Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/40C513034911811188EE6887BB01091E1FE7EE0D.cer
File:                     40C513034911811188EE6887BB01091E1FE7EE0D.cer (raw, json)
Hash identifier:          V+RHtFGz4W54klJhX4WRqCC/qiJ0NQ5MLppsJdX3Pxc=
Subject key identifier:   40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       25FF80C9FDDAD630711B0664C68BD021675681AB
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
caRepository:             rsync://rpki.co/repo/Simple/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 02:21:35 +0000
Certificate not after:    Wed 23 Oct 2024 02:26:35 +0000
Subordinate resources:    IP: 2a12:dd46:1000::/36
                          IP: 2a12:dd47:f200::/40

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ff:80:c9:fd:da:d6:30:71:1b:06:64:c6:8b:d0:21:67:56:81:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 25 02:21:35 2023 GMT
            Not After : Oct 23 02:26:35 2024 GMT
        Subject: CN=40C513034911811188EE6887BB01091E1FE7EE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f1:44:a3:16:26:5c:f9:49:43:8d:1f:51:77:
                    03:e6:ca:57:b7:ca:f3:7c:09:8e:28:f6:83:96:8b:
                    ad:0e:22:f1:6f:23:d9:9d:97:d4:a5:6f:68:24:82:
                    65:db:c2:86:c0:4f:6d:89:97:23:16:bd:31:32:32:
                    3e:f1:e1:be:d4:20:af:0e:88:e9:8c:b5:64:fb:32:
                    0f:8a:08:be:ff:ef:9b:dc:e2:48:97:aa:7a:71:88:
                    9d:1b:27:ea:93:51:69:11:b0:90:53:8a:e4:7e:f7:
                    f5:bb:7c:e5:17:dd:cf:1e:de:b3:0d:5b:53:69:2b:
                    a9:fe:d5:cd:47:f2:51:46:fa:0a:59:60:3d:e9:d6:
                    9f:e6:fa:f2:37:57:7c:27:25:2e:4a:f8:cc:4e:12:
                    73:63:f6:79:bb:3d:35:66:15:1b:53:5b:a8:32:ac:
                    e2:7b:fa:ae:ee:3a:b4:99:a1:1d:c1:df:d2:2b:29:
                    2c:09:cc:df:e3:6f:f2:b7:0b:7b:1b:cf:31:a5:fd:
                    04:a8:0e:50:71:e1:9f:9a:78:56:80:02:af:e6:72:
                    c5:17:9c:bc:7d:99:3d:99:6d:19:cf:99:df:e2:f7:
                    bf:5c:73:21:83:f6:8b:98:f9:6c:7d:00:d8:d2:e7:
                    44:b3:b0:0f:72:41:a7:3b:7e:8c:fe:cd:9f:75:e3:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:C5:13:03:49:11:81:11:88:EE:68:87:BB:01:09:1E:1F:E7:EE:0D
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Simple/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/Simple/1/40C513034911811188EE6887BB01091E1FE7EE0D.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd46:1000::/36
                  2a12:dd47:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:69:b8:ab:77:63:e8:40:b3:7e:8d:33:c4:dc:cd:5d:96:3c:
         c2:02:b7:95:8b:8d:ab:0b:01:b8:b9:28:51:74:43:07:53:ad:
         01:4b:d8:e1:00:7c:c3:5a:b8:fe:88:73:f9:fd:4b:71:6b:2e:
         fc:d3:dc:49:ff:eb:3d:a0:2d:c8:b7:cf:ab:10:94:ad:8a:59:
         5e:0f:ba:ec:a6:9e:c6:82:2d:13:d1:4b:32:4f:31:6e:ab:c2:
         66:e7:1c:41:3d:04:a1:34:53:55:8b:53:c0:c0:b3:75:1a:34:
         3e:ac:c8:8a:92:bb:d5:35:e4:1e:69:22:39:cf:d6:bc:cd:99:
         46:b6:f8:3d:dc:a6:1b:2d:95:a5:87:45:13:04:58:67:5d:38:
         e0:65:10:27:79:d2:67:3d:5c:fd:99:e5:99:36:ab:61:e2:7a:
         ec:ec:e4:0c:7c:59:a3:ec:52:60:c8:1d:e3:48:97:92:ff:ed:
         8e:f4:bb:89:a9:67:6d:c0:a3:a7:9f:d0:b4:8b:34:68:9d:ad:
         a0:0d:2f:04:cb:13:72:a0:75:46:a4:37:de:21:c5:73:d4:a2:
         f7:50:5a:d6:95:81:1d:9e:b2:4a:6b:50:63:27:bc:6c:4f:63:
         1e:e1:3b:ac:4e:f4:3e:36:b0:83:d5:80:a6:52:8e:15:3d:6b:
         cc:25:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org