D:33:CB:89:DE:11:5C:EE:F2:86:B5:01:72:28 X509v3 Authority Key Identifier: keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/5/52E8DFFC6F676D33CB89DE115CEEF286B5017228.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:fc23:120::/44 Signature Algorithm: sha256WithRSAEncryption 52:5a:31:d3:81:d9:ba:e3:66:87:0b:37:ca:13:9a:c7:dc:4c: d7:d5:c2:b8:0e:95:e2:ca:61:05:bb:21:ff:b8:0d:3d:2b:5e: 29:24:83:05:cd:04:5e:d9:4f:1d:aa:6b:3e:75:7f:fe:f9:3f: 8a:6d:2b:7f:1d:67:3b:74:32:34:df:ec:c5:fd:07:7c:21:06: c3:cd:6a:85:98:4d:6f:42:42:df:c3:e6:ec:da:bb:99:75:64: 22:85:c4:44:02:17:fa:29:3e:45:2b:0c:d9:43:a0:69:53:53: 13:84:67:d4:72:88:ec:70:4c:1b:b1:44:bf:29:28:e5:6a:5d: eb:b9:dd:af:52:7e:c9:2e:fe:e5:ac:c2:64:96:ef:fd:e8:8c: eb:d1:f9:0b:c7:86:4e:9c:c2:a6:ec:08:c4:e6:0f:f3:f2:96: 86:b8:18:c9:d9:08:1f:1d:35:a9:62:85:75:0c:a6:7c:d1:0f: c0:78:31:ef:8e:f2:ba:04:f3:e2:a2:5b:19:69:74:d3:17:3a: de:ad:7a:0b:6c:df:1a:93:d4:c6:cc:79:fb:3e:c5:be:1e:25: b2:30:6b:fc:e2:1f:b0:d6:e6:8e:28:33:ef:c5:85:11:da:6f: 0e:2d:ea:d5:d6:c8:bf:7a:d6:c3:18:94:31:b3:ab:4a:28:e3: 56:4d:e3:c4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURcCruHx2amCgh/y2VW6Sck8hlTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4QzI5ODg0MDM4OTA3RUREMDE3NEZBREM3NTFGMTY0 NTZFMUM1NjAeFw0yNDEwMTIwNDI0MzZaFw0yNTEwMTEwNDI5MzZaMDMxMTAvBgNV BAMTKDUyRThERkZDNkY2NzZEMzNDQjg5REUxMTVDRUVGMjg2QjUwMTcyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmqhvH0sDgEhdeyffIYKv4CnFR 1HzeVZjnMYX1NnNo19j9vDafpcuXRRCflo8yDrrUUCvfOXPLa3q271F3G9D3lfjv 3Zi2dth4w4zRitKA2j4SVI8b95SLVa97WQTaDnT5NdcsnjcMSRyl/Q9s7yWfb0fz ad7lr49iD3lIBW7wSdxn7BGyDv6Bwtkl+UZt8vDyOiEMYH3AQxgvDDhS0FuuH0F7 1/v1bnQO4C1ZpH78U5BC2KaZO1Z7vjxcZVHAjQDdzSIV/gN93YLQdJgZLoPxg3Jv rDMkVGeLWTZsGB+GW32ScbqYxw78ubFOdnlAD5Czw/pMEw75xX02jfCwSuWzAgMB AAGjggKoMIICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRS6N/8b2dtM8uJ 3hFc7vKGtQFyKDAfBgNVHSMEGDAWgBQajCmIQDiQft0BdPrcdR8WRW4cVjAOBgNV HQ8BAf8EBAMCAQYwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9kZXYudHcvcnBr aS9BUzk0NS8yLzFBOEMyOTg4NDAzODkwN0VERDAxNzRGQURDNzUxRjE2NDU2RTFD NTYuY3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYu dHcvcnBraS9BdWd1c3QvNy8xQThDMjk4ODQwMzg5MDdFREQwMTc0RkFEQzc1MUYx NjQ1NkUxQzU2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWG U3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJm OGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJiZTRlLzUvMIGLBggrBgEFBQcw CoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8x YmY4ZTk3Ny03Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNS81MkU4REZGQzZG Njc2RDMzQ0I4OURFMTE1Q0VFRjI4NkI1MDE3MjI4Lm1mdDA8BggrBgEFBQcwDYYw aHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1s MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQmAvwjASAwDQYJKoZIhvcNAQELBQADggEBAFJaMdOB2brjZocLN8oT msfcTNfVwrgOleLKYQW7If+4DT0rXikkgwXNBF7ZTx2qaz51f/75P4ptK38dZzt0 MjTf7MX9B3whBsPNaoWYTW9CQt/D5uzau5l1ZCKFxEQCF/opPkUrDNlDoGlTUxOE Z9RyiOxwTBuxRL8pKOVqXeu53a9Sfsku/uWswmSW7/3ojOvR+QvHhk6cwqbsCMTm D/Pyloa4GMnZCB8dNalihXUMpnzRD8B4Me+O8roE8+KiWxlpdNMXOt6tegts3xqT 1MbMefs+xb4eJbIwa/ziH7DW5o4oM+/FhRHabw4t6tXWyL961sMYlDGzq0oo41ZN 48Q= -----END CERTIFICATE-----Generated at Wed Oct 23 00:38:52 2024 by rpki-client on console-ams.rpki-client.org