$ rpki-client -vvf dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer File: 1A8C29884038907EDD0174FADC751F16456E1C56.cer (raw, json) Hash identifier: eMlfZhVvFRwkW6ogHAlQ92OrPKHxDTXWIBE39tSLsmE= Subject key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56 Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA Certificate issuer: /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54 Certificate serial: 4027885D87ED2F959EE60FF717F0E8557820C87F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer Manifest: rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft caRepository: rsync://dev.tw/rpki/AS945/2/ Notify URL: https://dev.tw/rpki/notification.xml Certificate not before: Fri 11 Oct 2024 07:53:51 +0000 Certificate not after: Fri 10 Oct 2025 07:58:51 +0000 Subordinate resources: AS: 54625 IP: 23.149.232.0/24 IP: 149.112.26.0/24 IP: 165.140.142.0/24 IP: 2001:503:ff44::/48 IP: 2001:504:130::/48 IP: 2602:815:7000::/44 IP: 2602:fc23::/36 Validation: OK Signature path: rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 13:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:27:88:5d:87:ed:2f:95:9e:e6:0f:f7:17:f0:e8:55:78:20:c8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54 Validity Not Before: Oct 11 07:53:51 2024 GMT Not After : Oct 10 07:58:51 2025 GMT Subject: CN=1A8C29884038907EDD0174FADC751F16456E1C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:38:3c:f1:26:c3:08:f6:af:26:cf:b9:c8: 3a:2b:08:59:f7:88:e9:28:b8:9b:0f:8e:99:0b:fe: 4f:e3:6f:83:0c:c0:49:4b:04:dd:79:da:25:be:e7: 8c:8e:29:31:ba:52:72:2a:9a:b6:0a:81:61:b3:c3: aa:7d:18:c2:d5:c8:db:0d:43:7a:a1:b5:f0:06:a2: a3:e0:21:00:b9:00:d0:69:47:a2:89:bf:68:6f:a7: 80:85:c5:dc:04:5d:b3:db:b0:5c:1c:b7:2e:96:60: 7a:95:02:1d:84:d2:a8:f1:66:ea:cf:da:36:5d:75: f7:3b:4b:47:35:71:a7:3d:d8:4b:6f:a7:b0:c1:40: f3:b0:8d:32:cb:53:d6:8a:ed:0d:36:69:5b:67:46: 89:d1:0b:44:b0:4a:87:2f:9b:94:0f:4c:11:1c:8b: cd:7b:e4:00:04:96:5d:f1:b6:73:48:3e:38:ba:d3: 19:27:22:3c:ee:19:0c:d4:bc:b5:0b:d5:8b:0a:32: 61:2b:1e:4b:69:70:ce:ee:bc:dc:83:5c:14:e0:f4: 1f:bb:5e:98:61:e8:b1:4c:4d:e4:fa:da:19:bd:92: 11:9e:d2:9c:44:a0:61:c3:a5:87:a0:b7:73:03:49: 7d:be:47:83:f0:29:51:a6:14:ef:fe:b3:b0:18:39: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56 X509v3 Authority Key Identifier: keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer Subject Information Access: CA Repository - URI:rsync://dev.tw/rpki/AS945/2/ RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft RPKI Notify - URI:https://dev.tw/rpki/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.149.232.0/24 149.112.26.0/24 165.140.142.0/24 IPv6: 2001:503:ff44::/48 2001:504:130::/48 2602:815:7000::/44 2602:fc23::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54625 Signature Algorithm: sha256WithRSAEncryption 5a:bc:7b:96:8a:96:cb:d5:e7:cc:e7:3b:f3:f7:47:25:b6:c9: ce:e1:04:89:89:7d:00:e9:8d:36:82:2c:6f:bc:c1:76:0c:78: e7:85:c7:a7:46:87:d6:34:7f:55:66:d9:03:2b:ba:3f:2c:b5: bc:4f:cb:83:78:12:7b:4b:70:a5:24:aa:40:91:e9:d6:1f:00: 12:90:12:74:53:3d:cf:d9:4b:e6:cf:67:11:ca:93:92:ef:fe: 7e:21:1b:9e:9c:79:ad:33:19:d3:6d:b6:d9:a4:72:63:2a:1a: 01:48:4d:5f:7b:13:e8:f6:5b:7c:f9:b3:4a:59:55:d7:17:55: c1:e5:03:6e:b0:40:37:7e:2c:a0:df:6a:06:ba:4d:8f:ad:f1: 1d:e5:69:34:59:6b:6f:2e:e7:80:fc:38:93:7e:24:cc:9a:de: 39:02:46:df:25:37:69:e1:fd:68:45:e5:d2:99:81:81:e6:77: 92:ed:23:71:f9:1c:fd:8c:09:e3:6e:f6:16:3c:a9:4c:06:e5: 53:cc:0b:d2:69:71:fa:df:09:68:a0:dc:23:40:df:72:0a:99: 07:96:8e:dc:32:c6:a7:88:48:2a:88:9e:60:6e:82:84:c2:13: 20:ed:e0:36:aa:d8:69:0f:98:03:59:36:35:f8:a5:04:05:10: de:67:53:7e -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgIUQCeIXYftL5We5g/3F/DoVXggyH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGY4NmVjMTUwNWM1MDY2YjUyNWUwOTEw NWM1OTQyNmQxN2FkNWJkNTQwHhcNMjQxMDExMDc1MzUxWhcNMjUxMDEwMDc1ODUx WjAzMTEwLwYDVQQDEygxQThDMjk4ODQwMzg5MDdFREQwMTc0RkFEQzc1MUYxNjQ1 NkUxQzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI84PPEmwwj2 rybPucg6KwhZ94jpKLibD46ZC/5P42+DDMBJSwTdedolvueMjikxulJyKpq2CoFh s8OqfRjC1cjbDUN6obXwBqKj4CEAuQDQaUeiib9ob6eAhcXcBF2z27BcHLculmB6 lQIdhNKo8Wbqz9o2XXX3O0tHNXGnPdhLb6ewwUDzsI0yy1PWiu0NNmlbZ0aJ0QtE sEqHL5uUD0wRHIvNe+QABJZd8bZzSD44utMZJyI87hkM1Ly1C9WLCjJhKx5LaXDO 7rzcg1wU4PQfu16YYeixTE3k+toZvZIRntKcRKBhw6WHoLdzA0l9vkeD8ClRphTv /rOwGDlIOQIDAQABo4IDCjCCAwYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU GowpiEA4kH7dAXT63HUfFkVuHFYwHwYDVR0jBBgwFoAUKyH3x2xZIXYfqO9bEhcs jktFttowDgYDVR0PAQH/BAQDAgEGMFoGA1UdHwRTMFEwT6BNoEuGSXJzeW5jOi8v ZGV2LnR3L3Jwa2kvQXVndXN0LzcvMkIyMUY3Qzc2QzU5MjE3NjFGQThFRjVCMTIx NzJDOEU0QjQ1QjZEQS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcw AoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05 ZTQ1LWIwNGZkZDY2M2YzNy82NTA2YTY2ZWQwZjg2ZWMxNTA1YzUwNjZiNTI1ZTA5 MTA1YzU5NDI2ZDE3YWQ1YmQ1NC5jZXIwgcIGCCsGAQUFBwELBIG1MIGyMCgGCCsG AQUFBzAFhhxyc3luYzovL2Rldi50dy9ycGtpL0FTOTQ1LzIvMFQGCCsGAQUFBzAK hkhyc3luYzovL2Rldi50dy9ycGtpL0FTOTQ1LzIvMUE4QzI5ODg0MDM4OTA3RURE MDE3NEZBREM3NTFGMTY0NTZFMUM1Ni5tZnQwMAYIKwYBBQUHMA2GJGh0dHBzOi8v ZGV2LnR3L3Jwa2kvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAYBAIAATASAwQAF5XoAwQAlXAaAwQA pYyOMCkEAgACMCMDBwAgAQUD/0QDBwAgAQUEATADBwQmAggVcAADBgQmAvwjADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA1WEwDQYJKoZIhvcNAQELBQADggEBAFq8 e5aKlsvV58znO/P3RyW2yc7hBImJfQDpjTaCLG+8wXYMeOeFx6dGh9Y0f1Vm2QMr uj8stbxPy4N4EntLcKUkqkCR6dYfABKQEnRTPc/ZS+bPZxHKk5Lv/n4hG56cea0z GdNtttmkcmMqGgFITV97E+j2W3z5s0pZVdcXVcHlA26wQDd+LKDfaga6TY+t8R3l aTRZa28u54D8OJN+JMya3jkCRt8lN2nh/WhF5dKZgYHmd5LtI3H5HP2MCeNu9hY8 qUwG5VPMC9JpcfrfCWig3CNA33IKmQeWjtwyxqeISCqInmBugoTCEyDt4Daq2GkP mANZNjX4pQQFEN5nU34= -----END CERTIFICATE-----Generated at Tue Oct 22 13:17:33 2024 by rpki-client on console-fra.rpki-client.org