Certificate

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.cer
File:                     5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.cer (raw, json)
Hash identifier:          yCHLcGr74ZHEY8lGCz4zVxmCpCpzAUSyG12RJAJju8Q=
Subject key identifier:   5A:4A:16:78:B2:ED:2E:7C:17:3C:4E:E8:FF:16:B3:D9:A7:09:44:5E
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       16D388F2D39B930EE896EFFB6502ACE1B3D9D324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Manifest:                 rsync://rpki.kitten.network/repo/MythicalKitten/3/5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.mft
caRepository:             rsync://rpki.kitten.network/repo/MythicalKitten/3
Notify URL:               https://rpki.kitten.network/rrdp/notification.xml
Certificate not before:   Fri 03 Feb 2023 04:40:06 +0000
Certificate not after:    Fri 02 Feb 2024 04:45:06 +0000
Subordinate resources:    IP: 2a12:dd47:5300::/40
                          IP: 2a12:dd47:8079::/48
                          IP: 2a12:dd47:80a0::/44
                          IP: 2a12:dd47:81f0::/44
                          IP: 2a12:dd47:8280::/44
                          IP: 2a12:dd47:8e00::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d3:88:f2:d3:9b:93:0e:e8:96:ef:fb:65:02:ac:e1:b3:d9:d3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Feb  3 04:40:06 2023 GMT
            Not After : Feb  2 04:45:06 2024 GMT
        Subject: CN=5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:14:0e:00:8f:a3:27:8e:fa:85:55:e9:98:
                    b2:69:99:a6:ad:f0:4a:9c:33:f5:0d:8b:e6:b7:af:
                    6a:1d:d4:91:df:01:b0:87:1a:24:b0:84:dd:94:df:
                    f0:d3:a0:a4:7b:9a:b1:e2:0d:50:fa:3c:d8:b1:80:
                    85:b1:61:c0:f9:e7:a5:0b:72:ef:1a:15:2a:6d:e1:
                    f8:67:e3:27:ee:18:0c:d2:4f:73:4d:5a:fe:b4:d0:
                    04:78:14:25:42:a5:61:88:bb:c3:f6:a5:a1:0f:90:
                    7e:20:34:14:56:f6:75:5a:d6:cf:6c:ee:f4:72:5f:
                    93:dd:d1:7d:06:8d:de:fa:75:8b:8a:9a:38:3e:86:
                    fa:a2:d1:8b:fc:c8:bb:0d:90:eb:2e:91:36:6d:26:
                    5a:2f:c7:32:82:fe:16:9f:f0:32:c9:4c:a0:9f:d6:
                    d2:38:9f:19:45:cc:1a:b7:ba:22:c0:1f:d8:6e:50:
                    4a:4b:82:df:c6:6e:14:86:c5:ce:0b:54:6f:fb:b5:
                    cb:47:1a:0d:e5:7a:31:06:d9:34:42:5b:4a:d4:a4:
                    6c:77:1e:b4:07:e5:a8:07:b4:8e:bb:b5:fc:86:62:
                    43:65:3c:17:58:56:fc:47:93:df:cd:dd:17:af:3e:
                    66:ce:2b:07:02:5d:67:a8:67:d4:95:e8:17:da:1f:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:4A:16:78:B2:ED:2E:7C:17:3C:4E:E8:FF:16:B3:D9:A7:09:44:5E
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.kitten.network/repo/MythicalKitten/3
                RPKI Manifest - URI:rsync://rpki.kitten.network/repo/MythicalKitten/3/5A4A1678B2ED2E7C173C4EE8FF16B3D9A709445E.mft
                RPKI Notify - URI:https://rpki.kitten.network/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5300::/40
                  2a12:dd47:8079::/48
                  2a12:dd47:80a0::/44
                  2a12:dd47:81f0::/44
                  2a12:dd47:8280::/44
                  2a12:dd47:8e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:39:ac:39:54:b5:c0:5e:f5:57:43:73:a7:f2:ca:85:44:
         51:d3:7a:66:2c:3a:09:42:0b:84:e2:67:d2:58:ae:28:87:13:
         35:69:ad:ce:d7:84:c5:c5:54:0b:01:a6:08:df:10:40:80:5a:
         7b:1b:8e:6b:1a:53:21:72:84:91:a6:22:59:af:4c:b8:a1:bb:
         d3:72:c7:f5:9d:35:59:d5:1d:51:6b:c2:3f:72:54:c1:45:5f:
         7e:ac:26:e7:0b:21:f5:55:c4:02:ca:1c:a7:3d:00:b5:a1:9e:
         18:1c:fc:2e:0a:05:a3:1a:61:2c:84:19:e0:5b:eb:48:d9:cd:
         11:9f:4a:fc:75:db:55:97:35:e8:93:8a:55:12:2c:b3:f1:9e:
         05:22:13:c1:db:ea:08:98:48:44:b1:fb:5a:30:99:d2:0f:65:
         08:29:70:18:ae:ad:c5:fc:6a:43:9f:77:e0:74:2f:12:f5:88:
         74:99:cd:01:89:bc:84:3e:d0:46:ec:6f:be:53:42:ae:57:23:
         8a:a2:28:fc:cf:c2:39:e1:5c:4a:ef:00:bc:33:c9:9c:3f:e4:
         32:f1:81:a8:d9:37:3a:18:4f:73:8c:17:0e:d4:b5:15:57:de:
         cd:f5:4d:f4:af:dd:18:20:67:41:81:fe:49:0d:71:e5:64:ee:
         a5:3d:a8:96
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUFtOI8tObkw7olu/7ZQKs4bPZ0yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5ODExOWUxNWY4MTA4YWJhZDlkNWUxNTMwMThmYjQ2
NjVjYTYzMDAeFw0yMzAyMDMwNDQwMDZaFw0yNDAyMDIwNDQ1MDZaMDMxMTAvBgNV
BAMTKDVBNEExNjc4QjJFRDJFN0MxNzNDNEVFOEZGMTZCM0Q5QTcwOTQ0NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNchQOAI+jJ476hVXpmLJpmaat
8EqcM/UNi+a3r2od1JHfAbCHGiSwhN2U3/DToKR7mrHiDVD6PNixgIWxYcD556UL
cu8aFSpt4fhn4yfuGAzST3NNWv600AR4FCVCpWGIu8P2paEPkH4gNBRW9nVa1s9s
7vRyX5Pd0X0Gjd76dYuKmjg+hvqi0Yv8yLsNkOsukTZtJlovxzKC/haf8DLJTKCf
1tI4nxlFzBq3uiLAH9huUEpLgt/GbhSGxc4LVG/7tctHGg3lejEG2TRCW0rUpGx3
HrQH5agHtI67tfyGYkNlPBdYVvxHk9/N3RevPmbOKwcCXWeoZ9SV6BfaH3pHAgMB
AAGjggKUMIICkDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaShZ4su0ufBc8
Tuj/FrPZpwlEXjAfBgNVHSMEGDAWgBSUmBGeFfgQirrZ1eFTAY+0ZlymMDAOBgNV
HQ8BAf8EBAMCAQYwYAYDVR0fBFkwVzBVoFOgUYZPcnN5bmM6Ly9ycGtpLmF1Z3Vz
dC50dy9yZXBvL0hZU1AvNi85NDk4MTE5RTE1RjgxMDhBQkFEOUQ1RTE1MzAxOEZC
NDY2NUNBNjMwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvbEpnUm5oWDRFSXE2
MmRYaFV3R1B0R1pjcGpBLmNlcjCB+gYIKwYBBQUHAQsEge0wgeowPQYIKwYBBQUH
MAWGMXJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015dGhpY2FsS2l0
dGVuLzMwagYIKwYBBQUHMAqGXnJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9y
ZXBvL015dGhpY2FsS2l0dGVuLzMvNUE0QTE2NzhCMkVEMkU3QzE3M0M0RUU4RkYx
NkIzRDlBNzA5NDQ1RS5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8vcnBraS5raXR0
ZW4ubmV0d29yay9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjBOBggrBgEFBQcBBwEB/wQ/MD0wOwQCAAIwNQMGACoS3UdTAwcA
KhLdR4B5AwcEKhLdR4CgAwcEKhLdR4HwAwcEKhLdR4KAAwcEKhLdR44AMA0GCSqG
SIb3DQEBCwUAA4IBAQBsrDmsOVS1wF71V0Nzp/LKhURR03pmLDoJQguE4mfSWK4o
hxM1aa3O14TFxVQLAaYI3xBAgFp7G45rGlMhcoSRpiJZr0y4obvTcsf1nTVZ1R1R
a8I/clTBRV9+rCbnCyH1VcQCyhynPQC1oZ4YHPwuCgWjGmEshBngW+tI2c0Rn0r8
ddtVlzXok4pVEiyz8Z4FIhPB2+oImEhEsftaMJnSD2UIKXAYrq3F/GpDn3fgdC8S
9Yh0mc0BibyEPtBG7G++U0KuVyOKoij8z8I54VxK7wC8M8mcP+Qy8YGo2Tc6GE9z
jBcO1LUVV97N9U30r90YIGdBgf5JDXHlZO6lPaiW
-----END CERTIFICATE-----