Certificate

$ rpki-client -vvf dev.tw/rpki/August/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.cer
File:                     26A7F78F0B8660C397A68D46D80959C29E7076FE.cer (raw, json)
Hash identifier:          DO7UAi9wbJCVTK3nmIhztoR8/293/IxgXl1jscoNWGY=
Subject key identifier:   26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
Authority key identifier: 97:F0:EC:C3:07:F1:DF:82:8A:E1:27:E2:D0:FB:B1:34:68:3D:29:5A
Certificate issuer:       /CN=a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132
Certificate serial:       647083A5C58E1475003593EA535578F784B4DE8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer
Manifest:                 rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.mft
caRepository:             rsync://rpki.co/repo/AS945/9/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Sun 15 Oct 2023 19:20:39 +0000
Certificate not after:    Sun 13 Oct 2024 19:25:39 +0000
Subordinate resources:    IP: 23.150.8.0/22
                          IP: 2602:fa94::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:70:83:a5:c5:8e:14:75:00:35:93:ea:53:55:78:f7:84:b4:de:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132
        Validity
            Not Before: Oct 15 19:20:39 2023 GMT
            Not After : Oct 13 19:25:39 2024 GMT
        Subject: CN=26A7F78F0B8660C397A68D46D80959C29E7076FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:53:5b:56:a1:34:b8:9e:1d:be:9a:8e:3a:
                    5c:01:13:40:b8:f3:bc:4b:ce:c5:17:09:7c:58:fa:
                    4e:2a:08:da:f6:6f:d5:05:a1:70:9b:bc:93:ac:91:
                    bd:30:6e:cf:6a:32:17:86:69:ab:36:f0:8c:40:b1:
                    f2:86:ce:e1:ab:c6:29:ca:c3:7c:2a:aa:64:36:c5:
                    ff:7c:7a:02:d9:cc:18:13:84:e9:c9:6b:92:39:41:
                    52:f3:3d:93:ce:ca:04:3e:3d:b1:fa:ae:63:7b:d3:
                    1e:bf:52:5d:b1:fa:e2:61:a4:0b:94:e5:2c:c0:80:
                    23:58:1b:9e:9e:eb:29:c2:02:1c:95:84:70:3e:40:
                    0c:17:46:bb:80:76:66:0a:4f:4f:d1:fa:4b:df:cd:
                    3e:9f:cd:78:ff:f0:b0:46:bf:e0:8b:9c:90:07:e7:
                    a1:67:6e:26:c2:b9:f7:d4:0d:61:3a:7f:eb:d0:47:
                    fd:52:aa:1b:7f:74:a7:58:cd:38:3d:97:4a:b7:ba:
                    5d:fb:f0:25:38:ef:36:95:ff:83:25:76:e4:02:55:
                    6b:23:46:94:24:1c:38:84:b5:86:cd:9f:ea:83:6c:
                    65:cd:84:3f:77:0e:62:ff:26:db:20:83:c2:b5:13:
                    67:0a:43:31:ac:f8:f0:32:c8:c7:29:44:d0:5d:ed:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:A7:F7:8F:0B:86:60:C3:97:A6:8D:46:D8:09:59:C2:9E:70:76:FE
            X509v3 Authority Key Identifier:
                keyid:97:F0:EC:C3:07:F1:DF:82:8A:E1:27:E2:D0:FB:B1:34:68:3D:29:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/9/97F0ECC307F1DF828AE127E2D0FBB134683D295A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/9/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/9/26A7F78F0B8660C397A68D46D80959C29E7076FE.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22
                IPv6:
                  2602:fa94::/36

    Signature Algorithm: sha256WithRSAEncryption
         c6:10:45:e9:52:bf:29:7e:09:3b:35:b9:02:b5:8d:46:b6:6b:
         c3:6d:77:20:0e:a9:4b:df:16:b8:58:d6:7c:d5:1d:94:0c:5b:
         cc:b8:f7:2d:69:38:44:4e:fd:a7:2f:71:2f:81:0f:75:7c:af:
         e5:81:0b:b0:d4:8c:ec:e2:01:9d:ad:19:41:f5:86:7d:ce:d1:
         d9:26:cd:ba:bd:b5:94:4b:94:dc:41:13:df:6a:61:29:2c:05:
         95:7c:5d:c2:eb:3b:12:78:32:aa:e7:7f:33:ce:d6:66:f3:f8:
         5e:9a:e4:08:0b:0d:6d:0f:95:e0:ab:06:17:5f:f7:17:68:1a:
         90:34:72:1a:78:9f:00:35:b0:11:e9:8e:bb:22:b1:10:4e:77:
         6b:7f:66:79:42:75:ab:f8:8e:59:3e:75:4b:c8:53:07:ee:da:
         14:83:8d:f1:30:10:2d:ba:37:f4:38:26:17:53:ea:8b:90:03:
         53:92:9d:fd:56:ea:7f:9f:7d:81:5b:14:95:b9:cc:b8:c2:53:
         99:1e:67:7e:ac:56:66:98:bd:d7:55:32:c7:d3:69:20:5b:b0:
         bf:9e:6f:b2:9f:5d:69:9a:ae:01:cc:ed:91:0f:28:d8:28:25:
         8c:0f:fd:e2:93:84:bd:44:cb:36:0b:44:98:00:79:31:45:0e:
         19:a1:77:ec
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIUZHCDpcWOFHUANZPqU1V494S03o4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTYyMDFlZmQ0Yzc5Nzk3Yjc4MjNjMTgwMDBkYWM4MGVj
NDdiNjFjM2JlNGZjNTUxMzIwHhcNMjMxMDE1MTkyMDM5WhcNMjQxMDEzMTkyNTM5
WjAzMTEwLwYDVQQDEygyNkE3Rjc4RjBCODY2MEMzOTdBNjhENDZEODA5NTlDMjlF
NzA3NkZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RTW1ahNLie
Hb6ajjpcARNAuPO8S87FFwl8WPpOKgja9m/VBaFwm7yTrJG9MG7PajIXhmmrNvCM
QLHyhs7hq8YpysN8KqpkNsX/fHoC2cwYE4TpyWuSOUFS8z2TzsoEPj2x+q5je9Me
v1JdsfriYaQLlOUswIAjWBuenuspwgIclYRwPkAMF0a7gHZmCk9P0fpL380+n814
//CwRr/gi5yQB+ehZ24mwrn31A1hOn/r0Ef9Uqobf3SnWM04PZdKt7pd+/AlOO82
lf+DJXbkAlVrI0aUJBw4hLWGzZ/qg2xlzYQ/dw5i/ybbIIPCtRNnCkMxrPjwMsjH
KUTQXe3MLwIDAQABo4ICzzCCAsswDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
Jqf3jwuGYMOXpo1G2AlZwp5wdv4wHwYDVR0jBBgwFoAUl/Dswwfx34KK4Sfi0Pux
NGg9KVowDgYDVR0PAQH/BAQDAgEGMFoGA1UdHwRTMFEwT6BNoEuGSXJzeW5jOi8v
ZGV2LnR3L3Jwa2kvQXVndXN0LzkvOTdGMEVDQzMwN0YxREY4MjhBRTEyN0UyRDBG
QkIxMzQ2ODNEMjk1QS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcw
AoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2YzA3ZTc2LTY2ZDgtNDhkNy04
MjZhLTg1ZGUyOWM2NmEyMi9hNjIwMWVmZDRjNzk3OTdiNzgyM2MxODAwMGRhYzgw
ZWM0N2I2MWMzYmU0ZmM1NTEzMi5jZXIwgcoGCCsGAQUFBwELBIG9MIG6MCkGCCsG
AQUFBzAFhh1yc3luYzovL3Jwa2kuY28vcmVwby9BUzk0NS85LzBVBggrBgEFBQcw
CoZJcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUvOS8yNkE3Rjc4RjBCODY2MEMz
OTdBNjhENDZEODA5NTlDMjlFNzA3NkZFLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6
Ly9ycmRwLnJwa2kuY28vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLwYIKwYBBQUHAQcBAf8EIDAeMAwEAgABMAYDBAIXlggw
DgQCAAIwCAMGBCYC+pQAMA0GCSqGSIb3DQEBCwUAA4IBAQDGEEXpUr8pfgk7NbkC
tY1GtmvDbXcgDqlL3xa4WNZ81R2UDFvMuPctaThETv2nL3EvgQ91fK/lgQuw1Izs
4gGdrRlB9YZ9ztHZJs26vbWUS5TcQRPfamEpLAWVfF3C6zsSeDKq538zztZm8/he
muQICw1tD5XgqwYXX/cXaBqQNHIaeJ8ANbAR6Y67IrEQTndrf2Z5QnWr+I5ZPnVL
yFMH7toUg43xMBAtujf0OCYXU+qLkANTkp39Vup/n32BWxSVucy4wlOZHmd+rFZm
mL3XVTLH02kgW7C/nm+yn11pmq4BzO2RDyjYKCWMD/3ik4S9RMs2C0SYAHkxRQ4Z
oXfs
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:03 2025 by rpki-client