$ rpki-client -vvf dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer File: 3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer (raw, json) Hash identifier: VE8zxm+/6QwhHQkJu62YUGvcjAUIBwT9rByHUvjN/vU= Subject key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9 Authority key identifier: F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE Certificate issuer: /CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE Certificate serial: 628B660C8DA611EF60F0EF9497750A78B7927155 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer Manifest: rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft caRepository: rsync://rpki.co/repo/AS945/14/ Notify URL: https://rrdp.rpki.co/rrdp/notification.xml Certificate not before: Sun 15 Oct 2023 19:20:22 +0000 Certificate not after: Sun 13 Oct 2024 19:25:22 +0000 Subordinate resources: IP: 2a05:dfc6::/32 Validation: OK Signature path: rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8b:66:0c:8d:a6:11:ef:60:f0:ef:94:97:75:0a:78:b7:92:71:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE Validity Not Before: Oct 15 19:20:22 2023 GMT Not After : Oct 13 19:25:22 2024 GMT Subject: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:b8:e5:08:4f:27:46:62:df:62:6c:9d:64: 42:eb:7b:99:7c:d4:51:a5:de:aa:31:79:81:7c:e5: 2b:bf:f9:5e:fb:04:1c:70:7f:01:2b:a5:5a:97:0f: f9:5d:33:a8:c0:e7:7e:85:fd:10:67:23:88:d6:ac: 9f:9d:a6:b6:d2:e7:67:8e:51:68:23:2d:10:91:69: dd:53:2d:83:fa:29:d9:88:3c:94:82:25:f4:57:3b: 8f:96:9f:94:be:6c:21:0e:14:db:f2:6c:b0:00:02: d0:a3:e5:90:a5:7e:3c:34:43:48:3f:7a:27:b3:f2: 79:30:0f:03:bd:b0:b6:83:be:d7:c3:15:4e:1b:40: f2:da:e3:72:58:e7:fd:92:5d:b8:f8:3e:f4:c1:df: a8:39:c6:06:6f:5d:cb:5e:38:6a:b1:b3:c8:f2:d2: aa:88:7d:fe:03:75:38:e3:78:af:92:ba:12:29:d3: 0e:32:78:15:94:52:0a:d5:2f:96:80:e8:ab:f7:49: 75:2d:2e:91:81:c1:19:56:98:57:fa:93:8c:a8:44: f2:24:ec:9a:1f:a3:31:05:d1:5a:32:b5:ea:16:8e: 42:3c:73:d9:54:75:31:8b:21:e0:2d:41:a9:1e:39: 7e:9a:0b:3c:ea:f1:96:5a:78:74:d8:13:56:2c:2a: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9 X509v3 Authority Key Identifier: keyid:F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer Subject Information Access: CA Repository - URI:rsync://rpki.co/repo/AS945/14/ RPKI Manifest - URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.mft RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc6::/32 Signature Algorithm: sha256WithRSAEncryption 1b:e1:6c:f2:04:63:cd:53:1b:08:8d:07:24:e5:7e:06:e8:31: 8e:58:50:be:9e:be:fd:d7:df:e6:38:e6:6e:f8:7a:50:01:68: 60:86:06:43:98:e9:bd:6e:95:04:31:37:d1:1d:8f:67:49:cf: 18:2d:a6:0a:e2:08:8c:7e:e5:a4:3c:3d:44:ea:c6:3e:b4:02: 66:b6:6b:84:47:2d:0e:fe:27:3b:85:fe:16:a2:2b:25:c1:11: 58:7c:09:dd:c6:d1:b4:db:95:47:f0:6e:f1:ad:78:74:82:bd: e5:84:c9:54:3c:7b:20:b2:52:c3:c3:0e:d1:5c:e3:f3:26:bd: 4e:7d:30:b6:e4:4b:80:66:4c:e3:80:85:a3:f2:72:82:8b:60: 6f:5c:d4:3d:68:7c:5c:74:a8:87:38:72:e3:31:ed:79:52:d4: ee:e8:5a:f7:e5:07:fd:23:f7:d7:cf:ab:cb:20:fd:ef:9d:b7: 1e:d9:8d:ee:63:72:0b:94:25:a8:06:21:4c:8d:1d:31:32:fe: e9:41:50:26:29:20:ec:07:79:66:29:ec:2f:29:92:bc:a9:f2: 8f:35:b5:a4:84:01:7f:8c:7b:ee:61:b6:0e:eb:3d:ec:f4:95: 1a:a6:f8:a7:98:a7:93:3f:32:31:44:59:f3:b8:7c:2b:6b:1f: 8c:32:2c:2d -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIUYotmDI2mEe9g8O+Ul3UKeLeScVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAzOTlD RUM2RkJDRTAeFw0yMzEwMTUxOTIwMjJaFw0yNDEwMTMxOTI1MjJaMDMxMTAvBgNV BAMTKDNFMzgyM0NGRjRENDFDMkM2RjZCM0EyMENDREQ1OUY2RUJCRUFERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vrjlCE8nRmLfYmydZELre5l8 1FGl3qoxeYF85Su/+V77BBxwfwErpVqXD/ldM6jA536F/RBnI4jWrJ+dprbS52eO UWgjLRCRad1TLYP6KdmIPJSCJfRXO4+Wn5S+bCEOFNvybLAAAtCj5ZClfjw0Q0g/ eiez8nkwDwO9sLaDvtfDFU4bQPLa43JY5/2SXbj4PvTB36g5xgZvXcteOGqxs8jy 0qqIff4DdTjjeK+SuhIp0w4yeBWUUgrVL5aA6Kv3SXUtLpGBwRlWmFf6k4yoRPIk 7JofozEF0VoyteoWjkI8c9lUdTGLIeAtQakeOX6aCzzq8ZZaeHTYE1YsKiQNAgMB AAGjggJjMIICXzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+OCPP9NQcLG9r OiDM3Vn2676t6TAfBgNVHSMEGDAWgBT0ZJiWpwogzYq7lkTeDAOZzsb7zjAOBgNV HQ8BAf8EBAMCAQYwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9kZXYudHcvcnBr aS9BdWd1c3QvMTMvRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAzOTlDRUM2 RkJDRS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzIvRjQ2NDk4OTZBNzBBMjBDRDhBQkI5NjQ0REUwQzAz OTlDRUM2RkJDRS5jZXIwgcwGCCsGAQUFBwELBIG/MIG8MCoGCCsGAQUFBzAFhh5y c3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS8xNC8wVgYIKwYBBQUHMAqGSnJzeW5j Oi8vcnBraS5jby9yZXBvL0FTOTQ1LzE0LzNFMzgyM0NGRjRENDFDMkM2RjZCM0Ey MENDREQ1OUY2RUJCRUFERTkubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAu cnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoF38YwDQYJKoZI hvcNAQELBQADggEBABvhbPIEY81TGwiNByTlfgboMY5YUL6evv3X3+Y45m74elAB aGCGBkOY6b1ulQQxN9Edj2dJzxgtpgriCIx+5aQ8PUTqxj60Ama2a4RHLQ7+JzuF /haiKyXBEVh8Cd3G0bTblUfwbvGteHSCveWEyVQ8eyCyUsPDDtFc4/MmvU59MLbk S4BmTOOAhaPycoKLYG9c1D1ofFx0qIc4cuMx7XlS1O7oWvflB/0j99fPq8sg/e+d tx7Zje5jcguUJagGIUyNHTEy/ulBUCYpIOwHeWYp7C8pkryp8o81taSEAX+Me+5h tg7rPez0lRqm+KeYp5M/MjFEWfO4fCtrH4wyLC0= -----END CERTIFICATE-----Generated at Sat Jun 1 01:40:04 2024 by rpki-client on console-fra.rpki-client.org