Certificate

$ rpki-client -vvf dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer
File:                     E08A23B82DF37E4701E573987559B077CD666175.cer (raw, json)
Hash identifier:          wZJVCfstVQGLH/F4syupOQsNKjRT5fH7Cao+kEMlpDI=
Subject key identifier:   E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75
Authority key identifier: F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
Certificate issuer:       /CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
Certificate serial:       3B493C5A59662FBB7DEBE269F070077A41E571BE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
Manifest:                 rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
caRepository:             rsync://dev.tw/rpki/AS945/14/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Fri 11 Oct 2024 07:53:47 +0000
Certificate not after:    Fri 10 Oct 2025 07:58:47 +0000
Subordinate resources:    IP: 2a05:dfc6::/32

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:49:3c:5a:59:66:2f:bb:7d:eb:e2:69:f0:70:07:7a:41:e5:71:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
        Validity
            Not Before: Oct 11 07:53:47 2024 GMT
            Not After : Oct 10 07:58:47 2025 GMT
        Subject: CN=E08A23B82DF37E4701E573987559B077CD666175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:bf:b5:28:ae:4d:d2:66:5b:3c:85:9e:98:
                    07:ea:4e:c4:8d:5e:92:57:2d:92:c7:66:2b:0a:56:
                    41:ff:35:5b:81:31:f6:13:2a:fb:8e:46:ba:93:4d:
                    45:50:89:a6:77:25:15:66:06:4f:05:20:a0:5e:fe:
                    4a:d0:02:28:48:f5:8a:68:ab:74:df:9d:e9:54:d4:
                    10:b3:5b:2a:e3:55:1d:84:e4:41:9c:2c:03:b7:fb:
                    1a:b0:dc:1c:cb:a7:14:ae:fa:73:9f:cf:4e:96:9e:
                    50:04:9b:4d:a3:96:3c:63:1f:a0:3a:02:ee:99:cb:
                    f9:04:3e:5c:8a:3f:c3:3f:e5:89:9e:e8:8c:44:9e:
                    07:7e:ce:5f:77:ea:14:99:cf:8a:20:f5:71:c5:91:
                    e6:84:a1:82:89:a1:44:69:43:d7:3e:8d:68:2d:bf:
                    4d:1a:6f:8f:24:a6:13:0e:ed:12:7e:42:91:1f:65:
                    16:18:97:24:57:35:0c:3e:2c:2a:7e:79:15:92:5b:
                    b5:94:30:a9:25:02:e1:5a:0d:3f:af:10:32:41:d1:
                    7e:86:5b:7a:c6:bc:f1:64:a3:8d:9e:84:d6:57:bf:
                    98:ae:1a:03:0e:6f:6f:ec:22:d9:0a:b5:29:ed:1e:
                    50:fa:a5:91:9a:8e:4d:90:64:20:33:35:98:d4:cd:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75
            X509v3 Authority Key Identifier:
                keyid:F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer

            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/AS945/14/
                RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:7c:6c:f6:dd:8b:e9:d1:c3:9f:6f:88:ba:54:9c:02:89:b2:
         db:eb:78:f1:5b:2c:a6:79:e6:62:98:c6:82:cf:b3:b5:aa:18:
         ef:68:cd:f2:f4:00:08:b6:2d:da:07:29:a4:5a:d5:7c:9c:e6:
         d3:0b:6f:68:b3:4a:96:24:b6:ea:cf:7b:2d:ff:e6:da:64:a0:
         b5:81:98:d6:f8:79:76:cf:35:4f:df:93:df:d8:a2:b6:de:e3:
         07:55:4a:f6:10:dd:d4:f0:87:98:2e:db:d9:dd:2d:5e:a9:26:
         64:66:9a:bd:54:d6:6b:43:e1:b0:d6:bc:f2:6f:95:a1:e3:65:
         1c:f0:6f:18:70:6f:cb:b3:d7:5b:71:be:d6:e9:92:42:77:3f:
         8a:52:cb:21:68:47:5f:ea:f3:c1:7d:af:aa:c3:4b:66:33:ee:
         e6:05:25:23:c4:51:fe:81:ad:b6:be:71:5e:25:8e:5b:b4:29:
         7b:b2:ca:41:f6:52:a1:70:7e:45:5b:6c:44:6b:bc:31:41:11:
         65:b7:71:bc:06:21:8d:72:c4:ae:19:bf:0a:fb:79:29:21:d0:
         8e:a9:e4:71:e8:cd:39:6b:ab:09:56:c9:90:2e:50:eb:bb:d6:
         cb:af:66:a8:bc:4d:22:79:db:77:76:66:b8:da:7c:5a:2d:27:
         5b:10:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 06:14:46 2024 by rpki-client on console-ams.rpki-client.org