Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
File:                     05A730CA8351369FC3828D0DC297856AE74E8C11.cer (raw, json)
Hash identifier:          hOdqHiiujtA20zuOBFzr9UU/ShMePdpio07OTxZdW+A=
Subject key identifier:   05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       46CFD90733A32749A94287DB4F1CBD768997DECA
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.mft
caRepository:             rsync://rpki.co/repo/AS211604/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 11:06:24 +0000
Certificate not after:    Tue 22 Apr 2025 11:11:24 +0000
Subordinate resources:    IP: 2a12:dd47:3d00::/40
                          IP: 2a12:dd47:8072::/48
                          IP: 2a12:dd47:807e::/47

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cf:d9:07:33:a3:27:49:a9:42:87:db:4f:1c:bd:76:89:97:de:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 23 11:06:24 2024 GMT
            Not After : Apr 22 11:11:24 2025 GMT
        Subject: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:3c:8e:3b:69:01:3a:fa:ae:a1:45:cf:55:
                    04:db:ff:8b:3f:6a:b9:dc:73:7d:c0:c2:34:7e:e9:
                    97:f7:96:f5:dd:29:c8:02:27:1b:0b:90:8c:f7:cb:
                    2d:2b:f2:a2:f6:1a:6e:99:dd:cf:60:f3:bb:b1:c8:
                    9b:c6:74:2a:b8:17:d4:bd:8c:b8:7b:79:c3:79:9e:
                    70:13:7b:47:61:9c:74:e5:5e:c5:1f:ef:8a:5c:e3:
                    f9:fb:83:4d:3e:46:a5:26:78:66:ab:8f:71:c6:be:
                    a6:91:5e:c9:5f:fa:2d:33:a0:b4:6c:97:8a:60:36:
                    d7:2d:41:76:db:18:35:d1:39:88:a0:cb:6f:00:9f:
                    83:c9:b9:e1:1e:27:34:c1:3d:6a:24:c6:69:2b:e8:
                    51:1f:36:f9:5c:21:82:e0:20:86:56:f3:b2:a9:ac:
                    d5:69:c7:00:b0:b0:dc:7f:e7:21:26:44:29:53:6b:
                    08:1f:98:b0:a8:e7:27:3e:5c:c5:00:de:95:ce:06:
                    dc:5d:fc:99:82:71:4a:76:56:1b:00:cd:b6:b7:bf:
                    5f:b6:5c:07:08:0b:10:02:a3:7e:ab:9c:1a:73:11:
                    b0:28:c8:28:a4:0a:bf:4b:c0:9a:60:c6:1b:18:a6:
                    1c:ac:60:d7:50:bd:d3:d9:c0:58:cc:57:c4:6d:9b:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS211604/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d00::/40
                  2a12:dd47:8072::/48
                  2a12:dd47:807e::/47

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:04:77:92:05:56:b1:bb:b9:42:48:26:83:32:74:9c:a3:
         07:47:50:c8:c4:c0:c6:e8:c4:b2:d2:38:a9:69:0f:47:8f:d0:
         0e:4c:3a:3d:6f:84:56:0b:4d:e5:62:af:22:0c:6f:c1:18:89:
         d8:ce:be:eb:7a:95:ae:8a:15:ae:16:3d:31:da:d8:99:34:80:
         aa:92:16:cc:4a:1d:18:89:5c:42:84:cf:f9:2c:fb:d3:98:aa:
         4a:d9:8f:30:26:b3:15:37:be:a7:2d:e8:d1:3f:4e:33:24:c9:
         ab:1e:3e:11:b9:52:08:41:3c:8d:8f:26:d5:d8:08:4c:81:c3:
         1f:8e:95:42:83:44:42:6a:0b:58:b9:cd:67:10:86:d3:89:6f:
         e6:87:66:77:87:d2:d7:1f:e7:8a:1b:d3:e4:ef:58:87:d1:1b:
         cc:63:9d:6c:d0:4f:0b:31:13:28:5d:47:cf:5f:75:70:b4:35:
         b8:87:4c:43:48:0f:b9:f1:96:79:03:2c:83:62:fe:79:5c:b8:
         b4:20:1f:b3:35:5f:38:44:84:bc:a8:e2:50:f3:a3:91:1a:c0:
         24:6c:73:bf:c6:63:9e:67:c6:49:f7:a5:a7:d3:44:df:90:c5:
         33:81:3a:0c:d7:33:e7:46:58:66:fc:ea:1e:22:e9:30:4f:ff:
         77:0d:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:07 2024 by rpki-client on console-ams.rpki-client.org