Certificate

$ rpki-client -vvf dev.tw/rpki/August/10/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.cer
File:                     3C8C1B29CC37837A2E3BECC50D55C362B62804DA.cer (raw, json)
Hash identifier:          iibMHI6pmULtm+Fw/usKen71g40PDzODhO02reFh6pw=
Subject key identifier:   3C:8C:1B:29:CC:37:83:7A:2E:3B:EC:C5:0D:55:C3:62:B6:28:04:DA
Authority key identifier: 1D:71:08:A1:2E:33:39:EA:0B:02:37:F0:AC:54:4A:EA:EB:6B:DA:D3
Certificate issuer:       /CN=1d7108a12e3339ea0b0237f0ac544aeaeb6bdad3
Certificate serial:       685384BC05695C38D200B415E6903D77DD92F74E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HXEIoS4zOeoLAjfwrFRK6utr2tM.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 04:12:20 +0000
Certificate not after:    Thu 19 Jun 2025 04:17:20 +0000
Subordinate resources:    AS: 49867

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:84:bc:05:69:5c:38:d2:00:b4:15:e6:90:3d:77:dd:92:f7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7108a12e3339ea0b0237f0ac544aeaeb6bdad3
        Validity
            Not Before: Jun 20 04:12:20 2024 GMT
            Not After : Jun 19 04:17:20 2025 GMT
        Subject: CN=3C8C1B29CC37837A2E3BECC50D55C362B62804DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:60:b2:5e:1e:c9:c7:a2:cf:df:7d:c2:99:
                    87:e0:7f:ff:75:c1:a4:93:4f:99:b9:db:45:39:e9:
                    4a:fa:12:84:a3:ec:3f:f6:22:ea:c0:ee:31:a7:b6:
                    65:0b:c3:75:c5:18:b0:8f:bc:04:1c:d6:20:09:a7:
                    32:d4:86:eb:a4:13:60:74:e2:53:f0:05:1a:8a:30:
                    22:c8:3b:11:93:93:32:5b:d8:ec:73:75:a7:b7:f4:
                    02:5b:5d:73:b3:96:e6:74:2f:ac:e5:35:ff:76:09:
                    88:d4:80:c7:88:17:00:b7:27:1a:20:c7:92:d8:34:
                    d8:c2:a5:ca:59:10:a3:55:0c:25:0f:01:60:10:54:
                    17:a1:76:aa:57:45:2e:40:59:c0:dc:2b:85:89:c2:
                    63:65:49:41:f9:94:f0:be:c7:a8:24:92:c1:43:24:
                    33:cc:17:be:c9:55:ac:b5:b7:3d:cf:1e:f2:1e:4a:
                    63:63:cc:e5:3c:79:e6:1c:c9:d4:63:41:0a:4e:4b:
                    60:3b:a4:61:2a:1f:0f:25:c7:ec:be:10:d6:00:a8:
                    e9:39:92:84:fd:8b:04:0c:dd:7d:0d:e9:fb:2f:b6:
                    19:b1:f5:0e:d0:53:e3:c9:ad:c1:1c:ee:f0:87:be:
                    0d:83:3d:47:39:e6:29:71:01:2b:8d:51:23:5a:e0:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:8C:1B:29:CC:37:83:7A:2E:3B:EC:C5:0D:55:C3:62:B6:28:04:DA
            X509v3 Authority Key Identifier:
                keyid:1D:71:08:A1:2E:33:39:EA:0B:02:37:F0:AC:54:4A:EA:EB:6B:DA:D3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/10/1D7108A12E3339EA0B0237F0AC544AEAEB6BDAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXEIoS4zOeoLAjfwrFRK6utr2tM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49867

    Signature Algorithm: sha256WithRSAEncryption
         28:77:d3:42:9e:d8:e2:8e:3d:70:1b:62:72:e4:21:52:28:27:
         6d:a6:ce:d3:8b:c0:7f:6d:85:0c:7e:04:64:5f:02:aa:e5:fb:
         cf:c9:df:06:63:c5:94:f2:51:31:55:da:0d:2b:ec:26:32:ea:
         ac:70:e2:d1:8f:85:40:20:6c:ca:c0:02:22:6d:dd:84:46:15:
         2c:c2:4a:a6:49:2a:30:1e:b3:38:03:83:f0:80:d1:66:5d:7f:
         70:cd:c1:74:31:89:4b:13:17:39:ea:03:8a:0f:ce:6a:f4:59:
         15:0e:ba:c3:0b:dd:0f:8e:06:3d:8a:1f:32:f0:31:3d:03:18:
         f0:0c:79:69:ec:50:ea:51:a7:f8:4d:57:f6:0f:cb:4c:ea:bd:
         d9:35:36:79:3c:e3:cf:6e:5a:38:a3:12:e8:3a:97:04:00:c8:
         f5:5c:ab:ca:66:55:9d:d8:f5:ab:19:59:1a:65:ad:f3:18:31:
         d3:6b:78:84:55:53:91:17:00:18:82:48:0d:88:76:66:6a:ca:
         80:34:20:d6:8d:e6:a6:81:22:48:19:8a:86:e4:fb:1d:fd:19:
         7c:a7:a4:73:3c:89:cb:41:af:21:33:6b:53:64:fe:ce:47:61:
         a9:f2:97:c5:87:eb:9f:8f:a6:16:5d:69:e2:db:c7:b2:72:57:
         21:eb:63:30
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUaFOEvAVpXDjSALQV5pA9d92S904wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWQ3MTA4YTEyZTMzMzllYTBiMDIzN2YwYWM1NDRhZWFl
YjZiZGFkMzAeFw0yNDA2MjAwNDEyMjBaFw0yNTA2MTkwNDE3MjBaMDMxMTAvBgNV
BAMTKDNDOEMxQjI5Q0MzNzgzN0EyRTNCRUNDNTBENTVDMzYyQjYyODA0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlV2CyXh7Jx6LP333CmYfgf/91
waSTT5m520U56Ur6EoSj7D/2IurA7jGntmULw3XFGLCPvAQc1iAJpzLUhuukE2B0
4lPwBRqKMCLIOxGTkzJb2Oxzdae39AJbXXOzluZ0L6zlNf92CYjUgMeIFwC3Jxog
x5LYNNjCpcpZEKNVDCUPAWAQVBehdqpXRS5AWcDcK4WJwmNlSUH5lPC+x6gkksFD
JDPMF77JVay1tz3PHvIeSmNjzOU8eeYcydRjQQpOS2A7pGEqHw8lx+y+ENYAqOk5
koT9iwQM3X0N6fsvthmx9Q7QU+PJrcEc7vCHvg2DPUc55ilxASuNUSNa4OAjAgMB
AAGjggKFMIICgTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8jBspzDeDei47
7MUNVcNitigE2jAfBgNVHSMEGDAWgBQdcQihLjM56gsCN/CsVErq62va0zAOBgNV
HQ8BAf8EBAMCAQYwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9kZXYudHcvcnBr
aS9BdWd1c3QvMTAvMUQ3MTA4QTEyRTMzMzlFQTBCMDIzN0YwQUM1NDRBRUFFQjZC
REFEMy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0hYRUlvUzR6T2VvTEFqZndy
RlJLNnV0cjJ0TS5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAF
hkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4
ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNC8wgYAGCCsGAQUFBzAKhnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4ZmRlZWMwYzAx
OTAzM2RiZGVjYzRmYTQvNC8zQzhDMUIyOUNDMzc4MzdBMkUzQkVDQzUwRDU1QzM2
MkI2MjgwNERBLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmlu
Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMLLMA0GCSqGSIb3DQEBCwUAA4IBAQAo
d9NCntjijj1wG2Jy5CFSKCdtps7Ti8B/bYUMfgRkXwKq5fvPyd8GY8WU8lExVdoN
K+wmMuqscOLRj4VAIGzKwAIibd2ERhUswkqmSSowHrM4A4PwgNFmXX9wzcF0MYlL
Exc56gOKD85q9FkVDrrDC90PjgY9ih8y8DE9AxjwDHlp7FDqUaf4TVf2D8tM6r3Z
NTZ5POPPblo4oxLoOpcEAMj1XKvKZlWd2PWrGVkaZa3zGDHTa3iEVVORFwAYgkgN
iHZmasqANCDWjeamgSJIGYqG5Psd/Rl8p6RzPInLQa8hM2tTZP7OR2Gp8pfFh+uf
j6YWXWni28eyclch62Mw
-----END CERTIFICATE-----