Certificate

$ rpki-client -vvf dev.tw/rpki/August/14/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer
File:                     F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer (raw, json)
Hash identifier:          oTExq0/kelD7P9mFoMjC1rJJIjG5jSP0GRG21yL/7ZQ=
Subject key identifier:   F4:B0:05:E4:85:2A:12:46:02:E9:F6:D0:51:2C:95:FD:5B:D8:3C:1E
Authority key identifier: EE:96:26:58:B1:22:66:80:14:0B:4E:A8:6F:7D:68:CF:49:81:58:D9
Certificate issuer:       /CN=EE962658B1226680140B4EA86F7D68CF498158D9
Certificate serial:       175C964E6135F46869E870E40B121B1AEF1E6FBF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer
Manifest:                 rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft
caRepository:             rsync://rpki.co/repo/AS945/13/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sun 15 Oct 2023 19:20:13 +0000
Certificate not after:    Sun 13 Oct 2024 19:25:13 +0000
Subordinate resources:    AS: 7719

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.crl
                          rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 03:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5c:96:4e:61:35:f4:68:69:e8:70:e4:0b:12:1b:1a:ef:1e:6f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE962658B1226680140B4EA86F7D68CF498158D9
        Validity
            Not Before: Oct 15 19:20:13 2023 GMT
            Not After : Oct 13 19:25:13 2024 GMT
        Subject: CN=F4B005E4852A124602E9F6D0512C95FD5BD83C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:3c:c0:be:c9:2d:7f:6e:35:8f:ad:3d:a2:
                    a9:d0:eb:f7:c0:f3:e7:24:fb:cd:7d:00:6b:8e:30:
                    71:47:69:ba:98:9f:cf:61:2d:cd:93:8d:d3:5f:e8:
                    93:58:37:a8:3f:6a:82:94:50:ce:0a:e2:bf:47:a2:
                    be:17:c7:35:1e:ed:80:bf:a4:76:04:db:13:ea:05:
                    37:e9:a0:ee:72:f7:a7:89:eb:2c:2b:ca:22:a9:c7:
                    2c:82:88:35:b4:47:f6:2f:bc:36:7c:cf:7b:fb:4b:
                    89:a8:f2:92:8a:c7:2a:77:3a:ca:bc:b7:36:71:d8:
                    41:ac:b5:2f:47:5a:1b:82:dc:2c:98:8e:83:32:fc:
                    63:b5:da:49:a9:f2:81:79:90:2d:a9:51:cd:d5:8f:
                    7e:fb:80:28:cd:24:6c:7b:3e:35:2a:55:d9:c0:8f:
                    cf:9e:39:41:fc:60:74:5d:98:c9:0b:81:59:db:7a:
                    de:02:b6:92:7b:78:b9:34:2d:3c:1a:26:a8:2a:43:
                    ff:a8:55:b0:a5:90:66:d8:4d:cb:de:3b:eb:0e:d1:
                    9a:9a:be:cd:d6:65:d5:2f:f1:7b:71:18:75:07:98:
                    06:d2:e2:04:de:60:16:a2:4b:00:f3:d0:0e:e6:ab:
                    3e:7a:0e:67:e1:fb:2b:d8:39:83:27:c5:af:49:82:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:B0:05:E4:85:2A:12:46:02:E9:F6:D0:51:2C:95:FD:5B:D8:3C:1E
            X509v3 Authority Key Identifier:
                keyid:EE:96:26:58:B1:22:66:80:14:0B:4E:A8:6F:7D:68:CF:49:81:58:D9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/13/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719

    Signature Algorithm: sha256WithRSAEncryption
         50:db:f7:48:ff:63:22:1a:22:1b:3d:41:3b:be:a9:2f:05:9d:
         3f:e9:99:4c:95:25:c6:f6:b9:0a:7a:80:ff:a4:af:03:35:18:
         87:e7:2d:c8:b1:4b:46:a5:84:b9:97:40:b4:c9:f0:52:fd:b1:
         42:88:44:47:5c:14:5b:31:55:a6:5b:f9:a5:06:68:01:9c:4e:
         58:0a:dd:1c:02:f0:2c:26:14:37:ee:38:69:6f:a9:eb:c8:d5:
         49:1d:cd:45:d9:c9:b0:37:e0:ed:f6:7d:3d:9c:5a:af:df:94:
         23:64:a9:3f:a1:da:a6:39:07:3f:69:82:c0:7d:0c:03:6b:a7:
         22:f0:f4:a3:96:0f:a0:60:72:dd:42:c2:d2:32:19:82:8c:d3:
         9b:e4:f4:0c:53:20:8a:f5:68:ea:50:b1:18:d1:78:77:a8:07:
         36:33:df:33:ed:25:ee:56:51:eb:1d:12:59:3c:db:4d:db:3a:
         d9:47:2c:b7:2a:85:7c:c3:e7:6a:c9:ab:e7:43:ec:6a:6b:5c:
         a5:75:d8:22:5f:5a:69:7d:a6:7d:ae:ef:b8:34:d7:06:03:38:
         bf:a6:b0:98:91:34:e7:6f:9d:0d:65:e6:93:e0:04:ab:2d:97:
         d7:31:fd:49:25:40:29:33:9f:8a:74:e4:0d:be:78:3c:c8:d9:
         17:61:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:52:26 2024 by rpki-client on console-fra.rpki-client.org