Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
File:                     05A730CA8351369FC3828D0DC297856AE74E8C11.cer (raw, json)
Hash identifier:          hZVB+lPbrR4VdKb3RtD7beDoUuHUX1Qcc6lBYm1J/a0=
Subject key identifier:   05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       50010F6B96FDB728023BB0E575785C595010160B
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.mft
caRepository:             rsync://rpki.co/repo/AS211604/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 13:13:47 +0000
Certificate not after:    Thu 19 Jun 2025 13:18:47 +0000
Subordinate resources:    IP: 2a12:dd47:3d00::/40
                          IP: 2a12:dd47:8072::/48
                          IP: 2a12:dd47:807e::/47

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:01:0f:6b:96:fd:b7:28:02:3b:b0:e5:75:78:5c:59:50:10:16:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 13:13:47 2024 GMT
            Not After : Jun 19 13:18:47 2025 GMT
        Subject: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:3c:8e:3b:69:01:3a:fa:ae:a1:45:cf:55:
                    04:db:ff:8b:3f:6a:b9:dc:73:7d:c0:c2:34:7e:e9:
                    97:f7:96:f5:dd:29:c8:02:27:1b:0b:90:8c:f7:cb:
                    2d:2b:f2:a2:f6:1a:6e:99:dd:cf:60:f3:bb:b1:c8:
                    9b:c6:74:2a:b8:17:d4:bd:8c:b8:7b:79:c3:79:9e:
                    70:13:7b:47:61:9c:74:e5:5e:c5:1f:ef:8a:5c:e3:
                    f9:fb:83:4d:3e:46:a5:26:78:66:ab:8f:71:c6:be:
                    a6:91:5e:c9:5f:fa:2d:33:a0:b4:6c:97:8a:60:36:
                    d7:2d:41:76:db:18:35:d1:39:88:a0:cb:6f:00:9f:
                    83:c9:b9:e1:1e:27:34:c1:3d:6a:24:c6:69:2b:e8:
                    51:1f:36:f9:5c:21:82:e0:20:86:56:f3:b2:a9:ac:
                    d5:69:c7:00:b0:b0:dc:7f:e7:21:26:44:29:53:6b:
                    08:1f:98:b0:a8:e7:27:3e:5c:c5:00:de:95:ce:06:
                    dc:5d:fc:99:82:71:4a:76:56:1b:00:cd:b6:b7:bf:
                    5f:b6:5c:07:08:0b:10:02:a3:7e:ab:9c:1a:73:11:
                    b0:28:c8:28:a4:0a:bf:4b:c0:9a:60:c6:1b:18:a6:
                    1c:ac:60:d7:50:bd:d3:d9:c0:58:cc:57:c4:6d:9b:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS211604/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d00::/40
                  2a12:dd47:8072::/48
                  2a12:dd47:807e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:1e:5e:db:6a:4b:a8:41:eb:50:c2:e7:c8:30:b4:92:46:
         b9:66:9b:67:eb:41:f7:9a:ec:90:a3:7a:e6:c1:f1:b9:19:cd:
         e8:a7:51:fa:b2:92:b0:f8:40:2e:ba:ed:65:65:ac:e2:cd:3e:
         f6:9a:e9:b9:0b:6c:73:be:6a:08:55:8c:13:43:5f:47:cb:4b:
         d1:ee:80:8b:6d:57:f8:65:bd:ae:d8:fd:dc:7d:24:e7:67:ae:
         d0:e5:d8:a1:74:ec:3a:93:12:67:75:41:9a:48:6b:1c:b4:9d:
         4d:dd:6a:08:1b:7b:a3:0c:54:43:ef:f9:49:56:7b:8d:73:90:
         f7:f5:92:09:43:51:9b:3e:ce:a0:15:ad:c4:74:39:b8:73:e7:
         3e:a6:91:2a:9f:fa:36:35:4c:9d:99:66:5e:03:9d:b3:28:d2:
         1b:8f:9d:a7:6d:ae:92:7d:f5:03:ef:87:c9:b9:10:01:85:a5:
         3b:82:b4:1b:ba:f3:41:53:26:8e:fa:13:7f:6c:b7:5e:6a:9e:
         8a:eb:70:e4:4a:d7:48:6a:de:55:61:71:0c:d8:98:a2:ab:b6:
         7a:a9:f8:a3:50:7f:b6:73:7a:1c:0f:a2:42:11:a9:c4:03:a6:
         d2:f0:53:cf:e6:98:bd:14:bf:de:cd:fe:8f:1a:af:33:f9:e0:
         22:1d:24:15
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUUAEPa5b9tygCO7DldXhcWVAQFgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAxMzEzNDdaFw0yNTA2MTkxMzE4NDdaMDMxMTAvBgNV
BAMTKDA1QTczMENBODM1MTM2OUZDMzgyOEQwREMyOTc4NTZBRTc0RThDMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrTyOO2kBOvquoUXPVQTb/4s/
arncc33AwjR+6Zf3lvXdKcgCJxsLkIz3yy0r8qL2Gm6Z3c9g87uxyJvGdCq4F9S9
jLh7ecN5nnATe0dhnHTlXsUf74pc4/n7g00+RqUmeGarj3HGvqaRXslf+i0zoLRs
l4pgNtctQXbbGDXROYigy28An4PJueEeJzTBPWokxmkr6FEfNvlcIYLgIIZW87Kp
rNVpxwCwsNx/5yEmRClTawgfmLCo5yc+XMUA3pXOBtxd/JmCcUp2VhsAzba3v1+2
XAcICxACo36rnBpzEbAoyCikCr9LwJpgxhsYphysYNdQvdPZwFjMV8Rtm/vJAgMB
AAGjggJ2MIICcjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQFpzDKg1E2n8OC
jQ3Cl4Vq506METAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj
NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu
Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv
cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0
Qzg1MEMxLmNlcjCB0AYIKwYBBQUHAQsEgcMwgcAwLAYIKwYBBQUHMAWGIHJzeW5j
Oi8vcnBraS5jby9yZXBvL0FTMjExNjA0LzEvMFgGCCsGAQUFBzAKhkxyc3luYzov
L3Jwa2kuY28vcmVwby9BUzIxMTYwNC8xLzA1QTczMENBODM1MTM2OUZDMzgyOEQw
REMyOTc4NTZBRTc0RThDMTEubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3JyZHAu
cnBraS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAIwGgMGACoS3Uc9AwcAKhLd
R4ByAwcBKhLdR4B+MA0GCSqGSIb3DQEBCwUAA4IBAQCyER5e22pLqEHrUMLnyDC0
kka5Zptn60H3muyQo3rmwfG5Gc3op1H6spKw+EAuuu1lZazizT72mum5C2xzvmoI
VYwTQ19Hy0vR7oCLbVf4Zb2u2P3cfSTnZ67Q5dihdOw6kxJndUGaSGsctJ1N3WoI
G3ujDFRD7/lJVnuNc5D39ZIJQ1GbPs6gFa3EdDm4c+c+ppEqn/o2NUydmWZeA52z
KNIbj52nba6SffUD74fJuRABhaU7grQbuvNBUyaO+hN/bLdeap6K63DkStdIat5V
YXEM2Jiiq7Z6qfijUH+2c3ocD6JCEanEA6bS8FPP5pi9FL/ezf6PGq8z+eAiHSQV
-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org