Certificate

$ rpki-client -vvf dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
File:                     AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer (raw, json)
Hash identifier:          UcuD3hPjY5h2EszvBFyngh9xLyp7dyP7MamNEHLMHzU=
Subject key identifier:   AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       486F482417BE4459F1DC795A92D3E20580698293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Manifest:                 rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
caRepository:             rsync://rpki.co/repo/AS945/5/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sun 15 Oct 2023 19:20:27 +0000
Certificate not after:    Sun 13 Oct 2024 19:25:27 +0000
Subordinate resources:    AS: 51818
                          AS: 59486
                          IP: 185.0.19.0/24
                          IP: 2001:7f8:2::/48
                          IP: 2a13:c000::/29

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6f:48:24:17:be:44:59:f1:dc:79:5a:92:d3:e2:05:80:69:82:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: Oct 15 19:20:27 2023 GMT
            Not After : Oct 13 19:25:27 2024 GMT
        Subject: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:ce:3a:54:96:fd:8e:25:c6:da:fa:7d:aa:
                    bd:76:49:13:01:7f:21:f9:f2:44:dd:93:17:ae:07:
                    30:75:fc:b0:74:43:1a:6d:b2:07:14:a9:55:9b:64:
                    48:ab:8a:4e:24:aa:c5:3e:95:6c:1e:f5:2a:57:51:
                    a6:21:da:c7:90:74:88:8e:f5:5a:24:ed:b6:00:d3:
                    38:91:3f:44:7b:77:5d:55:df:6b:d4:dd:95:37:97:
                    12:a8:87:e2:b6:28:30:9b:c9:43:d5:3b:9b:c7:c0:
                    e3:b0:63:4c:7f:6f:e8:cc:50:70:58:ac:b7:6c:8c:
                    db:24:37:de:d2:3d:e8:75:92:cb:d0:c2:75:fe:b1:
                    4c:3e:ee:9c:70:69:f3:48:e0:64:96:4e:24:ba:71:
                    ed:01:2a:98:4b:f1:7d:24:32:12:6b:a1:ae:40:ec:
                    f2:c0:16:bc:88:5a:7c:18:30:2f:e1:3d:6b:80:6a:
                    f0:a4:79:00:83:1d:ce:8e:08:d7:97:a4:20:96:03:
                    af:39:05:8f:85:e5:5c:85:a2:57:2a:6e:2d:6d:e7:
                    38:23:ed:1f:a8:6c:ef:1c:c3:cb:05:d6:9b:00:f4:
                    f5:1c:f3:c7:fc:84:3f:16:99:61:7e:d8:97:27:43:
                    a8:b8:c6:6d:6c:14:ae:ba:95:47:69:21:2c:c4:86:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/5/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.19.0/24
                IPv6:
                  2001:7f8:2::/48
                  2a13:c000::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51818
                  59486

    Signature Algorithm: sha256WithRSAEncryption
         c4:ec:38:1a:04:ef:56:99:12:70:68:27:ef:52:b8:f0:ba:be:
         ac:ac:6b:47:0e:2f:f3:81:d9:74:35:6f:96:e7:d4:22:2a:75:
         65:b7:62:e1:f9:61:23:ca:68:12:ca:82:ad:9e:ea:91:a0:3a:
         ad:f5:6f:3a:8d:1f:69:26:c1:99:a1:94:d3:b9:f0:4a:e6:c2:
         61:88:76:0f:fc:09:b3:98:82:be:c1:b0:67:ec:d9:c2:f7:66:
         0f:71:12:b1:35:fe:93:65:31:80:0b:0a:a9:0f:60:3d:6b:16:
         ed:00:05:97:cd:44:49:b9:10:28:a9:43:4c:ea:39:63:01:f8:
         9d:d1:ca:27:d0:39:aa:3f:92:b9:e9:4a:9d:6b:bf:7d:6f:a0:
         6a:46:93:a9:f8:58:04:ba:50:32:78:c2:f3:30:27:a4:e8:e8:
         1d:6f:5f:54:69:5f:34:dc:ca:16:d9:d8:11:4c:4d:8c:97:22:
         9f:4e:a4:7a:50:21:37:a8:e3:c4:4c:aa:3d:6b:45:02:68:b2:
         2e:a1:0d:7f:e5:5b:71:13:b3:b8:f9:04:de:05:e7:1c:e8:2d:
         a2:c7:ae:37:00:6d:6a:11:90:0e:a8:ab:a9:b6:a0:f0:40:b9:
         bc:1c:eb:b0:cf:19:a6:13:ee:5a:47:0e:b5:00:4f:f2:e8:ff:
         6e:40:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:17:28 2024 by rpki-client on console-fra.rpki-client.org