Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
File:                     eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer (raw, json)
Hash identifier:          1DAMdMJoPn0uoTyv/TKF7oiLs8QAJixyz1OPO2bMfJI=
Subject key identifier:   D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority key identifier: 3E:C5:21:1F:79:C0:6E:DC:01:87:6D:D9:E7:F2:CD:2B:A5:24:7D:A5
Certificate issuer:       /CN=54c0abe8-0a04-4316-aff2-9cdff0522fbd
Certificate serial:       010D0C9F432858438DD6E9DF39678912D043F800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
Manifest:                 rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
caRepository:             rsync://dev.tw/rpki/August/0/
Notify URL:               https://dev.tw/rpki/notification.xml
Certificate not before:   Sun 15 Oct 2023 03:34:12 +0000
Certificate not after:    Sat 17 Jan 2026 04:34:12 +0000
Subordinate resources:    AS: 945
                          AS: 62853
                          IP: 23.133.8.0/24
                          IP: 216.146.28.0/22
                          IP: 2001:506:33::/48
                          IP: 2602:fbf6::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:8d:d6:e9:df:39:67:89:12:d0:43:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54c0abe8-0a04-4316-aff2-9cdff0522fbd
        Validity
            Not Before: Oct 15 03:34:12 2023 GMT
            Not After : Jan 17 04:34:12 2026 GMT
        Subject: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:e0:97:3f:da:29:88:b8:a6:e1:33:65:3c:
                    80:11:ee:06:b2:93:dd:90:92:ba:86:6f:2d:9a:d9:
                    f0:87:f0:0e:63:72:da:61:f4:e0:f3:d4:3a:af:df:
                    49:75:af:f2:e7:f7:c9:ce:a9:4c:2b:ee:20:f2:51:
                    82:d3:b4:77:f2:81:10:81:5f:0f:9f:03:d5:ca:56:
                    6e:61:68:6d:23:11:e0:5c:07:bf:fe:dd:f0:68:03:
                    29:ab:d8:47:dc:cd:03:0f:51:3d:6a:e4:34:cc:71:
                    89:34:4d:40:83:a2:8d:91:ad:4a:e6:cb:75:5f:13:
                    db:52:89:96:9b:1d:da:67:71:d2:ff:22:9d:d8:d9:
                    1f:e2:54:54:0d:b9:1e:5e:00:6a:01:3e:1b:a0:c0:
                    56:ef:52:0c:d7:40:18:a9:b0:0f:15:b4:d3:0c:bf:
                    f0:0e:af:8d:ca:78:32:1c:45:32:35:7f:53:03:02:
                    de:35:f2:49:58:e6:df:bf:0f:4b:8b:5e:bf:95:62:
                    40:fd:d1:56:3f:83:a1:ec:a4:c8:95:41:47:d4:2d:
                    af:4a:d4:d1:f3:75:c0:dd:54:a5:05:fb:f3:bb:04:
                    50:b3:cc:0a:4a:43:06:ae:0d:c9:c7:dd:54:5f:f8:
                    31:3a:57:69:cf:a7:1e:24:87:d8:7e:9d:f3:b5:13:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
            Subject Information Access:
                CA Repository - URI:rsync://dev.tw/rpki/August/0/
                RPKI Manifest - URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                RPKI Notify - URI:https://dev.tw/rpki/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C5:21:1F:79:C0:6E:DC:01:87:6D:D9:E7:F2:CD:2B:A5:24:7D:A5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24
                  216.146.28.0/22
                IPv6:
                  2001:506:33::/48
                  2602:fbf6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  945
                  62853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:df:ad:af:d6:ec:96:c9:f2:30:95:ee:79:b3:07:34:c2:
         17:bd:62:c6:de:b7:6f:10:fe:08:d2:1c:f9:db:4b:8f:cd:8f:
         14:c7:bd:b0:79:2e:71:8a:d8:46:6c:22:db:7e:e5:a7:fa:98:
         f3:e8:b9:c9:28:10:74:0f:81:e5:58:af:22:3f:8e:b2:53:fa:
         6b:a6:d0:11:d3:43:bf:c7:29:60:0f:8f:90:2e:da:3a:dc:9c:
         48:1b:3f:49:e1:9e:95:e2:86:ac:65:3d:a3:a5:b1:e9:ca:a7:
         ff:91:67:77:46:fd:19:f6:d7:b5:f0:79:91:27:f5:4f:10:b9:
         00:f9:39:7b:08:1b:01:fa:94:a2:76:a4:24:59:d3:9c:fe:53:
         e7:2a:39:4d:2a:00:ab:09:22:e3:7c:0b:7a:75:e2:90:ec:4e:
         cb:92:41:45:5f:f8:f2:85:8a:81:90:a7:39:c6:b5:98:8f:7a:
         c2:5b:9e:af:90:ce:8c:28:22:2d:3a:2d:ca:20:3f:ec:26:4d:
         4e:7e:ee:bf:03:98:c1:7d:4e:14:21:87:f2:55:99:9e:fb:dc:
         a3:bf:c9:ed:46:ac:92:47:d3:59:16:1c:ff:50:e9:16:16:92:
         48:0f:5d:67:90:dc:1a:0c:99:de:0e:d1:01:d5:81:09:dd:ed:
         e8:65:70:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:57:15 2024 by rpki-client on console-fra.rpki-client.org