Certificate

$ rpki-client -vvf dev.tw/rpki/AS945/5/B05B9A671551176C23DA01A5FA4056943F58AA56.cer
File:                     B05B9A671551176C23DA01A5FA4056943F58AA56.cer (raw, json)
Hash identifier:          Jdpbf36VUP/hW+mUgfpWm++FgSNXoa/D3tGSLRoKJDg=
Subject key identifier:   B0:5B:9A:67:15:51:17:6C:23:DA:01:A5:FA:40:56:94:3F:58:AA:56
Authority key identifier: A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64
Certificate issuer:       /CN=A5B1E05036940FBC80C2944856DC1168E62E2364
Certificate serial:       5B6FC429ADB468DEEE7EA4B17EE79F60DEA91313
Authority info access:    rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer
Manifest:                 rsync://rpki.co/repo/AS199203/1/B05B9A671551176C23DA01A5FA4056943F58AA56.mft
caRepository:             rsync://rpki.co/repo/AS199203/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sat 12 Oct 2024 15:09:28 +0000
Certificate not after:    Sat 11 Oct 2025 15:14:28 +0000
Subordinate resources:    IP: 2a13:c007:8020::/44

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.crl
                          rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
                          rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 13:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6f:c4:29:ad:b4:68:de:ee:7e:a4:b1:7e:e7:9f:60:de:a9:13:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B1E05036940FBC80C2944856DC1168E62E2364
        Validity
            Not Before: Oct 12 15:09:28 2024 GMT
            Not After : Oct 11 15:14:28 2025 GMT
        Subject: CN=B05B9A671551176C23DA01A5FA4056943F58AA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:1e:0d:5c:20:79:73:5c:81:a1:23:a0:b8:
                    70:f6:93:35:03:aa:22:24:8a:60:21:76:2f:06:85:
                    d7:f1:65:33:cd:9b:76:c6:b6:1a:06:75:82:8a:39:
                    0b:a8:f2:c9:c6:2a:cc:7b:51:b3:1e:c4:51:18:1c:
                    e9:5d:e7:9c:c4:d2:4f:99:c9:24:8b:23:b3:94:d2:
                    91:7a:39:9b:af:bc:68:12:81:ad:6c:61:15:c7:b0:
                    8e:d9:17:d4:64:06:90:05:bf:59:ae:c9:06:6d:db:
                    6f:ad:f2:aa:0e:bf:ee:20:c8:90:78:52:b4:68:8d:
                    8c:98:7b:a3:d5:55:c1:6f:d7:6d:65:56:53:93:e1:
                    24:42:e1:e6:78:1a:fe:47:4f:8c:1b:67:9b:cf:d6:
                    4b:27:e4:7c:5a:06:dd:99:b1:ed:05:77:76:12:38:
                    4f:f0:65:49:dc:a5:44:8e:0e:54:02:d5:7f:92:13:
                    55:70:b7:5e:5e:16:da:e3:30:5f:1b:19:2c:cc:82:
                    ef:b5:2e:6b:06:4d:d9:b5:de:c8:8e:5d:7f:c1:62:
                    3f:92:87:18:45:49:41:f0:75:dd:fd:f2:33:87:f0:
                    16:bb:9a:89:6f:e4:17:df:12:7b:4c:da:0b:23:70:
                    e3:03:89:08:89:09:f9:16:f9:4d:ea:fc:a6:ea:d7:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:5B:9A:67:15:51:17:6C:23:DA:01:A5:FA:40:56:94:3F:58:AA:56
            X509v3 Authority Key Identifier:
                keyid:A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS199203/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS199203/1/B05B9A671551176C23DA01A5FA4056943F58AA56.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:11:0f:27:e2:f4:a7:7d:cd:b2:50:62:c7:17:26:dd:de:
         15:93:5c:1e:3e:31:75:71:ce:49:b1:a4:d7:cc:5c:42:37:9f:
         37:73:cb:96:14:cc:ae:26:50:32:5b:04:b8:9e:d3:40:5a:50:
         bf:11:62:de:cb:0e:ac:c5:aa:8f:29:57:68:1b:86:9e:aa:de:
         84:19:da:06:be:6a:8b:9d:25:6d:f5:c0:17:c0:b2:6d:c7:b9:
         30:e4:96:2c:e0:f6:00:25:6d:77:6b:98:bf:75:e6:91:de:a1:
         44:c4:39:b8:7e:9a:2d:a9:ac:ea:e0:89:bf:4a:ec:08:e8:46:
         bc:4e:d4:0b:75:2c:29:31:cc:d9:ef:43:38:de:14:5b:52:cb:
         38:39:03:95:22:3e:39:f6:71:6e:ad:b9:c7:17:85:94:f0:cf:
         72:fb:ea:61:71:fa:c1:95:42:36:a6:38:0a:31:e6:c4:d4:3d:
         b2:e7:ca:ad:a1:ff:ea:59:81:5f:68:73:6f:18:17:2a:95:ba:
         a8:13:58:bc:95:e4:58:1e:36:1c:0e:4a:c4:56:a5:7d:41:9b:
         f9:8d:6d:07:0b:58:c0:5a:32:e6:6b:5b:83:b8:32:ac:31:4f:
         71:0b:ce:19:ab:06:b8:9d:b6:67:18:dd:9e:e2:15:3e:33:01:
         5d:0a:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 03:59:12 2024 by rpki-client on console-fra.rpki-client.org