![](/console.gif)
Certificate
$ rpki-client -vvf dev.tw/rpki/August/8/8489863A432D851EFEA043950365EE23436FCF95.cer
File: 8489863A432D851EFEA043950365EE23436FCF95.cer (raw, json)
Hash identifier: 200BwKRfnOm7/dnTW5azrgqhoZwgQPK8zPj0uM4XZ7c=
Subject key identifier: 84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Certificate issuer: /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial: 62142857038E14AE46573ABE67A00B1D3DA1C74B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Manifest: rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.mft
caRepository: rsync://rpki.co/repo/AS945/7/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sun 15 Oct 2023 19:20:20 +0000
Certificate not after: Sun 13 Oct 2024 19:25:20 +0000
Subordinate resources: IP: 23.149.248.0/24
IP: 149.112.53.0/24
IP: 2602:fa90::/36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:14:28:57:03:8e:14:ae:46:57:3a:be:67:a0:0b:1d:3d:a1:c7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Validity
Not Before: Oct 15 19:20:20 2023 GMT
Not After : Oct 13 19:25:20 2024 GMT
Subject: CN=8489863A432D851EFEA043950365EE23436FCF95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:ab:5f:72:e2:81:d7:7d:87:16:bf:aa:a8:
87:14:58:ee:8f:86:68:62:34:7e:3c:88:31:e2:3b:
b4:3c:44:30:c4:59:5f:21:c3:87:88:62:44:ad:21:
2d:51:97:4a:01:04:5e:b8:16:2e:9c:e5:e6:25:20:
17:fa:07:e8:24:51:ff:13:38:e7:79:25:b8:59:07:
28:13:b4:62:44:fb:e8:6a:80:8d:21:bd:9e:95:b6:
4b:61:7d:a4:03:cc:33:b2:27:06:6f:4c:45:99:68:
82:8f:ae:9b:3a:e8:91:1d:40:9e:e9:d3:c2:03:5c:
94:3e:f9:de:08:b2:6c:f5:12:0d:08:ca:97:fb:10:
b5:89:87:f7:c4:09:15:14:23:a3:44:59:8e:bb:b9:
0b:bb:7a:cc:6f:26:e5:18:1a:b4:fa:de:f1:ae:8a:
93:fd:9b:c0:dd:33:3b:18:78:bd:62:d5:95:54:5b:
d0:9f:16:51:53:cc:8d:f8:b5:4c:41:22:61:4c:b1:
fd:99:90:50:ab:12:f5:a3:07:52:54:b1:ee:06:66:
0f:e2:53:3d:db:24:7b:48:3a:5a:54:34:05:bc:a1:
fe:6f:03:de:3c:da:2c:3b:a3:d0:a6:cd:45:c2:98:
3e:73:53:a9:86:f9:0e:ff:b2:40:d3:e9:90:97:b8:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
84:89:86:3A:43:2D:85:1E:FE:A0:43:95:03:65:EE:23:43:6F:CF:95
X509v3 Authority Key Identifier:
keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS945/7/
RPKI Manifest - URI:rsync://rpki.co/repo/AS945/7/8489863A432D851EFEA043950365EE23436FCF95.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.248.0/24
149.112.53.0/24
IPv6:
2602:fa90::/36
Signature Algorithm: sha256WithRSAEncryption
50:48:67:15:f2:16:ef:9e:46:69:1e:65:5f:c5:81:2c:57:c2:
9d:6b:d4:90:be:30:5d:3d:e0:7c:cf:6a:f4:9f:6a:67:40:ba:
9b:f9:a7:66:e0:2c:71:82:18:0a:e1:53:92:c3:f8:10:23:13:
cc:1c:33:ba:8b:bb:f4:cf:66:e0:a7:e3:96:11:d6:66:58:8f:
58:05:40:06:88:9a:be:fd:d0:ef:99:3a:61:65:88:fc:dd:75:
d4:ae:20:c9:60:91:fd:84:ff:c0:50:be:dc:b7:8d:9d:7b:30:
55:a4:0f:78:a3:07:b4:58:df:3e:4b:15:23:44:46:03:98:70:
70:f3:75:73:d0:a6:42:53:f2:48:5b:14:a6:1b:e7:c9:b3:73:
f1:22:78:b9:bb:0f:cb:e0:01:99:3a:1e:47:6a:b4:70:36:e2:
a2:92:12:0a:d6:f1:b8:21:1e:3e:58:54:ff:ca:79:ce:6f:a0:
da:6e:c2:86:bb:95:8b:0a:1a:56:be:7a:07:31:c5:69:d3:67:
d4:8f:f4:f8:57:bb:b5:6b:79:03:a0:48:b5:2f:03:4f:59:a4:
c3:62:37:3b:1e:1a:32:9a:eb:45:b4:e8:60:68:11:ae:a3:68:
4c:f1:7c:09:36:77:bc:50:a7:a3:a0:6e:af:c8:b9:42:b6:08:
9c:a6:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:53 2025 by rpki-client