Certificate

$ rpki-client -vvf dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
File:                     8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer (raw, json)
Hash identifier:          wtNwAwk0qn1JKyQWvyT8ElIywyk8+d2p/X/RU/iXPQY=
Subject key identifier:   8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       47441549E0B1E975F8BB7DFBED472BA4D9767506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 17:55:24 +0000
Certificate not after:    Thu 19 Jun 2025 18:00:24 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 185.155.75.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Oct 2024 15:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:44:15:49:e0:b1:e9:75:f8:bb:7d:fb:ed:47:2b:a4:d9:76:75:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: Jun 20 17:55:24 2024 GMT
            Not After : Jun 19 18:00:24 2025 GMT
        Subject: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:3b:62:fa:e4:e8:d2:9f:b2:a0:de:38:ad:
                    21:85:77:dc:0f:6d:49:cc:52:b6:f7:63:e1:0e:fa:
                    7d:7e:e8:46:0c:1b:70:7a:e2:4d:d7:e2:93:4f:7d:
                    fe:50:96:93:d1:b3:f7:e7:e2:9f:14:52:1c:02:8c:
                    4a:e0:53:22:9a:52:0d:94:7c:33:99:0e:38:ea:fb:
                    ba:de:e0:56:2d:cb:35:50:13:14:50:65:eb:ff:2c:
                    17:de:a8:51:38:ad:20:59:1a:36:44:a8:24:9c:02:
                    4f:f2:29:3a:72:5b:84:0a:09:0a:3e:80:72:ab:45:
                    5e:e8:4a:f2:e2:39:40:7d:df:50:ad:56:72:b4:55:
                    e8:61:08:77:19:c2:87:28:f5:0f:72:8e:77:91:2b:
                    1a:8b:47:82:e5:6a:09:c2:b3:8c:e3:21:bc:7e:2c:
                    74:43:5a:e6:1b:a6:92:a0:16:8a:07:82:ce:54:b0:
                    67:3c:6f:f0:87:e8:ff:02:c9:eb:9e:f6:52:5b:c6:
                    21:13:ce:21:34:38:fc:2a:4e:6c:f1:2a:1c:72:bd:
                    aa:10:0c:45:e7:d1:b3:7f:9b:c0:db:07:87:3f:29:
                    f3:b3:2a:53:61:80:5a:f5:61:ba:9e:2b:ba:91:3b:
                    76:40:66:c8:7f:b5:62:93:f0:8a:4f:72:f3:40:ef:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                  185.155.75.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:b8:2b:1d:b4:7c:72:e2:4e:05:3a:51:23:24:1d:3f:e9:
         91:9b:e5:5a:a3:1a:b3:18:fb:61:a8:06:65:a6:06:9c:26:b8:
         4f:a0:c2:bc:1f:92:f9:b5:be:89:9d:b6:14:9c:3a:c2:d9:da:
         63:ef:4c:d2:07:ef:a6:ee:de:f1:93:d5:02:7d:d2:73:61:09:
         84:45:70:1c:d7:3b:60:6b:e9:5f:d3:57:49:ea:fe:2e:77:72:
         92:ca:8f:3e:1e:e9:68:49:00:43:1b:57:5a:ab:fc:05:7e:d0:
         3b:3f:e8:77:ab:1b:ab:73:0f:88:d1:7c:8c:cf:23:24:08:1a:
         e9:1e:7b:a0:96:1d:ce:b8:0b:8f:97:2c:55:1e:46:16:68:06:
         6c:12:f8:43:70:5d:70:17:22:db:c3:35:af:1e:fb:0f:b4:c1:
         6c:01:44:f6:c4:73:27:f8:22:a6:9b:05:c0:3f:89:0f:03:ff:
         ba:3a:5c:3a:06:6a:ed:17:1d:24:55:2e:f1:69:be:bc:20:23:
         e6:ec:83:5e:cf:79:8a:28:ab:05:6c:e6:44:d3:fe:55:02:ce:
         cf:f2:27:77:ca:bf:5c:65:24:28:f6:15:d9:e0:5e:65:c5:57:
         11:b6:d6:55:8f:f7:4a:f5:86:4c:bb:43:47:f1:de:4e:e9:a2:
         9f:33:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 21:42:09 2024 by rpki-client on console-ams.rpki-client.org