$ rpki-client -vvf dev.tw/rpki/August/8/44D2CED453B6999BF6145401EE88F58C7B5D2751.cer File: 44D2CED453B6999BF6145401EE88F58C7B5D2751.cer (raw, json) Hash identifier: M3nGD6xFBJcD2rmnUZGsq8Dam/8ecCQHvnKg9FlW2fs= Subject key identifier: 44:D2:CE:D4:53:B6:99:9B:F6:14:54:01:EE:88:F5:8C:7B:5D:27:51 Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D Certificate issuer: /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504 Certificate serial: 391FE1A9BBA436A11A8EFEA8B503B6FB29734C55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer Manifest: rsync://dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.mft caRepository: rsync://dev.tw/rpki/AS945/7/ Notify URL: https://dev.tw/rpki/notification.xml Certificate not before: Fri 11 Oct 2024 07:54:08 +0000 Certificate not after: Fri 10 Oct 2025 07:59:08 +0000 Subordinate resources: IP: 23.149.248.0/24 IP: 149.112.53.0/24 IP: 2602:fa90::/36 Validation: OK Signature path: rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 09:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1f:e1:a9:bb:a4:36:a1:1a:8e:fe:a8:b5:03:b6:fb:29:73:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504 Validity Not Before: Oct 11 07:54:08 2024 GMT Not After : Oct 10 07:59:08 2025 GMT Subject: CN=44D2CED453B6999BF6145401EE88F58C7B5D2751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:76:b6:b4:b6:7e:de:14:63:68:41:4e:3d:9d: 57:d0:4c:b4:40:ad:6d:81:9d:fd:2c:18:18:47:73: 16:70:d4:28:7f:23:c2:ad:10:9d:9b:77:86:eb:6b: 8c:8b:5b:59:9e:71:3d:48:7c:fe:b7:d6:bf:46:ce: 35:04:0e:0a:bb:e6:7c:86:44:dc:1c:08:84:7b:a3: 6c:00:2b:fc:51:5f:e5:5e:86:1b:9a:50:b9:d8:25: 89:2c:c2:7d:b5:a6:8e:ab:03:1f:e3:a1:1a:c1:35: 0f:3f:7b:a9:8c:ad:4a:39:91:e9:b6:34:c9:92:ad: 2a:46:ed:24:4a:70:93:51:5e:b8:aa:d9:2e:e4:6d: 38:0a:4b:1c:b5:b6:59:2d:42:04:e0:83:d8:50:5a: 0c:e7:d5:44:66:8c:09:f4:4c:6e:7a:7a:75:a8:26: c3:b0:89:0c:8c:5b:0e:e1:82:8f:92:93:bf:ce:ff: b0:7c:5d:c5:fe:34:7e:6b:3a:c6:17:24:ef:96:e8: 7c:91:67:83:a2:f3:dc:72:01:15:42:bf:7d:6f:d5: c9:da:97:37:dd:e7:b1:5a:76:d8:81:12:a6:d6:e3: 5a:2a:45:57:5e:53:7c:7a:60:4e:5c:99:f4:d4:df: 92:fc:a4:ca:22:1b:dd:c1:c1:a8:63:b2:b6:a5:09: 88:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:D2:CE:D4:53:B6:99:9B:F6:14:54:01:EE:88:F5:8C:7B:5D:27:51 X509v3 Authority Key Identifier: keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer Subject Information Access: CA Repository - URI:rsync://dev.tw/rpki/AS945/7/ RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.mft RPKI Notify - URI:https://dev.tw/rpki/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.149.248.0/24 149.112.53.0/24 IPv6: 2602:fa90::/36 Signature Algorithm: sha256WithRSAEncryption 0a:98:db:c2:18:c4:7f:0e:d0:02:b6:c3:76:bf:93:e4:2f:6b: 12:fc:bf:13:d3:2f:16:07:90:4e:1c:2b:c8:74:a1:be:c3:d0: b8:7e:63:31:0f:fa:c5:6c:97:61:9b:e6:bc:0a:d8:d4:1b:e6: e5:7d:26:b0:b4:aa:b1:79:7c:2e:b9:de:cd:3c:45:36:34:8b: 1f:bf:d8:1f:db:67:fb:c3:2f:66:ba:9e:f4:df:cc:46:03:d7: 6f:97:ec:f5:32:6a:30:4b:87:c6:8f:6c:78:bf:89:d5:1e:48: 6c:25:62:86:e1:94:ba:a7:b3:d9:0b:ef:6c:4e:eb:5e:5c:41: ed:12:68:0e:4d:4a:f5:bf:9d:83:1b:7c:02:08:a7:b9:e7:67: 3e:a0:7d:a5:e1:f2:93:65:51:33:5b:14:c7:e9:0a:5c:e6:76: c5:59:53:7a:21:e5:78:1b:4e:13:d2:d3:36:d5:75:12:fe:fa: 9e:5f:95:21:3e:51:45:0a:8b:dc:f8:7c:42:9f:0b:e6:66:99: fa:0d:1f:c2:04:36:07:33:e3:08:e1:39:a6:37:15:c5:da:a8: 7e:32:74:6c:44:06:79:b5:80:cf:4e:e7:85:85:d6:0a:5e:3a: ab:71:2f:77:c6:3c:35:c5:08:76:e8:62:e1:b7:d9:7f:c2:03: b8:ff:1a:13 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUOR/hqbukNqEajv6otQO2+ylzTFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTNkN2M0NTY2YWQ4OGZmYjc0NWNkN2M2MzQ1Y2YwNzY3 ZGIxNTEzMzYzNmNkNTQ1MDQwHhcNMjQxMDExMDc1NDA4WhcNMjUxMDEwMDc1OTA4 WjAzMTEwLwYDVQQDEyg0NEQyQ0VENDUzQjY5OTlCRjYxNDU0MDFFRTg4RjU4QzdC NUQyNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xa2tLZ+3hRj aEFOPZ1X0Ey0QK1tgZ39LBgYR3MWcNQofyPCrRCdm3eG62uMi1tZnnE9SHz+t9a/ Rs41BA4Ku+Z8hkTcHAiEe6NsACv8UV/lXoYbmlC52CWJLMJ9taaOqwMf46EawTUP P3upjK1KOZHptjTJkq0qRu0kSnCTUV64qtku5G04CksctbZZLUIE4IPYUFoM59VE ZowJ9Exuenp1qCbDsIkMjFsO4YKPkpO/zv+wfF3F/jR+azrGFyTvluh8kWeDovPc cgEVQr99b9XJ2pc33eexWnbYgRKm1uNaKkVXXlN8emBOXJn01N+S/KTKIhvdwcGo Y7K2pQmIFQIDAQABo4ICzTCCAskwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU RNLO1FO2mZv2FFQB7oj1jHtdJ1EwHwYDVR0jBBgwFoAUR8cg2AkYp2nCz9hCfDNO rmSDZV0wDgYDVR0PAQH/BAQDAgEGMFoGA1UdHwRTMFEwT6BNoEuGSXJzeW5jOi8v ZGV2LnR3L3Jwa2kvQXVndXN0LzgvNDdDNzIwRDgwOTE4QTc2OUMyQ0ZEODQyN0Mz MzRFQUU2NDgzNjU1RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcw AoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q4ZWExMDgxLWJjY2ItNDFkNS1i MGZlLTFiOTcyNGNjZWQzZi9hM2Q3YzQ1NjZhZDg4ZmZiNzQ1Y2Q3YzYzNDVjZjA3 NjdkYjE1MTMzNjM2Y2Q1NDUwNC5jZXIwgcIGCCsGAQUFBwELBIG1MIGyMCgGCCsG AQUFBzAFhhxyc3luYzovL2Rldi50dy9ycGtpL0FTOTQ1LzcvMFQGCCsGAQUFBzAK hkhyc3luYzovL2Rldi50dy9ycGtpL0FTOTQ1LzcvNDREMkNFRDQ1M0I2OTk5QkY2 MTQ1NDAxRUU4OEY1OEM3QjVEMjc1MS5tZnQwMAYIKwYBBQUHMA2GJGh0dHBzOi8v ZGV2LnR3L3Jwa2kvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5X4AwQAlXA1MA4E AgACMAgDBgQmAvqQADANBgkqhkiG9w0BAQsFAAOCAQEACpjbwhjEfw7QArbDdr+T 5C9rEvy/E9MvFgeQThwryHShvsPQuH5jMQ/6xWyXYZvmvArY1Bvm5X0msLSqsXl8 LrnezTxFNjSLH7/YH9tn+8MvZrqe9N/MRgPXb5fs9TJqMEuHxo9seL+J1R5IbCVi huGUuqez2QvvbE7rXlxB7RJoDk1K9b+dgxt8AginuednPqB9peHyk2VRM1sUx+kK XOZ2xVlTeiHleBtOE9LTNtV1Ev76nl+VIT5RRQqL3Ph8Qp8L5maZ+g0fwgQ2BzPj COE5pjcVxdqofjJ0bEQGebWAz07nhYXWCl46q3Evd8Y8NcUIduhi4bfZf8IDuP8a Ew== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:03 2024 by rpki-client on console-fra.rpki-client.org