$ rpki-client -vvf dev.tw/rpki/August/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer File: CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.cer (raw, json) Hash identifier: I1IstA2GOtB6JA91XPiNijL3fgkp0WO6WQAmnsSa7B8= Subject key identifier: CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68 Authority key identifier: 8E:03:1D:3F:CE:18:87:D3:71:A7:B0:05:F9:09:81:6C:3D:B9:56:06 Certificate issuer: /CN=dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9 Certificate serial: 22C957A2BFAF9EDCD8AE0F86D8499058F9B18FB3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9.cer Manifest: rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft caRepository: rsync://rpki.co/repo/AS945/11/ Notify URL: https://rrdp.rpki.co/rrdp/notification.xml Certificate not before: Sun 15 Oct 2023 19:20:43 +0000 Certificate not after: Sun 13 Oct 2024 19:25:43 +0000 Subordinate resources: AS: 13586 Validation: OK Signature path: rsync://dev.tw/rpki/August/11/8E031D3FCE1887D371A7B005F909816C3DB95606.crl rsync://dev.tw/rpki/August/11/8E031D3FCE1887D371A7B005F909816C3DB95606.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/cc1d4521-b619-4ca7-b66a-41b5dba13caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 17:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c9:57:a2:bf:af:9e:dc:d8:ae:0f:86:d8:49:90:58:f9:b1:8f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9 Validity Not Before: Oct 15 19:20:43 2023 GMT Not After : Oct 13 19:25:43 2024 GMT Subject: CN=CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:0e:02:89:c9:3c:85:33:b2:d5:76:cc:a4: 68:79:60:b5:d1:e5:db:b3:cc:d8:b3:09:c3:ef:4c: d0:c4:2d:27:58:70:56:5d:c2:d9:6f:a7:09:f6:2d: d2:63:99:9e:31:1f:be:4d:0d:00:8d:20:83:02:bc: e6:74:ee:d1:a4:83:4b:4f:f2:31:3b:0b:5e:d9:4b: df:b1:c5:aa:ba:aa:f5:e6:d6:59:34:6c:4a:9f:6c: 42:48:c4:45:03:f6:13:a5:25:e0:7e:60:29:e7:6f: 0e:35:4b:6e:e3:ae:42:d9:af:58:cf:22:4a:05:78: e7:5f:6b:e2:23:6f:c8:f1:a8:63:95:c4:21:aa:89: 7b:e0:fc:4b:a2:b1:68:02:d4:70:82:96:eb:6f:ce: ab:05:e5:b8:b0:a3:62:f2:8a:31:4d:89:3b:46:ae: 22:df:1b:5c:88:8a:19:e9:b9:e9:52:3c:5b:fe:44: 4a:3b:da:41:65:c0:c4:d4:d6:58:b3:dc:e5:17:d1: f7:54:22:29:c4:ba:6f:28:95:f6:48:e1:af:5a:24: 59:a0:c4:b5:2d:74:3e:d2:7e:37:7b:0a:75:2d:bb: 13:fc:c1:67:d1:4e:1b:59:3a:cc:e1:e8:f4:47:d2: 32:26:58:eb:0c:74:5e:3f:55:06:8a:fa:4f:2f:46: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:B5:E3:53:17:32:00:C2:D8:D1:B6:B5:C8:FE:C0:57:9D:BC:60:68 X509v3 Authority Key Identifier: keyid:8E:03:1D:3F:CE:18:87:D3:71:A7:B0:05:F9:09:81:6C:3D:B9:56:06 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/August/11/8E031D3FCE1887D371A7B005F909816C3DB95606.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc1d4521-b619-4ca7-b66a-41b5dba13caa/dc24fd57e6a927343ee6bc5c1b105bbda0da9e8c242be5dbb9.cer Subject Information Access: CA Repository - URI:rsync://rpki.co/repo/AS945/11/ RPKI Manifest - URI:rsync://rpki.co/repo/AS945/11/CBB5E353173200C2D8D1B6B5C8FEC0579DBC6068.mft RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 13586 Signature Algorithm: sha256WithRSAEncryption ae:f2:5f:8a:08:25:63:22:11:1a:f9:61:61:be:56:b1:2c:7e: b5:b5:80:bc:d1:9e:66:62:64:af:db:d5:e4:da:6a:d5:00:17: 19:b3:4f:b9:f1:f3:04:c0:08:82:ba:1e:05:43:9a:32:e6:2d: 72:a0:c7:7c:a7:69:54:c3:66:23:e6:73:e4:30:a6:3a:41:51: 2c:5d:36:4d:a0:8b:d7:c6:41:8c:64:a1:3a:1b:bb:c1:f7:79: c9:9a:8f:13:b6:bf:ae:b9:9c:a3:65:13:6c:25:db:70:1c:de: 35:b3:9f:18:1e:0c:16:34:28:dc:f7:88:73:7e:b6:ab:f8:ae: 86:69:40:0e:7d:1c:1a:e4:95:19:00:a3:7a:27:45:66:55:fe: 60:36:64:16:4b:2e:80:6b:c8:fa:22:9b:5c:9e:c6:7c:b0:3c: 69:0c:e4:07:b7:fe:88:ae:02:4b:7f:97:88:dd:a7:6d:8a:34: 19:18:06:be:6c:23:af:93:7d:9d:89:40:06:c4:bc:1a:b7:3a: 8f:98:36:29:e4:25:93:a4:8f:eb:00:eb:25:64:7d:e3:33:28: 1d:c4:69:34:21:cb:19:e4:4c:f1:6c:ee:90:26:18:f5:42:b4: 4a:7c:d0:06:93:60:ce:c2:d7:5a:0c:63:4e:9f:70:05:ce:5e: ac:d1:42:1f -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUIslXor+vntzYrg+G2EmQWPmxj7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGMyNGZkNTdlNmE5MjczNDNlZTZiYzVjMWIxMDViYmRh MGRhOWU4YzI0MmJlNWRiYjkwHhcNMjMxMDE1MTkyMDQzWhcNMjQxMDEzMTkyNTQz WjAzMTEwLwYDVQQDEyhDQkI1RTM1MzE3MzIwMEMyRDhEMUI2QjVDOEZFQzA1NzlE QkM2MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdsOAonJPIUz stV2zKRoeWC10eXbs8zYswnD70zQxC0nWHBWXcLZb6cJ9i3SY5meMR++TQ0AjSCD ArzmdO7RpINLT/IxOwte2UvfscWquqr15tZZNGxKn2xCSMRFA/YTpSXgfmAp528O NUtu465C2a9YzyJKBXjnX2viI2/I8ahjlcQhqol74PxLorFoAtRwgpbrb86rBeW4 sKNi8ooxTYk7Rq4i3xtciIoZ6bnpUjxb/kRKO9pBZcDE1NZYs9zlF9H3VCIpxLpv KJX2SOGvWiRZoMS1LXQ+0n43ewp1LbsT/MFn0U4bWTrM4ej0R9IyJljrDHReP1UG ivpPL0ZL8wIDAQABo4ICvDCCArgwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU y7XjUxcyAMLY0ba1yP7AV528YGgwHwYDVR0jBBgwFoAUjgMdP84Yh9Nxp7AF+QmB bD25VgYwDgYDVR0PAQH/BAQDAgEGMFsGA1UdHwRUMFIwUKBOoEyGSnJzeW5jOi8v ZGV2LnR3L3Jwa2kvQXVndXN0LzExLzhFMDMxRDNGQ0UxODg3RDM3MUE3QjAwNUY5 MDk4MTZDM0RCOTU2MDYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNm LTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jYzFkNDUyMS1iNjE5LTRjYTct YjY2YS00MWI1ZGJhMTNjYWEvZGMyNGZkNTdlNmE5MjczNDNlZTZiYzVjMWIxMDVi YmRhMGRhOWU4YzI0MmJlNWRiYjkuY2VyMIHMBggrBgEFBQcBCwSBvzCBvDAqBggr BgEFBQcwBYYecnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUvMTEvMFYGCCsGAQUF BzAKhkpyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8xMS9DQkI1RTM1MzE3MzIw MEMyRDhEMUI2QjVDOEZFQzA1NzlEQkM2MDY4Lm1mdDA2BggrBgEFBQcwDYYqaHR0 cHM6Ly9ycmRwLnJwa2kuY28vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICNRIwDQYJ KoZIhvcNAQELBQADggEBAK7yX4oIJWMiERr5YWG+VrEsfrW1gLzRnmZiZK/b1eTa atUAFxmzT7nx8wTACIK6HgVDmjLmLXKgx3ynaVTDZiPmc+QwpjpBUSxdNk2gi9fG QYxkoTobu8H3ecmajxO2v665nKNlE2wl23Ac3jWznxgeDBY0KNz3iHN+tqv4roZp QA59HBrklRkAo3onRWZV/mA2ZBZLLoBryPoim1yexnywPGkM5Ae3/oiuAkt/l4jd p22KNBkYBr5sI6+TfZ2JQAbEvBq3Oo+YNinkJZOkj+sA6yVkfeMzKB3EaTQhyxnk TPFs7pAmGPVCtEp80AaTYM7C11oMY06fcAXOXqzRQh8= -----END CERTIFICATE-----Generated at Sun May 5 16:43:19 2024 by rpki-client on console-ams.rpki-client.org