Certificate

$ rpki-client -vvf dev.tw/rpki/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer
File:                     381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer (raw, json)
Hash identifier:          8U7N5E/RFGbjv0CExdOFHw2XDaQBm5FH3Nx6IBnL60Y=
Subject key identifier:   38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
Authority key identifier: 47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81
Certificate issuer:       /CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
Certificate serial:       72A25C4A851F0E158CAF647C69C2A827D7AEB6EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
Manifest:                 rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.mft
caRepository:             rsync://rpki.co/repo/AS945/8/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sun 15 Oct 2023 19:20:41 +0000
Certificate not after:    Sun 13 Oct 2024 19:25:41 +0000
Subordinate resources:    IP: 23.149.152.0/24
                          IP: 2606:b0c0::/32

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 05:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a2:5c:4a:85:1f:0e:15:8c:af:64:7c:69:c2:a8:27:d7:ae:b6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
        Validity
            Not Before: Oct 15 19:20:41 2023 GMT
            Not After : Oct 13 19:25:41 2024 GMT
        Subject: CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:47:8f:dd:9c:9e:96:a3:6c:fa:71:df:5b:
                    54:d0:95:4f:ca:0c:81:22:ff:d8:10:12:c9:92:fc:
                    0d:8a:c1:19:7c:56:80:7e:b8:bb:e4:cb:25:df:bf:
                    4f:7f:3a:79:73:57:32:64:3f:a2:99:06:2c:08:1e:
                    7f:26:4e:66:f8:ed:82:dc:49:43:3a:d7:d9:93:d0:
                    5a:26:83:4d:35:21:a9:e8:09:cb:dc:2c:cf:19:fb:
                    03:1c:aa:a4:3e:8a:e3:48:b7:f1:40:d0:26:4f:8e:
                    2e:2d:c2:8b:1f:81:f6:58:4e:78:a6:81:26:22:98:
                    b0:6c:3b:7d:7e:a6:6e:ac:e6:47:19:03:e7:3e:9c:
                    58:aa:8c:f8:88:c1:0f:a3:29:26:45:a0:f1:2d:30:
                    22:b2:b2:f7:3b:52:09:ec:42:c7:40:be:90:da:af:
                    1b:63:9d:f0:3d:16:6a:27:a5:5b:0e:4e:3b:30:23:
                    20:6b:16:7e:31:54:73:ff:d5:cc:67:80:da:3b:3d:
                    da:02:da:bf:6e:03:32:9c:af:6d:a8:f9:2d:12:5d:
                    d4:89:27:0f:13:f1:87:77:12:c9:64:5d:a5:2f:1b:
                    db:9b:71:b1:b6:26:c4:94:59:7c:3c:8d:a5:62:9c:
                    83:66:01:9e:8d:e9:4f:66:0d:96:ee:35:1a:bb:69:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
            X509v3 Authority Key Identifier:
                keyid:47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/8/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:06:a9:2f:11:3e:dd:89:3a:93:77:51:a2:f2:83:51:b5:48:
         c7:1f:15:a2:77:28:7b:8d:7a:23:80:f0:73:33:a8:0d:b9:fb:
         f5:94:5b:68:d6:a8:65:b9:28:6f:28:18:c1:a5:d3:2a:92:93:
         06:9d:d9:42:33:89:e6:64:c1:89:69:a4:08:7a:91:af:42:e7:
         d1:c4:75:1d:62:a6:ff:98:8e:8f:f6:a7:66:76:74:2a:f8:35:
         1d:00:9f:0f:1d:2c:d1:3f:c9:3f:56:0e:ca:a8:9f:93:87:e1:
         27:6b:8e:65:76:d5:28:53:29:25:31:9c:1e:08:8e:bb:90:9b:
         cb:c1:12:11:cc:7a:7c:50:55:4b:22:a0:12:b8:c9:32:bc:01:
         de:ad:77:49:56:ad:06:8b:f8:ec:00:d0:03:ec:67:92:b7:ce:
         a9:de:f9:c7:e2:b1:45:bf:81:83:6e:e5:71:2e:08:31:46:df:
         04:3a:85:ea:e7:8f:fb:d2:03:7f:55:eb:6e:76:a5:ac:65:19:
         91:a4:ed:81:54:ab:65:fe:2c:62:14:7f:de:d2:e4:5e:32:4a:
         c9:e0:cf:b2:b7:f0:a3:9b:70:5a:8d:17:7f:f1:3b:16:12:6d:
         e8:e9:07:4b:bb:b4:cf:88:9d:93:30:31:e1:54:e9:62:be:8c:
         ce:8e:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:10:01 2024 by rpki-client on console-ams.rpki-client.org