$ rpki-client -vvf rpki.co/repo/AS945/1/103734D89B107354F2D009D6E780AAC0BCE606C0.cer File: 103734D89B107354F2D009D6E780AAC0BCE606C0.cer (raw, json) Hash identifier: 20NmfFIXnwZ7KBwUaCso3gcbz2KIZ/WhlACTYmnDT/4= Subject key identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0 Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6 Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6 Certificate serial: 56E7FE78482562F524B55D48AD96B68D9BA1DFB4 Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 18 Apr 2024 23:12:59 +0000 Certificate not after: Thu 17 Apr 2025 23:17:59 +0000 Subordinate resources: IP: 2a12:dd47:3800::/40 Validation: OK Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 13:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e7:fe:78:48:25:62:f5:24:b5:5d:48:ad:96:b6:8d:9b:a1:df:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6 Validity Not Before: Apr 18 23:12:59 2024 GMT Not After : Apr 17 23:17:59 2025 GMT Subject: CN=103734D89B107354F2D009D6E780AAC0BCE606C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:34:54:49:fe:a6:1a:87:ef:ef:33:ad:10: dd:a3:ae:d8:4a:53:47:9f:a9:b2:82:f6:e8:82:be: c1:51:8c:ba:df:27:95:c5:b3:f8:c0:fe:83:b4:de: be:18:4c:96:ec:f9:8c:59:dc:62:cb:9c:c1:97:45: 7f:71:1a:75:49:8f:29:76:2b:86:53:f4:e0:b6:ec: 60:c7:07:e7:3e:c4:f8:de:09:ba:40:29:67:32:51: 8f:d1:f6:c5:eb:6a:f5:1b:5a:fe:3c:40:5e:d7:62: 7f:01:e6:86:af:a7:7a:9a:0e:af:03:03:06:35:4f: 45:cc:16:48:9e:1d:0f:2c:d4:37:4b:80:d7:e8:01: 59:40:a9:fc:ff:d2:30:68:da:36:8f:8d:5a:4d:fe: fb:c2:50:d9:71:1c:ec:70:7b:d9:e1:54:a4:11:69: d3:0a:a7:80:1e:9f:59:66:f8:09:55:53:d5:67:41: d9:81:a9:ed:e9:3e:21:85:2b:ff:28:43:e7:82:63: 2d:e5:00:04:c9:8e:04:d8:58:cd:a6:59:6d:82:64: 0d:ec:ae:84:84:11:d6:32:6a:2a:b6:38:51:41:c1: 7b:52:d9:db:3c:a3:74:a6:f7:54:f9:06:95:94:58: ed:4b:df:79:d3:1b:09:79:c1:92:99:a3:9e:d0:a9: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:37:34:D8:9B:10:73:54:F2:D0:09:D6:E7:80:AA:C0:BC:E6:06:C0 X509v3 Authority Key Identifier: keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/3/103734D89B107354F2D009D6E780AAC0BCE606C0.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:3800::/40 Signature Algorithm: sha256WithRSAEncryption 21:45:ab:51:eb:c2:ba:9b:5a:28:39:48:19:c6:5b:71:b4:f4: 3f:12:52:be:12:90:50:f8:84:31:a3:33:cf:57:ca:26:db:01: 57:60:e4:60:f8:2a:0f:02:15:a6:f9:c2:61:55:b9:15:0e:24: f6:87:b0:c4:1a:14:25:55:e9:a3:e6:05:78:cb:a0:e8:bb:bc: 8b:5b:69:ff:85:65:db:61:5c:8b:1a:ac:2e:b9:b9:9a:d8:3d: 6b:90:03:3b:43:37:d8:57:37:3a:2c:ff:42:32:6e:56:cf:5c: 64:8d:c8:be:7f:90:94:2a:4c:aa:a3:0d:76:ce:21:e8:83:fe: df:96:9c:f7:5e:81:3f:fe:b3:19:f2:d7:6c:ea:99:05:31:27: 46:68:18:4b:d3:ec:37:28:24:66:75:89:4e:7c:02:da:e1:1b: 33:ff:0e:04:ca:9f:da:e8:50:e3:41:f8:2f:04:4b:7a:67:f0: 13:58:44:3e:8d:f8:79:be:1b:52:aa:25:31:15:9b:78:ae:f7: ee:b6:de:fa:62:01:93:11:b1:06:9f:54:54:91:5d:fd:90:10: b9:61:1e:d9:ef:1b:58:da:cc:83:3c:1a:55:38:c7:74:17:6c: cd:b2:61:e1:75:c3:ec:8e:c2:18:f1:ea:59:fa:a4:10:a2:1b: cb:e3:04:2e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVuf+eEglYvUktV1IrZa2jZuh37QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG RDk5RjNFNjAeFw0yNDA0MTgyMzEyNTlaFw0yNTA0MTcyMzE3NTlaMDMxMTAvBgNV BAMTKDEwMzczNEQ4OUIxMDczNTRGMkQwMDlENkU3ODBBQUMwQkNFNjA2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyTRUSf6mGofv7zOtEN2jrthK U0efqbKC9uiCvsFRjLrfJ5XFs/jA/oO03r4YTJbs+YxZ3GLLnMGXRX9xGnVJjyl2 K4ZT9OC27GDHB+c+xPjeCbpAKWcyUY/R9sXravUbWv48QF7XYn8B5oavp3qaDq8D AwY1T0XMFkieHQ8s1DdLgNfoAVlAqfz/0jBo2jaPjVpN/vvCUNlxHOxwe9nhVKQR adMKp4Aen1lm+AlVU9VnQdmBqe3pPiGFK/8oQ+eCYy3lAATJjgTYWM2mWW2CZA3s roSEEdYyaiq2OFFBwXtS2ds8o3Sm91T5BpWUWO1L33nTGwl5wZKZo57QqdRRAgMB AAGjggKoMIICpDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQNzTYmxBzVPLQ CdbngKrAvOYGwDAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG M0U2LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2 LnR3L3Jwa2kvQXVndXN0LzUvNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0Mw NUJGRDk5RjNFNi5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAF hlNyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Rl N2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8zLzCBiwYIKwYBBQUH MAqGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzMvMTAzNzM0RDg5 QjEwNzM1NEYyRDAwOUQ2RTc4MEFBQzBCQ0U2MDZDMC5tZnQwPAYIKwYBBQUHMA2G MGh0dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnht bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAKhLdRzgwDQYJKoZIhvcNAQELBQADggEBACFFq1HrwrqbWig5SBnG W3G09D8SUr4SkFD4hDGjM89XyibbAVdg5GD4Kg8CFab5wmFVuRUOJPaHsMQaFCVV 6aPmBXjLoOi7vItbaf+FZdthXIsarC65uZrYPWuQAztDN9hXNzos/0IyblbPXGSN yL5/kJQqTKqjDXbOIeiD/t+WnPdegT/+sxny12zqmQUxJ0ZoGEvT7DcoJGZ1iU58 AtrhGzP/DgTKn9roUONB+C8ES3pn8BNYRD6N+Hm+G1KqJTEVm3iu9+623vpiAZMR sQafVFSRXf2QELlhHtnvG1jazIM8GlU4x3QXbM2yYeF1w+yOwhjx6ln6pBCiG8vj BC4= -----END CERTIFICATE-----Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org