Certificate

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
File:                     34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer (raw, json)
Hash identifier:          fnmlNknyLqicreqtbui3CiuNmlYTUtnvHJlZt8hKwbo=
Subject key identifier:   34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       716A12C463FF7500AB22C10D891C41EF885D1F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Sat 01 Apr 2023 02:58:49 +0000
Certificate not after:    Sat 30 Mar 2024 03:03:49 +0000
Subordinate resources:    IP: 2a12:dd47:802c::/46
                          IP: 2a12:dd47:8230::/44
                          IP: 2a12:dd47:8400::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6a:12:c4:63:ff:75:00:ab:22:c1:0d:89:1c:41:ef:88:5d:1f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Apr  1 02:58:49 2023 GMT
            Not After : Mar 30 03:03:49 2024 GMT
        Subject: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:5c:f2:90:04:1c:bf:39:b1:ce:42:09:1a:
                    1b:8e:82:80:69:01:c9:fe:c7:55:73:4a:c2:c6:26:
                    d1:f3:9f:80:cb:ab:f0:36:e6:5c:e6:74:ae:32:60:
                    fb:2f:3e:d7:cb:33:37:d4:bd:0b:df:a2:ec:69:46:
                    d6:a1:43:ee:e4:bb:77:b0:9d:14:41:00:76:11:29:
                    1c:42:bf:d0:c4:4e:6f:03:63:2f:6d:e5:43:a5:8e:
                    74:1c:2a:e4:8e:45:d4:e1:62:9f:3e:fd:ee:7c:a9:
                    cf:7c:7b:64:85:a3:8e:ab:c3:3c:a6:56:a6:5b:eb:
                    38:58:3a:84:c5:92:e0:51:ea:5f:1f:da:7c:ed:09:
                    8e:f6:ce:e4:23:22:6e:93:8e:a8:3b:4b:0a:5e:84:
                    7e:b7:13:fa:f7:00:70:34:5a:c8:39:28:dc:54:73:
                    d7:df:f0:aa:4e:d0:1f:cc:e3:67:a5:e8:8a:df:e2:
                    87:fb:26:65:99:e4:7a:8d:ea:69:df:d2:1b:87:b6:
                    7e:a9:fa:27:f9:6b:4a:48:b2:37:f5:84:fa:27:21:
                    0d:30:88:75:41:95:40:6d:66:f0:b8:87:28:66:47:
                    50:6b:cc:4b:e7:39:a3:8b:bd:ce:b5:cf:15:d5:1c:
                    70:52:7b:ef:92:fa:a0:99:10:f1:a4:0c:19:51:74:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802c::/46
                  2a12:dd47:8230::/44
                  2a12:dd47:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:2f:bc:f8:0d:5b:9a:6c:34:a8:64:75:18:4e:13:d8:7b:54:
         1b:36:22:1c:9e:71:fb:bf:21:f6:6b:25:43:cc:32:32:5c:44:
         75:38:d3:56:1e:2d:e8:a9:43:b6:fa:c5:be:3d:89:8a:bc:3c:
         9b:7c:b0:23:1c:ce:8f:4c:47:ba:30:11:c6:01:68:aa:b1:2e:
         d5:59:9b:80:8d:18:fc:12:37:41:2f:d8:c0:8c:dd:f5:6f:0d:
         49:56:b4:7d:20:0f:95:44:32:83:17:f6:f7:5a:6e:f7:8e:2d:
         1d:36:03:17:f6:9f:e6:8a:3d:48:8b:d6:8c:8d:17:a9:9a:90:
         84:39:82:09:e1:67:df:9f:7f:47:41:ee:c0:d8:07:3e:53:4e:
         d3:e8:ec:34:10:1c:fe:5b:11:9d:d2:20:8b:29:43:19:7b:65:
         90:bc:74:50:35:43:53:c4:00:43:a1:7f:9f:b5:83:22:eb:ec:
         27:6e:3d:be:3d:52:9e:cf:ad:cb:e7:34:43:f1:2e:af:8d:7b:
         20:b6:c5:7a:b3:9f:02:c1:88:03:2c:e3:50:03:27:d3:a3:09:
         59:b7:a4:3c:c4:87:f8:89:e7:52:18:0a:d0:62:00:d7:6d:4a:
         bc:67:2a:34:d2:44:74:cf:ab:32:35:1c:fa:34:f4:d3:9e:03:
         81:3d:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----