Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
File:                     F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer (raw, json)
Hash identifier:          aGg4IaQlupo6k6Z7GYhR5obwXntxuNiKe2aAxzIzrmA=
Subject key identifier:   F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       620EA21952F5DEFEE672CC286EA81C66EE2AD958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
caRepository:             rsync://dev.tw/rpki/August/13/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Sun 15 Oct 2023 03:29:06 +0000
Certificate not after:    Sun 13 Oct 2024 03:34:06 +0000
Subordinate resources:    IP: 2a05:dfc6::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0e:a2:19:52:f5:de:fe:e6:72:cc:28:6e:a8:1c:66:ee:2a:d9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Oct 15 03:29:06 2023 GMT
            Not After : Oct 13 03:34:06 2024 GMT
        Subject: CN=F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:1e:fd:c5:45:5e:0e:c8:8a:30:38:af:f6:
                    85:15:fd:d8:88:2b:65:fd:be:79:e8:13:f0:ce:0e:
                    2f:f5:bd:2f:96:cd:63:dd:64:66:41:1c:12:19:e6:
                    ac:55:e9:ea:71:e5:53:f3:ce:e5:57:68:2d:de:8f:
                    24:e9:73:35:17:81:30:ad:23:8f:86:bd:a2:eb:4e:
                    71:e6:d1:25:c9:c3:0b:c2:02:5f:83:78:80:f7:53:
                    8f:c1:2e:ec:6a:83:d3:a4:8d:a9:29:77:0e:bb:f1:
                    64:7b:31:b3:06:12:82:be:9a:8b:2f:31:d0:65:26:
                    36:31:3b:08:b7:56:ed:08:af:b1:76:3c:69:d0:2c:
                    53:9a:aa:8d:3b:2b:3d:1c:ae:a5:45:64:e6:ab:5c:
                    b4:73:e6:10:6f:30:6b:42:e5:2e:ac:e0:c0:7f:22:
                    45:44:f2:70:48:d8:1b:69:90:db:0c:cb:bd:4b:0b:
                    da:af:c2:88:46:79:80:11:60:79:79:b8:0c:7b:e0:
                    f1:e9:3b:0b:08:a6:46:17:a6:5e:c3:c5:1e:6a:8f:
                    6c:26:75:6c:6e:8f:c6:d5:67:ce:b4:c5:29:f1:d1:
                    02:89:75:1d:aa:cd:c1:3f:f8:95:c4:01:c4:82:48:
                    15:b1:18:9c:5a:43:6a:e9:3e:2f:f2:04:ee:11:23:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:64:98:96:A7:0A:20:CD:8A:BB:96:44:DE:0C:03:99:CE:C6:FB:CE
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/August/13/
                RPKI Manifest - URI:rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:d8:52:58:3c:fd:18:dd:49:33:c6:aa:ae:f0:e1:fd:4e:
         99:0a:fe:cf:a7:92:a7:61:18:99:b6:e5:23:0f:0f:c0:3a:a8:
         47:75:89:e7:be:00:ed:3c:37:6b:7d:a9:34:a8:30:cb:c7:7d:
         1f:e6:47:18:08:7b:43:ba:59:6a:06:4f:73:8f:ba:39:93:91:
         95:11:c5:0c:47:7a:8e:a4:9e:c8:03:95:82:c9:bf:b9:22:61:
         74:43:70:c8:f2:01:76:1e:f4:35:e9:fe:6f:05:f8:20:c9:a2:
         2a:de:a0:b5:8a:48:0b:31:c3:d0:ae:7b:95:b7:78:82:17:ad:
         c4:93:1f:66:a2:ba:0a:78:bb:48:6c:1a:b3:d1:4c:b8:73:7d:
         e9:01:0f:5b:3e:c9:c1:50:9d:0b:ff:14:4a:b3:7c:9f:a5:78:
         b9:95:68:b5:8a:79:0b:21:0c:ff:2e:f5:50:5b:0e:80:7b:61:
         c9:69:f2:95:44:e7:aa:f8:ac:b3:da:de:cd:07:ea:00:34:66:
         0b:d6:c4:21:59:0b:2e:c9:f9:f8:3f:d6:b9:3b:90:eb:ba:cd:
         4e:d0:d3:2d:42:5a:2e:fe:91:d5:67:be:24:9b:f5:1f:5a:10:
         ab:cc:07:e5:49:c9:8c:60:50:02:91:19:82:9a:57:3f:45:d1:
         91:b2:02:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUYg6iGVL13v7mcswobqgcZu4q2VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEwMTUwMzI5MDZaFw0yNDEwMTMwMzM0MDZaMDMxMTAvBgNV
BAMTKEY0NjQ5ODk2QTcwQTIwQ0Q4QUJCOTY0NERFMEMwMzk5Q0VDNkZCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCux79xUVeDsiKMDiv9oUV/diI
K2X9vnnoE/DODi/1vS+WzWPdZGZBHBIZ5qxV6epx5VPzzuVXaC3ejyTpczUXgTCt
I4+GvaLrTnHm0SXJwwvCAl+DeID3U4/BLuxqg9Okjakpdw678WR7MbMGEoK+mosv
MdBlJjYxOwi3Vu0Ir7F2PGnQLFOaqo07Kz0crqVFZOarXLRz5hBvMGtC5S6s4MB/
IkVE8nBI2BtpkNsMy71LC9qvwohGeYARYHl5uAx74PHpOwsIpkYXpl7DxR5qj2wm
dWxuj8bVZ860xSnx0QKJdR2qzcE/+JXEAcSCSBWxGJxaQ2rpPi/yBO4RI6UtAgMB
AAGjggJYMIICVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0ZJiWpwogzYq7
lkTeDAOZzsb7zjAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIHGBggrBgEFBQcBCwSBuTCBtjAqBggrBgEFBQcwBYYecnN5bmM6
Ly9kZXYudHcvcnBraS9BdWd1c3QvMTMvMFYGCCsGAQUFBzAKhkpyc3luYzovL2Rl
di50dy9ycGtpL0F1Z3VzdC8xMy9GNDY0OTg5NkE3MEEyMENEOEFCQjk2NDRERTBD
MDM5OUNFQzZGQkNFLm1mdDAwBggrBgEFBQcwDYYkaHR0cHM6Ly9kZXYudHcvcnBr
aS9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYI
KwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqBd/GMA0GCSqGSIb3DQEBCwUAA4IB
AQA4vNhSWDz9GN1JM8aqrvDh/U6ZCv7Pp5KnYRiZtuUjDw/AOqhHdYnnvgDtPDdr
fak0qDDLx30f5kcYCHtDullqBk9zj7o5k5GVEcUMR3qOpJ7IA5WCyb+5ImF0Q3DI
8gF2HvQ16f5vBfggyaIq3qC1ikgLMcPQrnuVt3iCF63Ekx9moroKeLtIbBqz0Uy4
c33pAQ9bPsnBUJ0L/xRKs3yfpXi5lWi1inkLIQz/LvVQWw6Ae2HJafKVROeq+Kyz
2t7NB+oANGYL1sQhWQsuyfn4P9a5O5Drus1O0NMtQlou/pHVZ74km/UfWhCrzAfl
ScmMYFACkRmCmlc/RdGRsgLm
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org