Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer
File:                     95A38A1816A990804357FCAC49C09B0CA3A221E5.cer (raw, json)
Hash identifier:          CYsxzS/Das0quO47THTMK1s9Rh8MbqdaTvCPzUG1S5U=
Subject key identifier:   95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7F51096C662EC768CC7B598D5D25BBC9FBDA7917
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
caRepository:             rsync://rpki.co/repo/AS199203/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 23:52:04 +0000
Certificate not after:    Mon 27 Jan 2025 23:57:04 +0000
Subordinate resources:    IP: 2a12:dd47:3000::/40

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:51:09:6c:66:2e:c7:68:cc:7b:59:8d:5d:25:bb:c9:fb:da:79:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jan 29 23:52:04 2024 GMT
            Not After : Jan 27 23:57:04 2025 GMT
        Subject: CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:6e:94:15:3a:99:61:87:69:41:b1:68:96:
                    27:98:fb:93:22:87:8f:bf:f7:55:99:66:c5:8a:92:
                    de:29:a5:62:13:e5:18:e7:ba:16:df:ee:49:4d:3e:
                    f8:db:99:e1:1b:18:91:69:60:f4:48:da:41:06:12:
                    40:3d:5d:35:93:c6:e4:ac:65:f6:77:84:d4:24:0f:
                    90:8d:92:ae:52:d9:f5:da:e7:61:e7:af:73:68:ea:
                    70:0a:4c:d2:b4:13:d6:2e:f5:5a:f1:f3:09:19:c1:
                    b5:63:a9:9a:0e:c8:c0:a0:0b:fa:a6:8e:3a:46:b0:
                    e7:d9:b9:a2:35:3e:0b:56:3a:53:c4:d4:19:f7:aa:
                    e9:56:b9:4e:7b:96:cf:5d:d4:f6:e5:4d:58:ee:1c:
                    76:cc:62:90:db:d5:11:41:dd:e0:43:7c:7c:47:7b:
                    d1:0b:2a:1a:58:e2:f8:7e:ac:7b:ed:99:d9:b9:23:
                    3e:05:ab:c7:0f:37:b6:9f:03:21:17:15:ba:39:fd:
                    90:14:18:70:60:aa:4a:23:56:0d:00:1d:b6:a3:f9:
                    45:a4:c1:81:c4:1a:b6:71:95:02:6d:40:b4:ca:38:
                    72:88:62:31:ae:98:af:14:a5:ee:76:59:dc:32:97:
                    ad:59:08:27:f0:b2:2d:15:57:9c:4c:c0:ef:7e:d2:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS199203/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:99:a8:68:cc:be:92:15:21:fd:e2:2e:ac:e9:e5:3e:e1:b4:
         4d:b2:c6:18:ac:59:a2:51:79:e3:be:04:31:f4:51:af:84:2b:
         31:7f:a5:e8:f0:35:19:78:11:4b:a4:5f:bf:c7:ce:9f:14:da:
         49:b0:5d:60:2d:4f:66:3f:f4:42:20:77:f8:ea:ee:50:ac:1b:
         1b:11:c5:e7:65:4b:3e:5f:63:60:02:ed:83:94:e7:5f:8f:6a:
         70:fc:7a:aa:26:44:81:16:b1:16:05:e2:30:0a:6d:46:0d:dc:
         13:42:68:21:33:b3:20:b2:f2:84:d1:ef:7e:1c:94:7a:1c:f2:
         88:a0:11:fd:20:9e:e1:54:43:62:84:75:b0:a7:0d:e4:e8:7a:
         01:30:68:d4:4c:55:b5:71:9f:41:a0:57:21:86:5c:69:d7:90:
         10:de:cc:3b:31:b5:07:d2:6f:89:47:53:49:53:98:b6:1f:72:
         6b:07:95:78:38:3c:f7:d8:7e:63:65:98:0f:5e:1c:b5:48:87:
         c7:75:7f:e0:b7:2d:06:6b:b6:88:47:af:db:5d:2e:a4:fa:3e:
         c1:74:49:62:f4:47:fc:7b:a0:c3:49:8a:8f:0f:46:59:31:db:
         85:3d:14:09:2d:90:9a:21:2a:77:1f:a9:eb:82:46:cd:ff:34:
         dd:9a:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org