![](/console.gif)
Certificate
$ rpki-client -vvf dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
File: 6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer (raw, json)
Hash identifier: c1h6snhWNuIAgpgcIvsfzST0ZLALrh9RvMx/3nmD+NY=
Subject key identifier: 6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Certificate issuer: /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial: 49C850350767DBC18DC2F5FE845BA6C35531BA02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Thu 20 Jun 2024 04:13:11 +0000
Certificate not after: Thu 19 Jun 2025 04:18:11 +0000
Subordinate resources: IP: 23.149.248.0/24
IP: 149.112.53.0/24
IP: 2602:fa90::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c8:50:35:07:67:db:c1:8d:c2:f5:fe:84:5b:a6:c3:55:31:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Validity
Not Before: Jun 20 04:13:11 2024 GMT
Not After : Jun 19 04:18:11 2025 GMT
Subject: CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:f0:7f:40:af:c1:7a:10:21:c6:05:e1:c4:
44:eb:6d:f5:37:ac:f5:7b:44:1a:28:74:91:7c:a1:
08:1a:fb:41:5d:51:f1:6f:3e:df:e2:7e:19:66:11:
05:45:8e:51:b8:65:f9:85:af:d8:72:2c:47:4d:9c:
f1:f2:ab:89:f1:7a:22:61:c0:5f:6e:93:31:22:fa:
68:7d:0f:b7:f3:c4:ae:72:93:c6:9e:74:d3:c4:1c:
99:f0:0e:e5:e7:36:3a:bb:15:6f:b0:70:85:df:b0:
0c:48:79:30:8f:f9:71:70:8b:33:e2:bf:30:6d:db:
0e:62:b5:b3:64:61:99:fd:86:0f:72:cf:00:76:43:
84:50:ff:0f:d6:5d:cc:bd:ce:59:dc:2e:84:72:1c:
13:0d:b4:54:0f:9c:3d:40:f6:3f:9c:22:1a:43:83:
80:b8:d7:2e:91:d8:b4:ad:04:82:d8:60:4d:31:aa:
f3:70:3f:15:aa:b8:ad:7e:8e:b9:82:7d:0b:b4:a5:
ff:19:2c:2e:89:79:12:e3:4b:1d:ea:50:41:cd:6a:
ff:93:60:fa:ed:ae:24:20:ae:f1:e2:52:ac:b0:18:
e0:bf:6d:e5:27:0f:9a:11:76:ce:65:4c:cb:10:f8:
fa:40:65:9d:0f:29:8f:c9:28:00:c3:64:ee:94:66:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72
X509v3 Authority Key Identifier:
keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.248.0/24
149.112.53.0/24
IPv6:
2602:fa90::/36
Signature Algorithm: sha256WithRSAEncryption
6a:07:58:56:5a:6f:0f:8c:27:88:3b:dc:c0:1a:0b:a2:43:69:
91:4f:c2:9c:a4:3f:da:6a:e7:f4:91:ce:62:47:bb:47:a2:f2:
18:cc:76:56:fd:b0:e0:cc:21:35:dd:52:5f:e6:cc:3d:9d:7a:
57:3f:4c:be:45:4c:80:cf:5b:f0:8c:f1:28:7f:2d:9a:d3:67:
ad:ca:3a:ba:7c:6e:1a:86:bf:5e:ec:ee:15:95:47:ee:38:41:
d3:d7:b9:44:f3:42:f2:89:18:5e:1e:50:b7:5a:d3:db:b6:cc:
bb:2c:01:f2:8d:88:88:a9:f1:cb:fc:d0:d4:99:b5:72:b8:cd:
de:69:93:15:8b:55:9a:0c:33:92:42:6a:0a:58:73:fb:43:96:
29:cb:1c:3e:ac:2a:2c:65:71:10:26:93:e3:df:a7:cf:ba:4d:
b4:ec:14:cd:c7:06:64:fa:88:78:57:1e:ea:50:e2:96:4f:af:
82:f1:21:98:68:62:08:49:d6:43:c9:3a:11:72:fa:76:3d:a9:
a5:34:8e:95:d4:43:0b:ee:8b:c3:18:bc:bc:a6:cd:11:73:cc:
33:58:d8:78:a6:d1:25:cf:ae:08:ec:53:00:82:64:ee:9b:0c:
93:e3:eb:29:5d:5e:a6:77:25:26:24:4a:1a:a6:98:66:80:2c:
9a:ab:96:cd
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUSchQNQdn28GNwvX+hFumw1UxugIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNkN2M0NTY2YWQ4OGZmYjc0NWNkN2M2MzQ1Y2YwNzY3
ZGIxNTEzMzYzNmNkNTQ1MDQwHhcNMjQwNjIwMDQxMzExWhcNMjUwNjE5MDQxODEx
WjAzMTEwLwYDVQQDEyg2QkIzODlCMURDQUJDOUZERDA3NENBQkRDRDM0MUUzMkU0
MTZGNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk3wf0CvwXoQ
IcYF4cRE6231N6z1e0QaKHSRfKEIGvtBXVHxbz7f4n4ZZhEFRY5RuGX5ha/YcixH
TZzx8quJ8XoiYcBfbpMxIvpofQ+388SucpPGnnTTxByZ8A7l5zY6uxVvsHCF37AM
SHkwj/lxcIsz4r8wbdsOYrWzZGGZ/YYPcs8AdkOEUP8P1l3Mvc5Z3C6EchwTDbRU
D5w9QPY/nCIaQ4OAuNcukdi0rQSC2GBNMarzcD8Vqritfo65gn0LtKX/GSwuiXkS
40sd6lBBzWr/k2D67a4kIK7x4lKssBjgv23lJw+aEXbOZUzLEPj6QGWdDymPySgA
w2TulGaNyQIDAQABo4IDLzCCAyswDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
a7OJsdyryf3QdMq9zTQeMuQW9HIwHwYDVR0jBBgwFoAUR8cg2AkYp2nCz9hCfDNO
rmSDZV0wDgYDVR0PAQH/BAQDAgEGMFoGA1UdHwRTMFEwT6BNoEuGSXJzeW5jOi8v
ZGV2LnR3L3Jwa2kvQXVndXN0LzgvNDdDNzIwRDgwOTE4QTc2OUMyQ0ZEODQyN0Mz
MzRFQUU2NDgzNjU1RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcw
AoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q4ZWExMDgxLWJjY2ItNDFkNS1i
MGZlLTFiOTcyNGNjZWQzZi9hM2Q3YzQ1NjZhZDg4ZmZiNzQ1Y2Q3YzYzNDVjZjA3
NjdkYjE1MTMzNjM2Y2Q1NDUwNC5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMFQG
CCsGAQUFBzAFhkhyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkv
OGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNy8wgYAGCCsGAQUFBzAK
hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4
ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNy82QkIzODlCMURDQUJDOUZERDA3NENB
QkRDRDM0MUUzMkU0MTZGNDcyLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRw
LXJwcy5hcmluLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwNQYIKwYBBQUHAQcBAf8EJjAkMBIEAgABMAwDBAAXlfgDBACVcDUw
DgQCAAIwCAMGBCYC+pAAMA0GCSqGSIb3DQEBCwUAA4IBAQBqB1hWWm8PjCeIO9zA
GguiQ2mRT8KcpD/aauf0kc5iR7tHovIYzHZW/bDgzCE13VJf5sw9nXpXP0y+RUyA
z1vwjPEofy2a02etyjq6fG4ahr9e7O4VlUfuOEHT17lE80LyiRheHlC3WtPbtsy7
LAHyjYiIqfHL/NDUmbVyuM3eaZMVi1WaDDOSQmoKWHP7Q5Ypyxw+rCosZXEQJpPj
36fPuk207BTNxwZk+oh4Vx7qUOKWT6+C8SGYaGIISdZDyToRcvp2PamlNI6V1EML
7ovDGLy8ps0Rc8wzWNh4ptElz64I7FMAgmTumwyT4+spXV6mdyUmJEoapphmgCya
q5bN
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:26 2025 by rpki-client