Certificate

$ rpki-client -vvf dev.tw/rpki/August/3/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.cer
File:                     B518B581E73CE1F6CD4FD84ADD509383346F7AC1.cer (raw, json)
Hash identifier:          BcNMxXGDVt7PUnnhCAa1jM7WerJ8xvyqvfb6SX09mHs=
Subject key identifier:   B5:18:B5:81:E7:3C:E1:F6:CD:4F:D8:4A:DD:50:93:83:34:6F:7A:C1
Authority key identifier: 1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2
Certificate issuer:       /CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
Certificate serial:       74B7918F60A232FD9640923100E6D01855A95A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
Manifest:                 rsync://rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.mft
caRepository:             rsync://rpki.co/repo/AS945/6/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sun 15 Oct 2023 19:20:10 +0000
Certificate not after:    Sun 13 Oct 2024 19:25:10 +0000
Subordinate resources:    AS: 57481

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl
                          rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b7:91:8f:60:a2:32:fd:96:40:92:31:00:e6:d0:18:55:a9:5a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
        Validity
            Not Before: Oct 15 19:20:10 2023 GMT
            Not After : Oct 13 19:25:10 2024 GMT
        Subject: CN=B518B581E73CE1F6CD4FD84ADD509383346F7AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:97:7b:1e:0e:31:99:71:30:f2:01:08:51:
                    45:82:99:af:8d:7e:c8:01:c7:b3:4a:40:f3:05:19:
                    a4:69:96:fd:46:21:4f:6e:45:05:e8:1f:b0:da:8e:
                    8e:21:18:15:44:0e:f9:bf:69:b2:91:85:46:56:fa:
                    44:56:fb:57:07:50:40:a0:8b:ad:a4:1f:22:e1:b5:
                    c7:48:e0:ff:2f:2c:32:b6:7c:cc:88:2e:fc:e7:b4:
                    75:3b:42:3a:fd:5c:3d:7c:02:3d:bc:ec:2a:2e:03:
                    fe:17:50:3a:37:aa:97:fb:50:63:fe:db:ee:68:30:
                    ba:a6:ad:70:07:3d:cc:08:bb:d3:92:f2:5f:ec:99:
                    11:22:27:f8:83:71:16:18:5f:b0:2e:a8:89:34:a3:
                    ea:36:cc:e4:6d:2b:05:dc:97:34:a6:fd:ff:e1:13:
                    5a:28:9d:1e:35:3d:64:a8:ce:95:96:6d:fd:f5:52:
                    a9:47:e1:23:d3:3a:7b:6d:06:3d:b6:09:58:f1:2c:
                    a9:9d:ef:7e:8a:da:4b:a1:7b:40:21:d8:29:d0:53:
                    aa:da:f8:b8:14:d7:1e:88:62:ea:da:c4:04:77:d4:
                    a8:42:a9:bf:26:09:ad:e4:7d:f4:3e:06:7a:98:87:
                    3a:3d:cd:e4:51:fe:1f:b0:16:ba:50:88:ae:7d:48:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:18:B5:81:E7:3C:E1:F6:CD:4F:D8:4A:DD:50:93:83:34:6F:7A:C1
            X509v3 Authority Key Identifier:
                keyid:1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/6/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/6/B518B581E73CE1F6CD4FD84ADD509383346F7AC1.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57481

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:4c:7e:53:6a:ef:b4:84:44:0e:18:00:46:14:3f:d6:3e:
         e0:c8:f0:dd:00:ea:69:9d:42:03:2c:18:04:f8:88:54:29:aa:
         93:1b:2e:9e:a9:26:e5:ed:a3:26:bc:d2:53:2f:17:18:3f:e6:
         e5:8f:9f:53:fe:fa:49:60:b4:7d:d4:41:95:00:c6:e0:c8:8e:
         0b:58:d4:f3:17:39:cf:51:40:6d:f5:68:5d:76:1c:68:95:b2:
         da:f8:84:f2:5c:ac:ca:27:1e:31:e5:44:ac:87:57:15:ce:4c:
         13:4c:e2:a4:cd:f1:63:b0:0f:32:e4:1c:57:6e:19:80:ba:8f:
         47:8d:70:6c:8c:c0:2b:7f:84:39:bb:04:79:67:38:08:9e:35:
         b1:54:10:92:7d:61:1b:96:57:28:36:dc:25:0f:e0:d1:43:dd:
         51:4d:a5:9a:0e:8d:6b:c3:2e:29:0e:81:74:ab:23:b6:a1:06:
         6d:a8:30:83:2b:11:68:7a:c2:08:46:93:b4:20:3c:59:c7:98:
         b9:5e:6a:1d:4c:4c:80:00:a2:3c:34:74:5a:47:2f:4c:95:a9:
         53:60:f8:02:17:e0:25:6a:da:85:af:a9:fd:56:55:97:b3:3d:
         6b:2a:73:59:f5:e0:27:10:df:6e:d9:9c:c4:9d:9f:42:a1:d5:
         14:58:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 23:52:42 2024 by rpki-client on console-ams.rpki-client.org