Certificate

$ rpki-client -vvf dev.tw/rpki/August/0/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer
File:                     D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer (raw, json)
Hash identifier:          TseQRAwyjn3ZYLzgReMecE8XiudYgs3Qb29hv5vLMuo=
Subject key identifier:   D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       435ECA3638D1515018DF62D0AE54DE23CCCA1EA1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Manifest:                 rsync://dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.mft
caRepository:             rsync://dev.tw/rpki/AS945/3/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Fri 11 Oct 2024 07:54:05 +0000
Certificate not after:    Fri 10 Oct 2025 07:59:05 +0000
Subordinate resources:    AS: 945
                          AS: 62853
                          IP: 23.133.8.0/24
                          IP: 216.146.28.0/22
                          IP: 2001:506:33::/48
                          IP: 2602:fbf6::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5e:ca:36:38:d1:51:50:18:df:62:d0:ae:54:de:23:cc:ca:1e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Oct 11 07:54:05 2024 GMT
            Not After : Oct 10 07:59:05 2025 GMT
        Subject: CN=D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:5e:9d:e7:8b:5f:b9:61:3b:48:2e:a1:04:
                    da:7d:0c:3a:73:2f:d4:b4:a6:b3:ea:6c:e2:46:f9:
                    b5:22:89:fe:94:3a:e4:3b:10:ca:64:e2:9a:65:07:
                    a5:be:f7:35:13:09:86:cf:05:2a:4f:a5:bb:d2:73:
                    01:9d:46:46:2d:4c:2c:80:3d:ea:99:85:a3:a0:4c:
                    04:b7:a6:e3:e4:05:a5:63:e5:c7:88:c0:db:0b:dd:
                    24:26:9b:6a:c7:39:6e:21:40:6e:53:bc:de:27:45:
                    9e:6e:c5:4c:54:98:55:e6:a0:80:04:ea:92:a1:5d:
                    2d:f7:7f:44:00:ad:c2:b3:11:8e:cb:fa:4a:eb:b0:
                    60:cb:28:f5:80:2a:7d:64:18:5c:30:a9:f0:81:95:
                    a4:94:3c:35:44:f4:8b:e2:0d:42:7f:5b:4b:39:bd:
                    93:99:20:4d:37:05:e6:dd:fd:9f:b1:a2:67:65:b5:
                    a9:3d:08:36:ec:04:49:50:58:0a:53:8e:b2:29:9e:
                    2b:4a:74:ca:61:4c:fb:f2:59:1d:df:92:e7:4e:1a:
                    b7:1d:9c:ee:83:a9:31:0c:4a:6a:a4:3e:47:3b:5f:
                    47:12:6f:a2:18:13:e2:21:e1:70:ee:c6:a9:5a:34:
                    e3:09:dc:9e:61:7a:88:8b:ba:5a:1a:c6:f7:4a:4f:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/AS945/3/
                RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24
                  216.146.28.0/22
                IPv6:
                  2001:506:33::/48
                  2602:fbf6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945
                  62853

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:d7:4c:57:32:9a:e6:04:7b:b9:c0:d2:76:31:f6:b9:8d:
         20:82:55:15:1d:11:82:5f:7f:c2:ab:6b:07:81:3c:e8:46:2f:
         7b:88:d6:37:86:17:69:13:f4:49:2a:38:f8:61:e3:68:79:43:
         4c:97:d8:5a:77:14:33:93:3a:f6:81:e6:f1:99:30:fa:f6:7f:
         34:08:3a:e6:fb:4d:4f:4e:06:28:8b:1a:b5:cd:14:4f:5d:0b:
         fb:3f:c0:b2:23:88:78:8c:99:cb:18:d1:7a:3d:11:d1:41:f4:
         25:17:7f:3b:28:dc:16:1a:c3:6c:a1:a4:24:3e:3f:49:4f:1d:
         8f:76:8b:74:12:45:c7:0a:c9:20:64:47:6f:7f:5f:73:51:e8:
         35:f5:7c:15:3c:2e:0b:db:74:3f:3c:b3:b2:62:51:4c:81:14:
         d1:7c:74:26:9f:1e:34:e0:2f:10:6a:67:c3:ee:12:32:29:56:
         b3:73:75:1e:c3:87:92:ed:01:75:57:3b:8e:e4:1b:e0:06:66:
         be:66:9c:00:d0:ae:a8:d8:76:ba:12:2d:ec:7e:0b:9e:41:11:
         7b:a0:88:7f:20:c9:0a:6d:04:5e:97:fe:c4:95:cb:4b:3e:c1:
         ad:c2:4f:4a:12:20:db:d3:d6:9e:97:57:ff:ab:50:3a:71:09:
         71:2c:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 19:13:56 2024 by rpki-client on console-fra.rpki-client.org