Certificate

$ rpki-client -vvf dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
File:                     12962028A181E758B8990A6CA4F04A998A69311E.cer (raw, json)
Hash identifier:          3px0pecwZ3Dt83oKY3nkQ8TiEPTtUe742whbN11Hoz8=
Subject key identifier:   12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Authority key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Certificate issuer:       /CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Certificate serial:       515F9CAC0EAE873240A9D226CF639C093F56BCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
Manifest:                 rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
caRepository:             rsync://dev.tw/rpki/AS945/1/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Fri 11 Oct 2024 07:54:00 +0000
Certificate not after:    Fri 10 Oct 2025 07:59:00 +0000
Subordinate resources:    AS: 47449
                          AS: 50058
                          IP: 194.116.227.0/24
                          IP: 2001:67c:a80::/48
                          IP: 2001:67c:a84::/48
                          IP: 2001:67c:a88::/48
                          IP: 2001:67c:a8c::/48
                          IP: 2001:67c:a90::/48
                          IP: 2001:67c:a94::/48
                          IP: 2001:67c:a98::/48
                          IP: 2001:67c:a9c::/48
                          IP: 2001:67c:aa0::/48
                          IP: 2a12:dd40::/29

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 21:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5f:9c:ac:0e:ae:87:32:40:a9:d2:26:cf:63:9c:09:3f:56:bc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
        Validity
            Not Before: Oct 11 07:54:00 2024 GMT
            Not After : Oct 10 07:59:00 2025 GMT
        Subject: CN=12962028A181E758B8990A6CA4F04A998A69311E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8a:63:21:cf:3e:bd:0e:07:a9:64:f2:b6:a2:
                    5e:74:46:e8:72:6a:2e:6f:c2:d6:19:d5:9b:45:13:
                    1b:4d:29:08:89:e6:6b:df:38:74:ef:d4:da:0e:98:
                    a1:ad:49:12:6f:8d:fa:16:c5:21:42:35:fb:c4:6f:
                    ac:54:7f:ae:57:29:e1:a3:e5:9c:3b:be:a6:21:58:
                    a8:16:0c:2e:f4:07:a9:8c:36:b2:d3:b9:a9:be:4a:
                    b2:35:81:0e:59:77:13:b3:81:d3:80:8b:46:9a:31:
                    55:49:4b:f8:14:46:d4:99:b9:ab:8a:19:c8:c6:e7:
                    e5:f2:79:7b:9c:b0:42:9d:4c:70:42:da:52:cc:9c:
                    ab:8f:69:a7:2b:4e:e1:90:08:ed:93:d6:19:42:32:
                    a8:08:43:51:4c:fc:99:16:45:b4:3e:f9:ee:a5:d4:
                    01:5d:64:29:ae:4f:1c:0b:05:3f:0a:da:83:9b:f1:
                    94:54:b8:81:93:a0:1d:0c:e3:3e:62:ae:c7:e8:3b:
                    de:5d:38:73:55:a0:5b:a8:05:7a:0e:f9:7a:85:d4:
                    48:27:0c:57:5f:e8:fe:c4:19:13:c2:1b:ff:91:e8:
                    64:80:14:f7:46:da:d3:37:d8:76:0e:60:35:be:bc:
                    15:7c:c4:88:99:a1:bd:5c:73:64:72:55:e5:67:68:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
            X509v3 Authority Key Identifier:
                keyid:9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer

            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/AS945/1/
                RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24
                IPv6:
                  2001:67c:a80::/48
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47449
                  50058

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:4f:c4:2d:6c:48:5a:ee:c0:e5:23:73:0e:5e:fd:5f:36:
         ee:7e:a8:0a:ab:eb:83:bf:81:3a:dd:ca:2b:53:85:a4:18:8d:
         1a:8c:5e:db:9f:f7:f9:cf:41:25:2e:da:50:65:b9:a2:86:1d:
         05:43:18:c1:a0:eb:df:9a:a9:ed:a4:b5:d4:6d:d9:c4:fe:3a:
         5e:32:46:2b:a5:58:d6:df:91:01:9e:c6:3a:2c:a0:1b:b4:3d:
         29:59:b1:0b:28:34:f0:86:29:74:d2:1f:25:fc:38:44:47:97:
         c3:b8:ed:32:47:08:9c:e2:77:0a:1d:ac:aa:1b:ac:a0:31:1a:
         4b:af:66:01:de:43:27:14:f9:2f:d5:09:1a:06:b5:bf:ce:55:
         8b:5d:79:69:cf:5f:ac:7f:fb:f4:8a:ee:e3:40:ff:ed:75:6b:
         c7:2f:93:85:bb:fa:83:df:db:4a:90:87:df:af:55:e0:f8:4f:
         ed:57:e5:3f:40:a5:b9:07:9c:03:5d:bf:ee:d9:32:7a:61:ab:
         39:a4:a6:e6:0a:ff:98:6f:47:68:66:80:9e:af:1a:65:25:ec:
         9b:a9:1a:2b:b7:69:61:69:5d:4d:e3:e6:d9:1a:ca:08:ff:79:
         25:53:19:58:02:17:64:14:76:b4:d2:ca:e4:cd:f4:c4:83:a7:
         42:7d:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 06:14:46 2024 by rpki-client on console-ams.rpki-client.org