Certificate

$ rpki-client -vvf dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
File:                     12962028A181E758B8990A6CA4F04A998A69311E.cer (raw, json)
Hash identifier:          rrY5fNIuh4D0GblaDPE21MtpqCBEhFyYeaGHYm5j+T4=
Subject key identifier:   12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Authority key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Certificate issuer:       /CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Certificate serial:       6AFD647B690E1ED02A3BC34B8F10C03D92A153F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Manifest:                 rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
caRepository:             rsync://dev.tw/rpki/AS945/1/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Mon 25 Nov 2024 20:22:41 +0000
Certificate not after:    Mon 24 Nov 2025 20:27:41 +0000
Subordinate resources:    IP: 194.116.227.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:64:7b:69:0e:1e:d0:2a:3b:c3:4b:8f:10:c0:3d:92:a1:53:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
        Validity
            Not Before: Nov 25 20:22:41 2024 GMT
            Not After : Nov 24 20:27:41 2025 GMT
        Subject: CN=12962028A181E758B8990A6CA4F04A998A69311E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8a:63:21:cf:3e:bd:0e:07:a9:64:f2:b6:a2:
                    5e:74:46:e8:72:6a:2e:6f:c2:d6:19:d5:9b:45:13:
                    1b:4d:29:08:89:e6:6b:df:38:74:ef:d4:da:0e:98:
                    a1:ad:49:12:6f:8d:fa:16:c5:21:42:35:fb:c4:6f:
                    ac:54:7f:ae:57:29:e1:a3:e5:9c:3b:be:a6:21:58:
                    a8:16:0c:2e:f4:07:a9:8c:36:b2:d3:b9:a9:be:4a:
                    b2:35:81:0e:59:77:13:b3:81:d3:80:8b:46:9a:31:
                    55:49:4b:f8:14:46:d4:99:b9:ab:8a:19:c8:c6:e7:
                    e5:f2:79:7b:9c:b0:42:9d:4c:70:42:da:52:cc:9c:
                    ab:8f:69:a7:2b:4e:e1:90:08:ed:93:d6:19:42:32:
                    a8:08:43:51:4c:fc:99:16:45:b4:3e:f9:ee:a5:d4:
                    01:5d:64:29:ae:4f:1c:0b:05:3f:0a:da:83:9b:f1:
                    94:54:b8:81:93:a0:1d:0c:e3:3e:62:ae:c7:e8:3b:
                    de:5d:38:73:55:a0:5b:a8:05:7a:0e:f9:7a:85:d4:
                    48:27:0c:57:5f:e8:fe:c4:19:13:c2:1b:ff:91:e8:
                    64:80:14:f7:46:da:d3:37:d8:76:0e:60:35:be:bc:
                    15:7c:c4:88:99:a1:bd:5c:73:64:72:55:e5:67:68:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
            X509v3 Authority Key Identifier:
                keyid:9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer

            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/AS945/1/
                RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:30:c9:6b:e4:c6:ad:65:d8:d1:c2:76:ce:cf:4c:f4:31:0e:
         7d:d3:8c:b2:08:08:72:10:f3:c9:0e:42:5f:02:90:0a:79:28:
         57:b7:1a:82:fb:27:35:a1:84:92:ad:ae:66:49:8f:63:f0:86:
         b4:1e:16:38:50:c3:cf:a6:79:c5:45:59:a4:a9:18:f8:48:09:
         a8:f6:ad:5e:49:3b:a0:78:f7:6a:3c:75:eb:0b:9b:a7:0a:5e:
         ae:31:60:64:2c:72:2a:d2:57:e3:63:ff:54:3d:69:33:72:95:
         ee:24:70:ee:f6:db:4d:bd:d5:46:1b:e2:cc:07:09:ab:3d:16:
         85:e8:93:8a:f9:66:bc:97:ca:48:10:57:02:03:b1:58:d8:c4:
         e9:73:48:1e:7d:d4:96:b3:49:7c:fb:3c:db:97:08:c5:50:b5:
         44:7c:8e:00:49:a0:aa:a0:35:15:5e:69:c1:be:cf:53:13:db:
         4a:de:ba:6c:df:31:a1:f3:f2:88:85:c9:94:c3:d9:fd:e9:3b:
         5d:17:df:ef:81:48:7e:70:e4:0b:3d:35:4a:50:c7:a5:5a:5e:
         24:82:55:94:35:52:8a:1a:20:cd:ab:f3:b4:25:d0:ab:1f:a7:
         19:26:41:0f:a3:df:3b:bf:66:8c:66:7e:ce:11:40:b0:f1:f2:
         b9:02:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:58:58 2025 by rpki-client