![](/console.gif)
Certificate
$ rpki-client -vvf dev.tw/rpki/August/8/44D2CED453B6999BF6145401EE88F58C7B5D2751.cer
File: 44D2CED453B6999BF6145401EE88F58C7B5D2751.cer (raw, json)
Hash identifier: 9yo8cCITJsbJMAAahWjW67rjzZsfuMgV71EQ2mPjRxQ=
Subject key identifier: 44:D2:CE:D4:53:B6:99:9B:F6:14:54:01:EE:88:F5:8C:7B:5D:27:51
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Certificate issuer: /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial: 35CC9A235E09E1D133CCF9556B656B9C2EEC00BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Manifest: rsync://dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.mft
caRepository: rsync://dev.tw/rpki/AS945/7/
Notify URL: https://dev.tw/rpki/notification.xml
Certificate not before: Mon 25 Nov 2024 20:22:46 +0000
Certificate not after: Mon 24 Nov 2025 20:27:46 +0000
Subordinate resources: IP: 23.149.248.0/24
IP: 149.112.53.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:cc:9a:23:5e:09:e1:d1:33:cc:f9:55:6b:65:6b:9c:2e:ec:00:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Validity
Not Before: Nov 25 20:22:46 2024 GMT
Not After : Nov 24 20:27:46 2025 GMT
Subject: CN=44D2CED453B6999BF6145401EE88F58C7B5D2751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:b6:b4:b6:7e:de:14:63:68:41:4e:3d:9d:
57:d0:4c:b4:40:ad:6d:81:9d:fd:2c:18:18:47:73:
16:70:d4:28:7f:23:c2:ad:10:9d:9b:77:86:eb:6b:
8c:8b:5b:59:9e:71:3d:48:7c:fe:b7:d6:bf:46:ce:
35:04:0e:0a:bb:e6:7c:86:44:dc:1c:08:84:7b:a3:
6c:00:2b:fc:51:5f:e5:5e:86:1b:9a:50:b9:d8:25:
89:2c:c2:7d:b5:a6:8e:ab:03:1f:e3:a1:1a:c1:35:
0f:3f:7b:a9:8c:ad:4a:39:91:e9:b6:34:c9:92:ad:
2a:46:ed:24:4a:70:93:51:5e:b8:aa:d9:2e:e4:6d:
38:0a:4b:1c:b5:b6:59:2d:42:04:e0:83:d8:50:5a:
0c:e7:d5:44:66:8c:09:f4:4c:6e:7a:7a:75:a8:26:
c3:b0:89:0c:8c:5b:0e:e1:82:8f:92:93:bf:ce:ff:
b0:7c:5d:c5:fe:34:7e:6b:3a:c6:17:24:ef:96:e8:
7c:91:67:83:a2:f3:dc:72:01:15:42:bf:7d:6f:d5:
c9:da:97:37:dd:e7:b1:5a:76:d8:81:12:a6:d6:e3:
5a:2a:45:57:5e:53:7c:7a:60:4e:5c:99:f4:d4:df:
92:fc:a4:ca:22:1b:dd:c1:c1:a8:63:b2:b6:a5:09:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
44:D2:CE:D4:53:B6:99:9B:F6:14:54:01:EE:88:F5:8C:7B:5D:27:51
X509v3 Authority Key Identifier:
keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject Information Access:
CA Repository - URI:rsync://dev.tw/rpki/AS945/7/
RPKI Manifest - URI:rsync://dev.tw/rpki/AS945/7/44D2CED453B6999BF6145401EE88F58C7B5D2751.mft
RPKI Notify - URI:https://dev.tw/rpki/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.248.0/24
149.112.53.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fe:cf:a0:a7:be:db:31:ed:37:e6:31:7f:72:7a:e5:8f:64:
3b:28:c1:21:a2:94:3d:59:b0:30:13:f8:7c:f5:4a:bc:9d:c3:
17:54:85:9c:0c:62:43:c7:cd:73:e6:71:5a:cd:54:87:3d:e5:
2d:78:75:f3:f0:df:fd:d2:11:41:db:91:45:64:33:d9:22:75:
59:cf:3f:6e:e8:76:27:d0:73:e0:36:aa:7a:cc:4c:8e:43:23:
5d:7b:87:33:3f:d1:55:a2:ad:a5:27:a7:b5:48:ac:20:aa:b7:
61:e6:c6:41:96:cf:88:bf:3b:e9:20:83:36:f1:16:1d:87:23:
be:8b:dd:05:0b:8d:f3:0d:1d:95:3f:b0:a8:65:4f:eb:dc:f2:
b8:30:32:9a:42:9d:02:6f:ac:05:90:3a:7d:bf:20:ea:70:c0:
ce:d7:5f:8b:8b:59:67:a3:f9:c8:a9:c7:93:91:5f:9d:21:66:
e5:bb:1b:9f:37:0f:56:9b:94:86:16:0b:d3:e5:9e:c4:3f:f0:
4d:49:ef:c1:bd:9f:63:d8:05:fa:a8:2c:f3:c9:93:5f:82:92:
ac:e3:d1:0e:c4:a7:3d:9b:54:04:0c:fa:c2:35:0e:62:ee:d7:
c7:04:36:9a:88:9c:c2:ce:f7:4c:9e:06:94:e2:4b:d4:c6:23:
2e:b3:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:34 2025 by rpki-client