Certificate

$ rpki-client -vvf dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
File:                     6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer (raw, json)
Hash identifier:          c1h6snhWNuIAgpgcIvsfzST0ZLALrh9RvMx/3nmD+NY=
Subject key identifier:   6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Certificate issuer:       /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial:       49C850350767DBC18DC2F5FE845BA6C35531BA02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 04:13:11 +0000
Certificate not after:    Thu 19 Jun 2025 04:18:11 +0000
Subordinate resources:    IP: 23.149.248.0/24
                          IP: 149.112.53.0/24
                          IP: 2602:fa90::/36

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Oct 2024 21:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:50:35:07:67:db:c1:8d:c2:f5:fe:84:5b:a6:c3:55:31:ba:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
        Validity
            Not Before: Jun 20 04:13:11 2024 GMT
            Not After : Jun 19 04:18:11 2025 GMT
        Subject: CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:f0:7f:40:af:c1:7a:10:21:c6:05:e1:c4:
                    44:eb:6d:f5:37:ac:f5:7b:44:1a:28:74:91:7c:a1:
                    08:1a:fb:41:5d:51:f1:6f:3e:df:e2:7e:19:66:11:
                    05:45:8e:51:b8:65:f9:85:af:d8:72:2c:47:4d:9c:
                    f1:f2:ab:89:f1:7a:22:61:c0:5f:6e:93:31:22:fa:
                    68:7d:0f:b7:f3:c4:ae:72:93:c6:9e:74:d3:c4:1c:
                    99:f0:0e:e5:e7:36:3a:bb:15:6f:b0:70:85:df:b0:
                    0c:48:79:30:8f:f9:71:70:8b:33:e2:bf:30:6d:db:
                    0e:62:b5:b3:64:61:99:fd:86:0f:72:cf:00:76:43:
                    84:50:ff:0f:d6:5d:cc:bd:ce:59:dc:2e:84:72:1c:
                    13:0d:b4:54:0f:9c:3d:40:f6:3f:9c:22:1a:43:83:
                    80:b8:d7:2e:91:d8:b4:ad:04:82:d8:60:4d:31:aa:
                    f3:70:3f:15:aa:b8:ad:7e:8e:b9:82:7d:0b:b4:a5:
                    ff:19:2c:2e:89:79:12:e3:4b:1d:ea:50:41:cd:6a:
                    ff:93:60:fa:ed:ae:24:20:ae:f1:e2:52:ac:b0:18:
                    e0:bf:6d:e5:27:0f:9a:11:76:ce:65:4c:cb:10:f8:
                    fa:40:65:9d:0f:29:8f:c9:28:00:c3:64:ee:94:66:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72
            X509v3 Authority Key Identifier:
                keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24
                  149.112.53.0/24
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:07:58:56:5a:6f:0f:8c:27:88:3b:dc:c0:1a:0b:a2:43:69:
         91:4f:c2:9c:a4:3f:da:6a:e7:f4:91:ce:62:47:bb:47:a2:f2:
         18:cc:76:56:fd:b0:e0:cc:21:35:dd:52:5f:e6:cc:3d:9d:7a:
         57:3f:4c:be:45:4c:80:cf:5b:f0:8c:f1:28:7f:2d:9a:d3:67:
         ad:ca:3a:ba:7c:6e:1a:86:bf:5e:ec:ee:15:95:47:ee:38:41:
         d3:d7:b9:44:f3:42:f2:89:18:5e:1e:50:b7:5a:d3:db:b6:cc:
         bb:2c:01:f2:8d:88:88:a9:f1:cb:fc:d0:d4:99:b5:72:b8:cd:
         de:69:93:15:8b:55:9a:0c:33:92:42:6a:0a:58:73:fb:43:96:
         29:cb:1c:3e:ac:2a:2c:65:71:10:26:93:e3:df:a7:cf:ba:4d:
         b4:ec:14:cd:c7:06:64:fa:88:78:57:1e:ea:50:e2:96:4f:af:
         82:f1:21:98:68:62:08:49:d6:43:c9:3a:11:72:fa:76:3d:a9:
         a5:34:8e:95:d4:43:0b:ee:8b:c3:18:bc:bc:a6:cd:11:73:cc:
         33:58:d8:78:a6:d1:25:cf:ae:08:ec:53:00:82:64:ee:9b:0c:
         93:e3:eb:29:5d:5e:a6:77:25:26:24:4a:1a:a6:98:66:80:2c:
         9a:ab:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 21:42:09 2024 by rpki-client on console-ams.rpki-client.org