Certificate

$ rpki-client -vvf dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
File:                     DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer (raw, json)
Hash identifier:          WehV95K6NVF0EfHT5zH4JIYTrJhsFJYKtf+a/xJ12nc=
Subject key identifier:   DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       52E32F38C0F3402CA8FD72E577C93D12A97386EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 04:12:12 +0000
Certificate not after:    Thu 19 Jun 2025 04:17:12 +0000
Subordinate resources:    AS: 1012
                          IP: 23.138.232.0/24
                          IP: 23.139.40.0/23
                          IP: 199.189.156.0/22
                          IP: 2602:234::/32
                          IP: 2602:fb44::/36

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Oct 2024 18:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e3:2f:38:c0:f3:40:2c:a8:fd:72:e5:77:c9:3d:12:a9:73:86:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Jun 20 04:12:12 2024 GMT
            Not After : Jun 19 04:17:12 2025 GMT
        Subject: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:cb:6c:fa:56:55:5a:6b:c3:d9:3a:8e:6b:
                    49:b2:3c:63:1c:07:b8:33:8d:76:2c:80:aa:f6:3d:
                    d8:36:55:e9:1e:2b:c4:68:1d:85:b4:d4:48:4f:7d:
                    af:a1:45:cc:5d:66:f0:14:75:41:77:55:b1:e4:ad:
                    7d:a3:6d:03:4c:18:3f:24:6d:18:28:80:32:f3:c4:
                    e0:55:3a:b7:1b:e4:92:e2:50:86:14:e2:7d:94:57:
                    11:2c:ec:bb:3f:08:08:ae:90:23:8c:15:27:26:fd:
                    b3:2f:18:3e:c9:fb:79:bc:c7:20:a6:95:cd:4f:98:
                    15:57:0b:01:2b:80:f6:e4:33:82:77:c3:59:18:c5:
                    3d:50:0b:2d:3a:2b:8f:97:26:42:cb:88:d4:9c:93:
                    4b:3a:6f:f0:e0:36:1c:46:16:58:c3:07:fe:c6:90:
                    08:43:1d:39:e5:fb:ae:f1:21:fd:0e:04:bd:88:1b:
                    49:c1:e8:41:ab:f9:f8:f4:f9:48:06:6e:ff:16:28:
                    8b:12:ca:ee:75:4a:1a:74:ae:95:b5:ba:2b:16:5b:
                    f0:c9:01:d7:9d:fa:4c:86:18:08:4c:c6:9d:4b:31:
                    58:aa:b0:02:58:97:7b:a7:44:6b:a7:c9:18:cb:f3:
                    8c:f8:2a:7a:c1:8b:fa:5f:8b:3c:7d:c4:ac:c2:33:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24
                  23.139.40.0/23
                  199.189.156.0/22
                IPv6:
                  2602:234::/32
                  2602:fb44::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1012

    Signature Algorithm: sha256WithRSAEncryption
         99:74:ad:61:80:6e:a3:14:93:73:f1:ea:43:dc:42:c6:46:c2:
         f5:76:ed:e9:a4:8f:b2:4d:47:59:72:0c:b3:6c:62:46:b0:07:
         c8:ab:ee:51:cc:88:d9:6d:91:89:db:67:aa:0a:ea:63:81:64:
         e4:fb:92:d0:ca:5b:41:78:58:e0:63:0a:6d:06:c7:b3:e3:a8:
         17:8c:b2:d1:a1:72:34:cf:f4:ed:91:aa:a5:cd:fd:f4:8e:f7:
         ea:7b:0a:2b:d2:b2:f3:ca:1b:6f:ad:60:bb:c9:d0:61:3c:53:
         b7:d8:fd:2e:69:69:dd:2f:a4:1a:8c:45:18:65:5d:7c:ae:ce:
         cd:f9:8d:3e:d0:18:79:cc:34:61:4d:4b:7b:83:0e:7c:08:58:
         11:6a:c3:b0:4b:56:f3:10:30:c7:0a:ed:03:b1:27:25:21:58:
         8e:5f:3b:fb:a2:61:af:ba:8f:58:13:00:19:99:95:ff:90:86:
         8b:8a:29:30:a4:c3:03:b1:a8:73:8f:d3:9d:46:8b:61:7e:c2:
         b9:36:b0:5b:08:92:2f:30:09:f3:d2:f6:9f:28:62:b1:29:58:
         89:8b:18:a3:ed:76:e9:94:ac:11:b6:b5:35:21:25:ef:46:06:
         b3:92:98:19:93:32:aa:d4:7c:38:80:d7:9f:be:f1:b7:48:3a:
         90:ee:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 19:18:19 2024 by rpki-client on console-ams.rpki-client.org