Certificate

$ rpki-client -vvf dev.tw/rpki/August/3/C4711895871FD73411F37BE5011FCFB70FB91744.cer
File:                     C4711895871FD73411F37BE5011FCFB70FB91744.cer (raw, json)
Hash identifier:          Nc6ojKgH9ECG0q2mlVEb8POdImLS5wZETE7L2hzsnno=
Subject key identifier:   C4:71:18:95:87:1F:D7:34:11:F3:7B:E5:01:1F:CF:B7:0F:B9:17:44
Authority key identifier: 1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2
Certificate issuer:       /CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
Certificate serial:       38D3F02B38C82E834D10588AFE82D18E6A8197F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/6/C4711895871FD73411F37BE5011FCFB70FB91744.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/6/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 04:12:43 +0000
Certificate not after:    Thu 19 Jun 2025 04:17:43 +0000
Subordinate resources:    AS: 57481

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d3:f0:2b:38:c8:2e:83:4d:10:58:8a:fe:82:d1:8e:6a:81:97:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2b4adcae7b2c47767db62d43838f8289183cf2
        Validity
            Not Before: Jun 20 04:12:43 2024 GMT
            Not After : Jun 19 04:17:43 2025 GMT
        Subject: CN=C4711895871FD73411F37BE5011FCFB70FB91744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:92:15:3e:42:82:92:3a:69:37:61:91:b5:
                    b2:05:d6:c3:51:90:a3:0d:db:6f:4b:61:2e:ea:b1:
                    01:a8:a1:b7:c1:19:47:b6:43:a2:b4:6e:63:0a:a6:
                    fb:ed:14:b9:f1:6a:b2:ac:fd:eb:25:1d:b6:b9:85:
                    6b:4c:c0:87:86:f7:aa:a9:87:71:27:b6:82:35:3b:
                    ea:ed:cf:45:91:ab:95:08:a3:e0:5d:bb:f7:8f:a8:
                    88:e0:0d:cc:73:28:1a:4f:4e:27:51:74:29:75:ca:
                    d0:a8:28:4e:f3:bf:7a:ec:fb:c8:7b:d6:97:1b:7c:
                    d9:3b:c7:bc:a5:97:cd:30:d8:cd:03:b7:dd:6b:4b:
                    51:b3:aa:48:d5:a7:eb:54:92:a7:82:7b:13:9d:69:
                    30:f2:e4:39:7b:c9:33:2e:54:b7:0e:80:67:8d:f5:
                    6b:39:52:bc:47:8a:a3:37:be:7b:2b:43:35:42:ef:
                    8b:34:fc:2a:c4:c7:50:6b:33:ca:b3:2f:83:8d:4a:
                    e2:52:c1:4a:ad:9b:3b:90:74:5f:a7:eb:1e:63:2d:
                    18:97:f7:f3:6b:91:60:0e:42:22:dd:6d:0d:ab:80:
                    8c:2b:ce:3f:4b:c7:f6:d8:ca:72:7a:52:5a:bf:cf:
                    0d:6d:e6:d5:8d:d7:e8:d5:20:bf:01:a8:c4:d8:92:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:71:18:95:87:1F:D7:34:11:F3:7B:E5:01:1F:CF:B7:0F:B9:17:44
            X509v3 Authority Key Identifier:
                keyid:1E:2B:4A:DC:AE:7B:2C:47:76:7D:B6:2D:43:83:8F:82:89:18:3C:F2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/3/1E2B4ADCAE7B2C47767DB62D43838F8289183CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitK3K57LEd2fbYtQ4OPgokYPPI.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/6/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/6/C4711895871FD73411F37BE5011FCFB70FB91744.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57481

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:91:54:53:a3:e7:6f:75:7c:1b:28:40:7c:fc:8b:11:e6:
         a4:cb:1d:3a:d0:00:63:55:7e:f4:d0:3f:95:51:fd:c8:01:a4:
         0b:56:86:e1:8b:db:a0:3f:d3:79:3d:ea:7a:78:7d:f4:fb:d4:
         ca:0d:f9:6c:71:e6:c7:18:6b:e3:47:da:3a:b5:db:c5:27:4e:
         1a:a6:ab:a3:da:84:62:c7:2f:02:43:7f:4f:3a:7f:e0:c0:a9:
         f4:3b:8e:a3:5b:8d:18:4d:bf:d2:70:bc:0a:79:16:7a:ce:61:
         18:86:40:33:27:62:c6:23:52:89:76:ff:a3:44:09:e9:f8:5c:
         43:e2:fa:45:e3:0d:cf:80:e8:3f:f7:aa:3b:92:8f:82:cd:43:
         10:2c:3a:3a:23:bf:28:07:0a:26:9b:3b:19:b4:de:1d:d6:91:
         6f:d5:50:02:4a:36:85:3b:75:de:81:a1:a6:9c:b6:4d:3c:72:
         32:53:f5:0d:2e:28:92:5d:13:96:17:98:e4:e4:7e:b6:58:15:
         70:c4:f0:c6:5d:db:02:62:76:cc:b0:03:36:7e:04:ce:c2:93:
         2c:92:2f:c2:22:0c:09:5e:da:8c:35:ee:87:bc:77:5f:19:25:
         32:61:b6:f9:19:fc:70:4b:dc:01:d4:2f:97:05:2f:74:5d:23:
         04:68:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----