$ rpki-client -vvf dev.tw/rpki/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer File: 338A77CF88DD64F23FBC649EBD286448F9071586.cer (raw, json) Hash identifier: 8EzO85ez5W09qDcvBRbQj4ncVTG143KS8Ke5lblOAEE= Subject key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86 Authority key identifier: 64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67 Certificate issuer: /CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67 Certificate serial: 48F23EE1BEC4BDA3750BD6626B52DE4EBD77494C Authority info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer Manifest: rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.mft caRepository: rsync://rpki.co/repo/AS945/12/ Notify URL: https://rrdp.rpki.co/rrdp/notification.xml Certificate not before: Sun 15 Oct 2023 19:20:30 +0000 Certificate not after: Sun 13 Oct 2024 19:25:30 +0000 Subordinate resources: IP: 104.37.42.0/23 Validation: OK Signature path: rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.crl rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.mft rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 17:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f2:3e:e1:be:c4:bd:a3:75:0b:d6:62:6b:52:de:4e:bd:77:49:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67 Validity Not Before: Oct 15 19:20:30 2023 GMT Not After : Oct 13 19:25:30 2024 GMT Subject: CN=338A77CF88DD64F23FBC649EBD286448F9071586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:16:86:ba:30:5e:24:a0:3e:dd:08:a3:f8: 09:04:90:ce:62:01:e7:ab:e5:00:b3:2a:7d:90:5c: 82:9f:4a:54:37:56:2c:fc:83:21:04:7d:f8:e7:31: d1:83:81:03:5f:58:62:72:89:0f:7d:90:e8:2c:a3: ab:10:de:10:5a:78:99:63:70:cc:ec:18:ce:50:db: 68:40:9d:a8:f8:8a:42:e9:b3:8f:57:8e:2d:ec:77: 16:49:60:df:7f:56:dd:2e:79:f1:01:88:61:be:aa: 6b:eb:b5:89:84:17:d7:91:93:9e:b9:cb:30:84:1c: de:c6:77:a1:ec:e5:81:31:b4:57:19:0e:70:5e:4d: 4c:cc:b4:b7:a4:b8:e5:46:6e:38:2a:f3:48:eb:51: a3:79:7d:6c:b5:31:42:5b:69:e1:81:3b:c1:8c:1e: 30:1d:31:fa:a2:75:42:ad:2b:85:06:33:0f:6d:6d: 00:fb:00:39:b5:00:03:04:33:af:30:8b:6f:e3:00: 52:8d:b2:37:ac:71:d9:80:bb:af:59:b1:4f:1b:aa: dc:1b:2d:ff:19:57:ab:fe:df:d7:dc:78:47:ce:18: f6:55:34:5b:8f:f2:85:fd:1d:6b:a8:ea:3a:e0:10: b4:21:10:c2:1b:21:f0:cc:f1:80:c2:94:af:55:82: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86 X509v3 Authority Key Identifier: keyid:64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.crl Authority Information Access: CA Issuers - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer Subject Information Access: CA Repository - URI:rsync://rpki.co/repo/AS945/12/ RPKI Manifest - URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.mft RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.37.42.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:69:f6:cc:5c:fa:0c:8a:08:d4:13:ec:d5:f4:75:f5:95:7e: 3a:32:32:8f:3d:26:9c:06:79:2a:60:4d:65:45:43:44:ed:70: 37:c5:a6:12:c0:46:05:f3:66:e5:b5:3f:c5:26:b0:c7:ec:73: 18:45:0a:8d:99:50:46:02:3b:f4:ba:f2:5b:d5:c5:88:98:51: 2f:3a:71:c5:97:00:d4:60:9c:a9:65:2c:53:1f:d4:ec:98:b5: 48:9d:a8:09:84:8a:93:77:f0:6b:de:11:ab:9b:b2:78:be:74: ec:99:d9:98:10:7e:8d:2e:87:ab:39:e8:12:3c:f1:aa:4c:b5: 6b:05:b1:20:52:4c:25:fb:4b:d7:18:e0:6b:87:2d:2e:82:cf: f2:f5:13:d5:e4:9e:81:fa:bb:b4:ab:3a:b4:31:ac:b6:3e:85: 3a:16:35:e3:d6:b9:38:ce:90:b5:37:08:b8:7d:5d:4a:1a:40: b4:63:13:89:e1:82:65:79:95:87:8a:b0:c4:6e:2f:e8:cd:43: ae:f9:de:02:62:f3:bd:3f:52:7d:4c:ba:65:28:90:10:07:66: 87:b1:16:46:1a:f7:6b:a8:b2:62:12:c1:3f:2e:30:cb:ea:15: ec:93:4a:7e:0e:00:40:9f:b9:fd:08:17:c1:b7:52:9a:ff:91: 0f:9d:3d:4f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSPI+4b7EvaN1C9Zia1LeTr13SUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFRjdDNjRGNEU3MkNDMDczMEREMERBODBEM0MzNjdD Qjc4NUU2NzAeFw0yMzEwMTUxOTIwMzBaFw0yNDEwMTMxOTI1MzBaMDMxMTAvBgNV BAMTKDMzOEE3N0NGODhERDY0RjIzRkJDNjQ5RUJEMjg2NDQ4RjkwNzE1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/haGujBeJKA+3Qij+AkEkM5i Aeer5QCzKn2QXIKfSlQ3Viz8gyEEffjnMdGDgQNfWGJyiQ99kOgso6sQ3hBaeJlj cMzsGM5Q22hAnaj4ikLps49Xji3sdxZJYN9/Vt0uefEBiGG+qmvrtYmEF9eRk565 yzCEHN7Gd6Hs5YExtFcZDnBeTUzMtLekuOVGbjgq80jrUaN5fWy1MUJbaeGBO8GM HjAdMfqidUKtK4UGMw9tbQD7ADm1AAMEM68wi2/jAFKNsjescdmAu69ZsU8bqtwb Lf8ZV6v+39fceEfOGPZVNFuP8oX9HWuo6jrgELQhEMIbIfDM8YDClK9VggdvAgMB AAGjggI/MIICOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzinfPiN1k8j+8 ZJ69KGRI+QcVhjAfBgNVHSMEGDAWgBRk73xk9OcswHMN0NqA08Nny3heZzAOBgNV HQ8BAf8EBAMCAQYwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9kZXYudHcvcnBr aS9BdWd1c3QvMTIvNjRFRjdDNjRGNEU3MkNDMDczMEREMERBODBEM0MzNjdDQjc4 NUU2Ny5jcmwwcQYIKwYBBQUHAQEEZTBjMGEGCCsGAQUFBzAChlVyc3luYzovL3Jl cG8ua2FnbC5tZS9ycGtpL0tlYXRvbkFHTGFpci8wLzY0RUY3QzY0RjRFNzJDQzA3 MzBERDBEQTgwRDNDMzY3Q0I3ODVFNjcuY2VyMIHMBggrBgEFBQcBCwSBvzCBvDAq BggrBgEFBQcwBYYecnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUvMTIvMFYGCCsG AQUFBzAKhkpyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8xMi8zMzhBNzdDRjg4 REQ2NEYyM0ZCQzY0OUVCRDI4NjQ0OEY5MDcxNTg2Lm1mdDA2BggrBgEFBQcwDYYq aHR0cHM6Ly9ycmRwLnJwa2kuY28vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFoJSowDQYJKoZIhvcNAQELBQADggEBAIxp9sxc+gyKCNQT7NX0dfWVfjoyMo89 JpwGeSpgTWVFQ0TtcDfFphLARgXzZuW1P8UmsMfscxhFCo2ZUEYCO/S68lvVxYiY US86ccWXANRgnKllLFMf1OyYtUidqAmEipN38GveEaubsni+dOyZ2ZgQfo0uh6s5 6BI88apMtWsFsSBSTCX7S9cY4GuHLS6Cz/L1E9XknoH6u7SrOrQxrLY+hToWNePW uTjOkLU3CLh9XUoaQLRjE4nhgmV5lYeKsMRuL+jNQ6753gJi870/Un1MumUokBAH ZoexFkYa92uosmISwT8uMMvqFeyTSn4OAECfuf0IF8G3Upr/kQ+dPU8= -----END CERTIFICATE-----Generated at Sat Jun 1 22:59:25 2024 by rpki-client on console-fra.rpki-client.org