Certificate

$ rpki-client -vvf dev.tw/rpki/August/13/628FD1F0C18E89557B438A75BE55134F4E9D4478.cer
File:                     628FD1F0C18E89557B438A75BE55134F4E9D4478.cer (raw, json)
Hash identifier:          z98NaWqMwt+3S5gnOOlhRcoz8BDB3zcFDvM90Zcsi9Q=
Subject key identifier:   62:8F:D1:F0:C1:8E:89:55:7B:43:8A:75:BE:55:13:4F:4E:9D:44:78
Authority key identifier: F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
Certificate issuer:       /CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
Certificate serial:       2756E5FF8098D1576BCB071B319457D35C2ABF93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
Manifest:                 rsync://rpki.co/repo/AS208328/2/628FD1F0C18E89557B438A75BE55134F4E9D4478.mft
caRepository:             rsync://rpki.co/repo/AS208328/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 28 Nov 2023 21:56:57 +0000
Certificate not after:    Tue 26 Nov 2024 22:01:57 +0000
Subordinate resources:    IP: 2a05:dfc6:9100::/40

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 20:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:56:e5:ff:80:98:d1:57:6b:cb:07:1b:31:94:57:d3:5c:2a:bf:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
        Validity
            Not Before: Nov 28 21:56:57 2023 GMT
            Not After : Nov 26 22:01:57 2024 GMT
        Subject: CN=628FD1F0C18E89557B438A75BE55134F4E9D4478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:ed:73:2c:2e:50:74:df:a6:3e:50:ca:aa:
                    3f:e9:7f:8c:2c:0a:da:78:25:93:0f:f2:fe:8e:7b:
                    93:1b:00:de:c1:83:a9:18:a8:25:77:56:51:5a:2e:
                    86:7a:54:77:a1:50:01:1b:d2:2a:a9:44:e5:88:d0:
                    d0:29:35:bc:9b:e7:fb:62:75:f0:15:ed:76:11:6a:
                    9d:b9:09:48:50:67:49:14:44:0f:5f:33:99:51:2c:
                    ef:3a:ff:c3:d2:b4:6b:ea:bd:91:0a:1c:d0:cd:47:
                    16:05:85:3b:e9:af:89:6c:d9:5c:bb:cc:b1:41:fe:
                    e6:9d:da:c9:a5:7b:41:94:7f:64:87:80:3c:6d:a9:
                    2d:da:05:de:16:d2:aa:48:11:6f:55:92:a1:d6:5d:
                    cd:91:1d:ce:91:09:a9:78:35:d8:cf:37:4a:82:29:
                    ca:f7:1c:ea:cb:a4:ca:30:a1:cc:b1:53:b0:3a:0c:
                    cc:74:92:65:27:11:cb:4e:7c:45:26:a9:b0:f2:9e:
                    56:c0:ca:1b:49:68:00:fa:0e:75:6c:86:2c:08:68:
                    23:9a:15:38:d9:57:bf:6f:37:6e:e7:2d:5b:ec:fd:
                    41:4d:f1:fb:76:a5:16:7a:23:1e:4d:d3:74:2e:e4:
                    21:81:e0:eb:4f:cf:a2:48:25:3d:8f:e1:a2:cf:4d:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:8F:D1:F0:C1:8E:89:55:7B:43:8A:75:BE:55:13:4F:4E:9D:44:78
            X509v3 Authority Key Identifier:
                keyid:F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS208328/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS208328/2/628FD1F0C18E89557B438A75BE55134F4E9D4478.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:b7:e4:a6:2a:92:86:5e:cc:81:69:86:43:ff:36:98:37:
         7e:ec:ff:60:1d:4e:01:0d:17:5d:74:49:8a:21:29:79:b4:b2:
         c7:c1:80:d4:b6:e9:ec:9e:d2:67:58:32:ae:cc:1a:51:13:04:
         b3:ec:bf:17:75:5b:1e:68:71:f0:3e:81:e2:15:a5:c7:bb:36:
         d5:e8:53:9f:f3:15:80:a0:67:79:29:75:b2:f2:88:37:1a:d0:
         5a:a9:80:c6:23:49:c7:55:da:be:3f:a9:2e:f6:96:ba:51:20:
         27:d6:d5:0b:c3:d5:ea:40:9e:1e:14:30:e7:94:b4:44:fb:cc:
         3d:af:d8:8d:c6:6e:41:f9:7d:e9:ca:68:ce:97:97:89:4d:11:
         92:27:3b:60:b6:a9:a3:a7:7e:57:df:b6:73:4d:ff:f4:3b:ad:
         7e:0a:bd:ae:d7:64:1c:8f:1e:fb:c6:7a:59:fe:55:45:0f:ef:
         e8:4b:48:c5:2b:31:02:76:fe:c8:0e:22:42:49:ad:0b:7e:a2:
         c2:bd:2d:81:cd:8e:30:51:fc:dd:ca:7a:fd:78:f2:59:72:30:
         9b:d1:3b:d8:e7:f0:f3:87:a6:a6:ef:3c:63:3b:29:31:cb:66:
         ed:15:7d:68:67:45:01:f1:e4:2c:4d:d6:4a:32:3b:66:af:92:
         98:6a:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----