$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer File: 103734D89B107354F2D009D6E780AAC0BCE606C0.cer (raw, json) Hash identifier: cXxv8WRdzsGBy9DxX1UV+8otQE5qDn5yEGpEPPtr1k8= Subject key identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0 Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1 Certificate issuer: /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1 Certificate serial: 0A42FC1E7C1563553A835FF6888C95ACDFA813A5 Authority info access: rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 21 Jun 2024 00:47:23 +0000 Certificate not after: Fri 20 Jun 2025 00:52:23 +0000 Subordinate resources: IP: 2a12:dd47:3800::/40 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 15:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:42:fc:1e:7c:15:63:55:3a:83:5f:f6:88:8c:95:ac:df:a8:13:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1 Validity Not Before: Jun 21 00:47:23 2024 GMT Not After : Jun 20 00:52:23 2025 GMT Subject: CN=103734D89B107354F2D009D6E780AAC0BCE606C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:34:54:49:fe:a6:1a:87:ef:ef:33:ad:10: dd:a3:ae:d8:4a:53:47:9f:a9:b2:82:f6:e8:82:be: c1:51:8c:ba:df:27:95:c5:b3:f8:c0:fe:83:b4:de: be:18:4c:96:ec:f9:8c:59:dc:62:cb:9c:c1:97:45: 7f:71:1a:75:49:8f:29:76:2b:86:53:f4:e0:b6:ec: 60:c7:07:e7:3e:c4:f8:de:09:ba:40:29:67:32:51: 8f:d1:f6:c5:eb:6a:f5:1b:5a:fe:3c:40:5e:d7:62: 7f:01:e6:86:af:a7:7a:9a:0e:af:03:03:06:35:4f: 45:cc:16:48:9e:1d:0f:2c:d4:37:4b:80:d7:e8:01: 59:40:a9:fc:ff:d2:30:68:da:36:8f:8d:5a:4d:fe: fb:c2:50:d9:71:1c:ec:70:7b:d9:e1:54:a4:11:69: d3:0a:a7:80:1e:9f:59:66:f8:09:55:53:d5:67:41: d9:81:a9:ed:e9:3e:21:85:2b:ff:28:43:e7:82:63: 2d:e5:00:04:c9:8e:04:d8:58:cd:a6:59:6d:82:64: 0d:ec:ae:84:84:11:d6:32:6a:2a:b6:38:51:41:c1: 7b:52:d9:db:3c:a3:74:a6:f7:54:f9:06:95:94:58: ed:4b:df:79:d3:1b:09:79:c1:92:99:a3:9e:d0:a9: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0 X509v3 Authority Key Identifier: keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:3800::/40 Signature Algorithm: sha256WithRSAEncryption 3e:83:4a:2e:4b:d7:bc:ed:04:a9:21:32:be:54:55:42:fa:fd: 63:39:3d:73:fe:b5:f7:a9:72:11:b2:83:93:64:12:c3:bf:b5: 41:65:3c:15:77:e3:55:3a:59:8d:a9:1c:c0:85:d4:81:1f:4e: 5e:52:35:a8:ef:92:fc:a9:24:4d:ee:39:77:3b:26:ba:27:ae: 66:79:ce:7b:bd:69:c7:4a:e6:f7:83:e3:e0:bd:0e:d3:04:32: b3:9f:58:b8:96:04:34:98:32:3a:e2:2c:89:1e:cf:81:68:89: 7f:77:05:67:06:3f:f2:ca:b8:fc:f7:f5:dc:c7:33:be:49:39: ee:d9:d1:f9:98:c6:29:1d:fe:a2:ca:87:09:c1:64:d3:3b:6a: 9c:5a:f4:6c:2f:b7:27:96:12:65:5c:c8:cb:10:2d:b3:25:86: ec:9d:75:31:f9:35:6a:5c:c1:ab:0e:e4:d5:92:8d:5e:17:27: f1:96:cb:7c:a2:d8:fa:6b:88:57:36:70:c0:1b:fb:26:3a:6e: 6e:de:ff:4f:0a:08:94:dc:b3:4c:1d:4f:1b:cf:c7:83:d7:f7: 43:1a:4e:48:dc:eb:ed:7e:17:06:7e:85:72:1c:ce:f1:5c:8b: e2:63:eb:0e:7b:4c:35:e1:2e:67:99:ed:c7:46:52:ed:eb:e5: e0:bb:77:64 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUCkL8HnwVY1U6g1/2iIyVrN+oE6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG NEM4NTBDMTAeFw0yNDA2MjEwMDQ3MjNaFw0yNTA2MjAwMDUyMjNaMDMxMTAvBgNV BAMTKDEwMzczNEQ4OUIxMDczNTRGMkQwMDlENkU3ODBBQUMwQkNFNjA2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyTRUSf6mGofv7zOtEN2jrthK U0efqbKC9uiCvsFRjLrfJ5XFs/jA/oO03r4YTJbs+YxZ3GLLnMGXRX9xGnVJjyl2 K4ZT9OC27GDHB+c+xPjeCbpAKWcyUY/R9sXravUbWv48QF7XYn8B5oavp3qaDq8D AwY1T0XMFkieHQ8s1DdLgNfoAVlAqfz/0jBo2jaPjVpN/vvCUNlxHOxwe9nhVKQR adMKp4Aen1lm+AlVU9VnQdmBqe3pPiGFK/8oQ+eCYy3lAATJjgTYWM2mWW2CZA3s roSEEdYyaiq2OFFBwXtS2ds8o3Sm91T5BpWUWO1L33nTGwl5wZKZo57QqdRRAgMB AAGjggLUMIIC0DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQNzTYmxBzVPLQ CdbngKrAvOYGwDAfBgNVHSMEGDAWgBR2W4s35VNr5JoL89YO9me29MhQwTAOBgNV HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNj NGZhNC8xLzc2NUI4QjM3RTU1MzZCRTQ5QTBCRjNENjBFRjY2N0I2RjRDODUwQzEu Y3JsMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEFBQcwAoZJcnN5bmM6Ly9kZXYudHcv cnBraS9BdWd1c3QvNS83NjVCOEIzN0U1NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0 Qzg1MEMxLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWGU3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGU3ZDU1 ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzMvMIGLBggrBgEFBQcwCoZ/ cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdk NTVmNy1lZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUwZTgvMy8xMDM3MzREODlCMTA3 MzU0RjJEMDA5RDZFNzgwQUFDMEJDRTYwNkMwLm1mdDA8BggrBgEFBQcwDYYwaHR0 cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAqEt1HODANBgkqhkiG9w0BAQsFAAOCAQEAPoNKLkvXvO0EqSEyvlRVQvr9 Yzk9c/6196lyEbKDk2QSw7+1QWU8FXfjVTpZjakcwIXUgR9OXlI1qO+S/KkkTe45 dzsmuieuZnnOe71px0rm94Pj4L0O0wQys59YuJYENJgyOuIsiR7PgWiJf3cFZwY/ 8sq4/Pf13Mczvkk57tnR+ZjGKR3+osqHCcFk0ztqnFr0bC+3J5YSZVzIyxAtsyWG 7J11Mfk1alzBqw7k1ZKNXhcn8ZbLfKLY+muIVzZwwBv7Jjpubt7/TwoIlNyzTB1P G8/Hg9f3QxpOSNzr7X4XBn6FchzO8VyL4mPrDntMNeEuZ5ntx0ZS7evl4Lt3ZA== -----END CERTIFICATE-----Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org