Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer
File:                     0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer (raw, json)
Hash identifier:          MiI4uC5LKQgc2/whnJZyfFZqxieJcnHuGpmAkvfolZk=
Subject key identifier:   0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       102B6DF6BAD321A956C42FF8D05646334ED70A5E
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/Cube/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.mft
caRepository:             rsync://rpki.co/repo/Cube/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 20:42:12 +0000
Certificate not after:    Tue 22 Apr 2025 20:47:12 +0000
Subordinate resources:    IP: 2a12:dd47:fa00::/40

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2b:6d:f6:ba:d3:21:a9:56:c4:2f:f8:d0:56:46:33:4e:d7:0a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 23 20:42:12 2024 GMT
            Not After : Apr 22 20:47:12 2025 GMT
        Subject: CN=0B9793DB5D4383D5EB9329D4AFB5656B34D22D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:43:3a:26:45:bc:87:88:50:85:be:10:8c:
                    7b:19:49:a5:34:59:56:40:ef:de:1b:95:8c:2a:d8:
                    5f:ed:5f:dd:18:9f:21:e7:15:0b:06:51:ba:52:29:
                    50:ca:92:6c:af:8e:b5:6e:78:e2:34:8c:4e:e9:ce:
                    60:9f:a1:56:98:3b:76:d9:c0:48:b1:e0:ee:c8:f8:
                    91:92:2d:09:20:48:19:38:66:3e:55:04:ef:da:07:
                    19:ca:ab:25:ef:00:ea:fc:dc:23:b2:bd:2f:ea:e0:
                    a3:90:a4:e6:d8:02:b9:c7:c1:c4:ea:10:8b:c3:2c:
                    66:7e:bf:f2:43:b2:fd:df:a7:a4:6a:da:6d:6c:59:
                    69:52:d3:1d:cb:41:75:4c:bf:dc:c0:42:20:a3:1a:
                    70:77:90:59:7e:3c:97:88:19:69:0e:a3:1d:bc:00:
                    09:49:0e:b2:d0:91:19:5a:07:c9:7e:36:83:b2:c4:
                    df:e2:4a:5a:89:35:5a:33:7b:7a:9d:f5:a8:9a:20:
                    03:60:74:c3:17:32:7d:da:43:00:3f:20:20:cd:db:
                    60:a6:5b:b3:c5:d3:d3:f3:86:5f:b1:9f:83:fa:2a:
                    76:14:7d:2a:38:2b:87:15:45:58:f2:32:8b:b1:8a:
                    84:fc:2a:19:9d:c8:52:7d:47:1f:08:c2:24:8d:81:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Cube/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Cube/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:06:5f:75:5f:92:ce:82:c8:a7:7f:49:a6:8b:a7:f5:c6:63:
         14:56:f0:7f:90:f2:af:69:58:df:07:3d:1d:19:2b:1e:cd:e6:
         04:b7:dc:3c:fb:61:90:ab:57:29:ff:64:20:aa:d1:64:69:89:
         45:d1:f0:e0:25:5b:61:0c:cb:15:75:e4:df:c6:25:b8:06:eb:
         57:0e:14:f1:89:b2:83:4d:cc:18:37:a2:fe:6e:9e:be:d3:3e:
         8d:63:21:e4:b5:3e:52:3c:74:64:70:36:b1:ec:71:1e:25:c3:
         b6:a3:4d:ae:90:d6:92:a7:25:f4:45:6e:96:91:d3:25:6a:6a:
         5c:e6:fa:fb:55:9a:a6:7e:f1:d9:77:24:0d:d8:8d:a2:9d:47:
         90:79:bf:81:e2:da:af:86:80:43:3f:63:f2:0f:c4:e5:29:19:
         c7:bc:d5:47:07:e2:27:bd:02:19:29:dd:fa:a3:1b:cc:f4:45:
         fd:0a:50:b6:93:42:75:42:46:2e:90:0c:14:d4:0a:d1:15:94:
         03:93:f2:27:c1:96:85:39:4b:7f:b1:03:9a:77:52:99:24:36:
         90:ee:e0:20:d6:de:8e:45:ac:98:9a:3d:de:9a:55:99:e8:09:
         4f:c8:9b:7f:31:99:92:65:c6:ed:9d:a9:ce:c6:d3:36:ee:18:
         da:79:98:6b
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUECtt9rrTIalWxC/40FZGM07XCl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yNDA0MjMyMDQyMTJaFw0yNTA0MjIyMDQ3MTJaMDMxMTAvBgNV
BAMTKDBCOTc5M0RCNUQ0MzgzRDVFQjkzMjlENEFGQjU2NTZCMzREMjJEOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXUM6JkW8h4hQhb4QjHsZSaU0
WVZA794blYwq2F/tX90YnyHnFQsGUbpSKVDKkmyvjrVueOI0jE7pzmCfoVaYO3bZ
wEix4O7I+JGSLQkgSBk4Zj5VBO/aBxnKqyXvAOr83COyvS/q4KOQpObYArnHwcTq
EIvDLGZ+v/JDsv3fp6Rq2m1sWWlS0x3LQXVMv9zAQiCjGnB3kFl+PJeIGWkOox28
AAlJDrLQkRlaB8l+NoOyxN/iSlqJNVoze3qd9aiaIANgdMMXMn3aQwA/ICDN22Cm
W7PF09Pzhl+xn4P6KnYUfSo4K4cVRVjyMouxioT8KhmdyFJ9Rx8IwiSNgSR3AgMB
AAGjggIwMIICLDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLl5PbXUOD1euT
KdSvtWVrNNItkjAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2
LnR3L3Jwa2kvQXVndXN0LzUvNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0Mw
NUJGRDk5RjNFNi5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCgGCCsGAQUFBzAFhhxy
c3luYzovL3Jwa2kuY28vcmVwby9DdWJlLzEvMFQGCCsGAQUFBzAKhkhyc3luYzov
L3Jwa2kuY28vcmVwby9DdWJlLzEvMEI5NzkzREI1RDQzODNENUVCOTMyOUQ0QUZC
NTY1NkIzNEQyMkQ5Mi5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5ycGtp
LmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdR/owDQYJKoZIhvcN
AQELBQADggEBAFEGX3Vfks6CyKd/SaaLp/XGYxRW8H+Q8q9pWN8HPR0ZKx7N5gS3
3Dz7YZCrVyn/ZCCq0WRpiUXR8OAlW2EMyxV15N/GJbgG61cOFPGJsoNNzBg3ov5u
nr7TPo1jIeS1PlI8dGRwNrHscR4lw7ajTa6Q1pKnJfRFbpaR0yVqalzm+vtVmqZ+
8dl3JA3YjaKdR5B5v4Hi2q+GgEM/Y/IPxOUpGce81UcH4ie9Ahkp3fqjG8z0Rf0K
ULaTQnVCRi6QDBTUCtEVlAOT8ifBloU5S3+xA5p3UpkkNpDu4CDW3o5FrJiaPd6a
VZnoCU/Im38xmZJlxu2dqc7G0zbuGNp5mGs=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:07 2024 by rpki-client on console-ams.rpki-client.org