Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
File: 34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer (raw, json)
Hash identifier: eQgZQQwWeyaggyVM5AUN4x21ZOTLjdrl41antc+57QY=
Subject key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 2222D4C886E74E206D752A496F2D58F4DD263A16
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 23 Nov 2023 05:50:51 +0000
Certificate not after: Thu 21 Nov 2024 05:55:51 +0000
Subordinate resources: IP: 2a12:dd47:802c::/46
IP: 2a12:dd47:8230::/44
IP: 2a12:dd47:8400::/40
Validation: OK
Signature path: rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:22:d4:c8:86:e7:4e:20:6d:75:2a:49:6f:2d:58:f4:dd:26:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Nov 23 05:50:51 2023 GMT
Not After : Nov 21 05:55:51 2024 GMT
Subject: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:72:3e:89:00:b2:cb:30:2a:54:7a:b5:1f:
e6:ab:16:9f:bc:0b:4d:12:e9:86:f7:f7:d6:78:ce:
a3:00:12:93:08:4a:53:d6:07:ff:b1:c8:73:78:c5:
7c:3a:6a:a2:b4:6b:d4:4b:2e:55:3a:7b:ad:c4:af:
17:a8:94:ad:94:81:c7:f3:47:7f:dc:e8:27:57:42:
9f:b4:f8:fc:d6:b5:6e:15:a8:11:61:6d:3d:7b:68:
4c:b7:4f:59:5e:27:c6:19:1f:a9:c6:7a:95:6e:dc:
c5:03:84:a3:59:5f:cc:a0:c6:47:82:4b:a4:bb:f0:
27:95:0f:03:a4:a8:f6:a6:3d:b9:4d:c7:92:68:f6:
e9:fa:9a:dd:92:d1:06:ee:b5:d1:bb:f7:de:36:c0:
5d:c1:b9:1d:c3:a4:ff:93:ef:35:81:19:65:e7:98:
d4:33:84:18:b5:e2:36:4f:35:1b:02:bb:86:87:f7:
64:11:63:89:c2:23:df:15:a7:d3:f2:0c:fa:bb:7e:
b4:5e:f6:3d:5e:e5:bf:e8:06:e2:86:dc:38:51:8e:
2a:37:40:4e:ab:e2:d6:40:e2:5b:1c:5a:48:69:84:
1c:c6:0d:85:89:2f:13:73:97:95:b4:e2:83:fc:fc:
d0:cc:d9:72:76:c1:b8:57:32:d2:56:dd:46:d9:03:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:802c::/46
2a12:dd47:8230::/44
2a12:dd47:8400::/40
Signature Algorithm: sha256WithRSAEncryption
47:55:73:88:76:7e:46:7d:97:c8:0e:67:78:5a:53:62:23:c9:
a3:13:8c:ec:7c:66:34:fe:ef:19:38:80:97:8b:33:3a:ad:4d:
d4:01:db:81:02:9d:66:8c:ab:8a:76:72:cc:52:59:57:7b:45:
f5:29:6b:ea:8a:82:54:57:e9:2c:80:07:8a:df:93:d8:ed:20:
81:be:17:1d:b1:ec:ca:ee:04:dc:7f:51:e0:7e:56:3b:2c:ef:
16:43:30:d1:a2:fb:a0:00:5c:a6:34:3a:a4:fe:8f:92:f0:06:
46:29:f8:06:ef:a3:4f:81:67:d5:b7:cc:ff:08:10:be:20:89:
32:25:39:e3:80:59:0e:0c:5b:07:62:cb:3b:a8:a2:5e:b0:d4:
6f:5e:1e:5e:2b:0e:a9:b4:61:7f:e9:78:9e:61:bb:b1:16:af:
97:53:8d:14:44:15:ed:9b:95:59:22:2f:90:d1:f1:7e:f8:aa:
19:7c:5f:d7:23:df:e1:d1:1c:9f:53:94:a1:0c:fd:09:b1:ec:
7e:e8:1b:39:ac:65:2e:fb:07:66:94:37:09:0d:e1:a6:ef:76:
0b:9f:97:98:26:67:e1:6b:4f:30:55:e8:1e:43:51:7f:18:4c:
b5:0a:0a:9e:58:a9:58:08:01:90:6d:9e:aa:87:a3:ab:01:5a:
8c:9d:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:40:11 2024 by rpki-client on console-fra.rpki-client.org