![](/console.gif)
Certificate
$ rpki-client -vvf dev.tw/rpki/August/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer
File: CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer (raw, json)
Hash identifier: I1IstA2GOtB6JA91XPiNijL3fgkp0WO6WQAmnsSa7B8=
Subject key identifier: CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68
Authority key identifier: 8E:03:1D:3F:CE:18:87:D3:71:A7:B0:05:F9:09:81:6C:3D:B9:56:06
Certificate issuer: /CN=dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9
Certificate serial: 22C957A2BFAF9EDCD8AE0F86D8499058F9B18FB3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9.cer
Manifest: rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft
caRepository: rsync://rpki.co/repo/AS945/11/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sun 15 Oct 2023 19:20:43 +0000
Certificate not after: Sun 13 Oct 2024 19:25:43 +0000
Subordinate resources: AS: 13586
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c9:57:a2:bf:af:9e:dc:d8:ae:0f:86:d8:49:90:58:f9:b1:8f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9
Validity
Not Before: Oct 15 19:20:43 2023 GMT
Not After : Oct 13 19:25:43 2024 GMT
Subject: CN=CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:0e:02:89:c9:3c:85:33:b2:d5:76:cc:a4:
68:79:60:b5:d1:e5:db:b3:cc:d8:b3:09:c3:ef:4c:
d0:c4:2d:27:58:70:56:5d:c2:d9:6f:a7:09:f6:2d:
d2:63:99:9e:31:1f:be:4d:0d:00:8d:20:83:02:bc:
e6:74:ee:d1:a4:83:4b:4f:f2:31:3b:0b:5e:d9:4b:
df:b1:c5:aa:ba:aa:f5:e6:d6:59:34:6c:4a:9f:6c:
42:48:c4:45:03:f6:13:a5:25:e0:7e:60:29:e7:6f:
0e:35:4b:6e:e3:ae:42:d9:af:58:cf:22:4a:05:78:
e7:5f:6b:e2:23:6f:c8:f1:a8:63:95:c4:21:aa:89:
7b:e0:fc:4b:a2:b1:68:02:d4:70:82:96:eb:6f:ce:
ab:05:e5:b8:b0:a3:62:f2:8a:31:4d:89:3b:46:ae:
22:df:1b:5c:88:8a:19:e9:b9:e9:52:3c:5b:fe:44:
4a:3b:da:41:65:c0:c4:d4:d6:58:b3:dc:e5:17:d1:
f7:54:22:29:c4:ba:6f:28:95:f6:48:e1:af:5a:24:
59:a0:c4:b5:2d:74:3e:d2:7e:37:7b:0a:75:2d:bb:
13:fc:c1:67:d1:4e:1b:59:3a:cc:e1:e8:f4:47:d2:
32:26:58:eb:0c:74:5e:3f:55:06:8a:fa:4f:2f:46:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68
X509v3 Authority Key Identifier:
keyid:8E:03:1D:3F:CE:18:87:D3:71:A7:B0:05:F9:09:81:6C:3D:B9:56:06
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/11/8E031D3FCE1887D371A7B005F909816C3DB95606.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS945/11/
RPKI Manifest - URI:rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13586
Signature Algorithm: sha256WithRSAEncryption
ae:f2:5f:8a:08:25:63:22:11:1a:f9:61:61:be:56:b1:2c:7e:
b5:b5:80:bc:d1:9e:66:62:64:af:db:d5:e4:da:6a:d5:00:17:
19:b3:4f:b9:f1:f3:04:c0:08:82:ba:1e:05:43:9a:32:e6:2d:
72:a0:c7:7c:a7:69:54:c3:66:23:e6:73:e4:30:a6:3a:41:51:
2c:5d:36:4d:a0:8b:d7:c6:41:8c:64:a1:3a:1b:bb:c1:f7:79:
c9:9a:8f:13:b6:bf:ae:b9:9c:a3:65:13:6c:25:db:70:1c:de:
35:b3:9f:18:1e:0c:16:34:28:dc:f7:88:73:7e:b6:ab:f8:ae:
86:69:40:0e:7d:1c:1a:e4:95:19:00:a3:7a:27:45:66:55:fe:
60:36:64:16:4b:2e:80:6b:c8:fa:22:9b:5c:9e:c6:7c:b0:3c:
69:0c:e4:07:b7:fe:88:ae:02:4b:7f:97:88:dd:a7:6d:8a:34:
19:18:06:be:6c:23:af:93:7d:9d:89:40:06:c4:bc:1a:b7:3a:
8f:98:36:29:e4:25:93:a4:8f:eb:00:eb:25:64:7d:e3:33:28:
1d:c4:69:34:21:cb:19:e4:4c:f1:6c:ee:90:26:18:f5:42:b4:
4a:7c:d0:06:93:60:ce:c2:d7:5a:0c:63:4e:9f:70:05:ce:5e:
ac:d1:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:53 2025 by rpki-client