$ rpki-client -vvf dev.tw/rpki/August/14/AA420917C3851913FC93E34898A294B9CA2505F2.cer File: AA420917C3851913FC93E34898A294B9CA2505F2.cer (raw, json) Hash identifier: wqowdq08KAIlxbzJHnm4I5CJ3PewJCDIAY0RyfYL+iI= Subject key identifier: AA:42:09:17:C3:85:19:13:FC:93:E3:48:98:A2:94:B9:CA:25:05:F2 Authority key identifier: EE:96:26:58:B1:22:66:80:14:0B:4E:A8:6F:7D:68:CF:49:81:58:D9 Certificate issuer: /CN=EE962658B1226680140B4EA86F7D68CF498158D9 Certificate serial: 1AF7F89FEC237AA811FB5F27CDEC4837C22553B7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer Manifest: rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft caRepository: rsync://dev.tw/rpki/AS945/13/ Notify URL: https://dev.tw/rpki/notification.xml Certificate not before: Fri 11 Oct 2024 07:53:55 +0000 Certificate not after: Fri 10 Oct 2025 07:58:55 +0000 Subordinate resources: AS: 7719 Validation: OK Signature path: rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.crl rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 00:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f7:f8:9f:ec:23:7a:a8:11:fb:5f:27:cd:ec:48:37:c2:25:53:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE962658B1226680140B4EA86F7D68CF498158D9 Validity Not Before: Oct 11 07:53:55 2024 GMT Not After : Oct 10 07:58:55 2025 GMT Subject: CN=AA420917C3851913FC93E34898A294B9CA2505F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:e3:07:83:dc:49:db:72:49:8a:3b:d1:17: 27:98:2d:1c:ed:c6:1b:37:d4:fc:cc:ff:f6:66:ec: ce:53:84:ef:23:14:47:3c:f5:d1:a7:2c:65:2d:a8: 31:ad:97:1b:fe:57:5d:e6:52:fc:a8:68:f4:ef:b9: f1:ed:f0:4e:89:6d:28:69:f7:86:09:cf:3c:5e:63: b5:7f:84:1c:75:e2:97:fa:71:22:15:dc:2d:bd:16: 7d:a6:19:24:e2:ff:e3:23:b2:9a:06:86:e8:f6:aa: b9:8e:3c:17:7a:c9:95:c2:81:09:2d:11:0c:49:5b: d6:b3:e6:a9:72:17:1a:08:82:7c:ba:78:2a:d2:49: 4b:6a:b3:e7:1c:cc:e6:17:11:5f:9c:23:82:2b:34: 0c:f2:04:cb:9b:52:bd:b7:99:45:85:f8:b2:a0:33: f6:c5:93:e3:fe:a1:41:9a:0a:e3:fc:ed:c7:ab:b5: fe:9f:60:6c:12:ff:c0:ca:fe:a8:f6:91:48:27:40: 30:f9:73:88:bc:1d:81:8a:69:50:00:ea:1c:cc:8b: 06:b0:24:2d:eb:b1:e4:7a:4f:a9:4f:7b:d8:fd:fc: ec:b5:a2:90:78:ce:f7:33:c2:09:f7:54:1e:84:60: 42:03:58:d1:00:6b:89:58:32:bc:c3:41:96:42:fb: c1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:42:09:17:C3:85:19:13:FC:93:E3:48:98:A2:94:B9:CA:25:05:F2 X509v3 Authority Key Identifier: keyid:EE:96:26:58:B1:22:66:80:14:0B:4E:A8:6F:7D:68:CF:49:81:58:D9 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer Subject Information Access: CA Repository - URI:rsync://dev.tw/rpki/AS945/13/ RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft RPKI Notify - URI:https://dev.tw/rpki/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 7719 Signature Algorithm: sha256WithRSAEncryption 10:0c:08:97:7b:c7:f7:00:ea:d5:83:b2:ba:6a:28:82:57:01: 68:d1:8f:af:bf:9a:36:59:b3:72:cc:1c:4b:71:4b:67:ba:6e: 5c:e8:2e:17:a9:51:f2:41:ef:41:a3:8c:de:a0:c1:ab:12:47: 88:0c:49:fd:82:0c:6e:1f:b1:07:1e:4f:b8:82:b5:e8:c2:f0: 38:d6:e5:9f:d3:e5:a5:f6:51:4a:93:21:d9:a3:b5:f7:89:69: fb:37:aa:e9:e1:e6:92:a3:f8:e5:05:eb:8c:50:ea:e2:65:5a: 22:72:7a:e4:bf:6a:dc:17:16:1b:45:dd:7e:3b:9b:26:cd:b6: 16:20:2c:86:c6:2c:e4:28:3c:3e:8a:ce:ca:bd:4c:af:bf:2d: 4f:3b:87:2e:c0:2e:69:4b:0f:6a:ca:b4:a3:60:06:98:81:9e: 68:e0:bb:4c:2c:52:4d:af:82:ae:5e:34:a1:a6:50:71:1f:26: ea:a4:5c:23:8b:01:b5:46:26:e2:f9:a1:15:4e:41:d2:59:71: 7a:ac:59:5b:f1:16:ec:b6:c0:54:7b:7c:25:9f:7d:3c:37:36: b0:40:05:67:aa:ae:63:2e:02:72:08:64:53:c5:29:d7:ee:80: 33:80:10:d6:93:af:c7:a3:a3:16:a6:1f:38:94:05:25:67:09: 92:01:00:a3 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIUGvf4n+wjeqgR+18nzexIN8IlU7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU5NjI2NThCMTIyNjY4MDE0MEI0RUE4NkY3RDY4Q0Y0 OTgxNThEOTAeFw0yNDEwMTEwNzUzNTVaFw0yNTEwMTAwNzU4NTVaMDMxMTAvBgNV BAMTKEFBNDIwOTE3QzM4NTE5MTNGQzkzRTM0ODk4QTI5NEI5Q0EyNTA1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/TeMHg9xJ23JJijvRFyeYLRzt xhs31PzM//Zm7M5ThO8jFEc89dGnLGUtqDGtlxv+V13mUvyoaPTvufHt8E6JbShp 94YJzzxeY7V/hBx14pf6cSIV3C29Fn2mGSTi/+MjspoGhuj2qrmOPBd6yZXCgQkt EQxJW9az5qlyFxoIgny6eCrSSUtqs+cczOYXEV+cI4IrNAzyBMubUr23mUWF+LKg M/bFk+P+oUGaCuP87certf6fYGwS/8DK/qj2kUgnQDD5c4i8HYGKaVAA6hzMiwaw JC3rseR6T6lPe9j9/Oy1opB4zvczwgn3VB6EYEIDWNEAa4lYMrzDQZZC+8F9AgMB AAGjggJUMIICUDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqQgkXw4UZE/yT 40iYopS5yiUF8jAfBgNVHSMEGDAWgBTuliZYsSJmgBQLTqhvfWjPSYFY2TAOBgNV HQ8BAf8EBAMCAQYwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9kZXYudHcvcnBr aS9BdWd1c3QvMTQvRUU5NjI2NThCMTIyNjY4MDE0MEI0RUE4NkY3RDY4Q0Y0OTgx NThEOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzMvRUU5NjI2NThCMTIyNjY4MDE0MEI0RUE4NkY3RDY4 Q0Y0OTgxNThEOS5jZXIwgcQGCCsGAQUFBwELBIG3MIG0MCkGCCsGAQUFBzAFhh1y c3luYzovL2Rldi50dy9ycGtpL0FTOTQ1LzEzLzBVBggrBgEFBQcwCoZJcnN5bmM6 Ly9kZXYudHcvcnBraS9BUzk0NS8xMy9BQTQyMDkxN0MzODUxOTEzRkM5M0UzNDg5 OEEyOTRCOUNBMjUwNUYyLm1mdDAwBggrBgEFBQcwDYYkaHR0cHM6Ly9kZXYudHcv cnBraS9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICHicwDQYJKoZIhvcNAQELBQADggEBABAM CJd7x/cA6tWDsrpqKIJXAWjRj6+/mjZZs3LMHEtxS2e6blzoLhepUfJB70GjjN6g wasSR4gMSf2CDG4fsQceT7iCtejC8DjW5Z/T5aX2UUqTIdmjtfeJafs3qunh5pKj +OUF64xQ6uJlWiJyeuS/atwXFhtF3X47mybNthYgLIbGLOQoPD6Kzsq9TK+/LU87 hy7ALmlLD2rKtKNgBpiBnmjgu0wsUk2vgq5eNKGmUHEfJuqkXCOLAbVGJuL5oRVO QdJZcXqsWVvxFuy2wFR7fCWffTw3NrBABWeqrmMuAnIIZFPFKdfugDOAENaTr8ej oxamHziUBSVnCZIBAKM= -----END CERTIFICATE-----Generated at Wed Oct 23 06:14:46 2024 by rpki-client on console-ams.rpki-client.org