Certificate

$ rpki-client -vvf dev.tw/rpki/August/1/A5B1E05036940FBC80C2944856DC1168E62E2364.cer
File:                     A5B1E05036940FBC80C2944856DC1168E62E2364.cer (raw, json)
Hash identifier:          TipsdPZVaTPzrpNeb2amqIl8lm8dpy4enAeS2pB13jU=
Subject key identifier:   A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       10531745021B0E328FC3AB4FA314C7138B1786B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Manifest:                 rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
caRepository:             rsync://dev.tw/rpki/AS945/5/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Fri 11 Oct 2024 07:54:12 +0000
Certificate not after:    Fri 10 Oct 2025 07:59:12 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 185.155.75.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:53:17:45:02:1b:0e:32:8f:c3:ab:4f:a3:14:c7:13:8b:17:86:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: Oct 11 07:54:12 2024 GMT
            Not After : Oct 10 07:59:12 2025 GMT
        Subject: CN=A5B1E05036940FBC80C2944856DC1168E62E2364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:7f:7e:04:88:54:ee:b0:12:71:1c:24:07:
                    f4:33:47:1f:a8:76:8b:d0:81:d2:eb:d4:11:ac:46:
                    46:05:cb:ba:3f:44:17:9c:ad:c3:63:7f:eb:ca:c5:
                    7f:7b:82:af:ad:07:5b:9a:7c:56:1c:2d:c0:41:9f:
                    b0:26:39:11:3b:a4:3a:92:ab:57:82:ff:4b:b9:e9:
                    4c:22:0c:92:21:29:6c:e1:99:76:f4:8b:7c:87:10:
                    98:6b:70:0c:02:32:8c:bb:de:c7:61:70:b9:c2:c6:
                    0e:e2:d9:f5:f6:7e:13:60:7e:bf:95:25:05:a4:d2:
                    60:bb:e9:32:47:6f:05:9d:da:7e:92:24:1a:7e:4c:
                    69:fe:08:0f:14:e4:02:9e:e9:44:57:83:de:a6:d0:
                    4f:73:4b:63:80:c5:46:ce:68:16:19:c6:ac:ec:c3:
                    af:1b:83:b7:4e:69:8d:3d:6b:38:22:d3:14:8f:00:
                    97:bc:c2:56:75:5f:22:b5:23:ac:3b:2e:f3:3d:98:
                    fa:61:77:e8:a5:88:68:7f:cc:df:a7:08:53:da:d8:
                    1d:19:cf:ba:78:6f:8e:82:3c:95:c1:6b:f5:be:0b:
                    30:42:60:47:7a:fb:1f:fe:a1:3e:6b:45:b1:fc:52:
                    71:07:74:5f:0a:5b:e9:6d:32:da:a5:96:bc:d2:6f:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:B1:E0:50:36:94:0F:BC:80:C2:94:48:56:DC:11:68:E6:2E:23:64
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/AS945/5/
                RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/5/A5B1E05036940FBC80C2944856DC1168E62E2364.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                  185.155.75.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:41:e2:1c:4d:f7:d6:28:d9:a9:58:59:ea:f9:07:39:80:
         17:b9:ed:47:fd:b7:be:22:a2:e3:cd:f9:65:8d:e4:8c:99:98:
         fe:38:99:8a:4a:25:44:b9:71:f9:73:5e:08:b2:07:1a:e9:80:
         21:cb:f5:3b:ce:e9:dd:79:2f:b4:20:83:4e:c2:46:34:cb:af:
         ed:67:78:33:a7:92:31:85:4d:99:1d:9a:6c:5b:57:e3:ef:86:
         ad:45:10:ea:e7:24:53:a6:ac:86:20:b6:41:04:0a:5e:13:ee:
         ad:42:f0:12:71:14:a0:0a:f0:6f:f7:1a:d0:dd:e9:6c:1f:29:
         6e:ed:b6:b8:fb:fa:d8:d8:6c:7d:22:5b:3e:95:b0:4a:4c:48:
         24:dc:9a:60:8d:56:10:2c:43:c0:89:f9:5a:f9:7f:d9:62:36:
         06:ea:d1:12:d9:5f:21:49:f5:db:ee:0b:09:b8:64:4a:60:6f:
         71:b9:5d:34:35:30:f8:5e:85:28:4f:a8:8a:33:64:fe:85:05:
         0f:41:3a:ad:b9:a2:7f:c4:58:b2:32:75:16:da:0a:95:7a:e3:
         39:a6:67:33:04:2d:d9:c0:ed:91:ff:2d:1d:10:14:f9:7b:44:
         e3:2a:f9:a1:86:df:ac:4c:49:7d:fa:d5:f6:f2:b0:5d:b4:76:
         72:37:41:ea
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUEFMXRQIbDjKPw6tPoxTHE4sXhrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQyYzM1NGE0ODNhOGI3MGQ4MzlkM2Y3OThjZDg3MDY4
NGYwMjE4NjAeFw0yNDEwMTEwNzU0MTJaFw0yNTEwMTAwNzU5MTJaMDMxMTAvBgNV
BAMTKEE1QjFFMDUwMzY5NDBGQkM4MEMyOTQ0ODU2REMxMTY4RTYyRTIzNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfjH9+BIhU7rAScRwkB/QzRx+o
dovQgdLr1BGsRkYFy7o/RBecrcNjf+vKxX97gq+tB1uafFYcLcBBn7AmORE7pDqS
q1eC/0u56UwiDJIhKWzhmXb0i3yHEJhrcAwCMoy73sdhcLnCxg7i2fX2fhNgfr+V
JQWk0mC76TJHbwWd2n6SJBp+TGn+CA8U5AKe6URXg96m0E9zS2OAxUbOaBYZxqzs
w68bg7dOaY09azgi0xSPAJe8wlZ1XyK1I6w7LvM9mPphd+iliGh/zN+nCFPa2B0Z
z7p4b46CPJXBa/W+CzBCYEd6+x/+oT5rRbH8UnEHdF8KW+ltMtqllrzSb3NDAgMB
AAGjggJmMIICYjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlseBQNpQPvIDC
lEhW3BFo5i4jZDAfBgNVHSMEGDAWgBRELDVKSDqLcNg50/eYzYcGhPAhhjAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9kZXYudHcvcnBr
aS9BdWd1c3QvMS80NDJDMzU0QTQ4M0E4QjcwRDgzOUQzRjc5OENEODcwNjg0RjAy
MTg2LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUkN3MVNrZzZpM0RZT2RQM21N
MkhCb1R3SVlZLmNlcjCBwgYIKwYBBQUHAQsEgbUwgbIwKAYIKwYBBQUHMAWGHHJz
eW5jOi8vZGV2LnR3L3Jwa2kvQVM5NDUvNS8wVAYIKwYBBQUHMAqGSHJzeW5jOi8v
ZGV2LnR3L3Jwa2kvQVM5NDUvNS9BNUIxRTA1MDM2OTQwRkJDODBDMjk0NDg1NkRD
MTE2OEU2MkUyMzY0Lm1mdDAwBggrBgEFBQcwDYYkaHR0cHM6Ly9kZXYudHcvcnBr
aS9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI
KwYBBQUHAQcBAf8ELjAsMBIEAgABMAwDBAC5ABMDBAC5m0swFgQCAAIwEAMHACAB
B/gAAgMFAyoTwAAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMpqAgMA6F4wDQYJ
KoZIhvcNAQELBQADggEBAKFiQeIcTffWKNmpWFnq+Qc5gBe57Uf9t74iouPN+WWN
5IyZmP44mYpKJUS5cflzXgiyBxrpgCHL9TvO6d15L7Qgg07CRjTLr+1neDOnkjGF
TZkdmmxbV+Pvhq1FEOrnJFOmrIYgtkEECl4T7q1C8BJxFKAK8G/3GtDd6WwfKW7t
trj7+tjYbH0iWz6VsEpMSCTcmmCNVhAsQ8CJ+Vr5f9liNgbq0RLZXyFJ9dvuCwm4
ZEpgb3G5XTQ1MPhehShPqIozZP6FBQ9BOq25on/EWLIydRbaCpV64zmmZzMELdnA
7ZH/LR0QFPl7ROMq+aGG36xMSX361fbysF20dnI3Qeo=
-----END CERTIFICATE-----
Generated at Wed Oct 23 06:24:45 2024 by rpki-client on console-fra.rpki-client.org