![](/console.gif)
Certificate
$ rpki-client -vvf rpki.co/repo/AS945/1/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer
File: CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.cer (raw, json)
Hash identifier: Q5WAczPmU75S7Y7NEXfF5zRCVJJNo1sKu6t2s9WK9po=
Subject key identifier: CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 7FFF78300CDC6CF46A03529D6A1F01A9D16F4F83
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest: rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
caRepository: rsync://rpki.co/repo/AS203843/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Tue 23 Apr 2024 17:47:18 +0000
Certificate not after: Tue 22 Apr 2025 17:52:18 +0000
Subordinate resources: IP: 2a12:dd47:8047::/48
IP: 2a12:dd47:80e4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ff:78:30:0c:dc:6c:f4:6a:03:52:9d:6a:1f:01:a9:d1:6f:4f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Apr 23 17:47:18 2024 GMT
Not After : Apr 22 17:52:18 2025 GMT
Subject: CN=CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:b6:6f:b8:fb:f4:a3:d5:b9:5c:75:83:de:
78:b5:e1:2c:a6:88:ea:e1:b7:de:55:d5:96:bf:d2:
a3:ed:a9:98:33:ea:96:5d:9d:12:f8:13:cf:eb:43:
36:38:1c:c7:4a:90:e0:10:38:01:14:23:8c:76:1b:
83:00:20:e2:f7:1e:8a:03:20:1d:37:9a:15:66:4c:
52:2f:30:43:ff:ce:ad:82:85:03:37:68:ab:4a:fc:
43:5e:6b:7d:2a:b9:33:cd:cc:ee:24:e8:41:a7:53:
d8:91:29:94:78:4c:6b:45:70:78:3e:b3:b6:9a:ed:
d4:3e:e8:eb:83:f9:38:8e:1d:93:07:13:4c:88:3b:
ff:64:44:fb:26:66:71:3a:fa:be:c1:07:2a:61:98:
70:25:a1:f8:34:52:a7:b0:73:fe:f7:0f:9a:f1:05:
64:dd:f3:33:ab:87:10:d9:cc:9c:5f:80:2f:d5:0e:
b0:b7:be:ab:77:2a:01:5b:89:4b:45:2f:f1:19:7b:
38:d7:89:6f:0a:bd:1f:a8:75:11:37:6a:af:41:d2:
bc:e5:f8:47:da:61:cf:a2:23:31:ea:6c:05:6c:43:
06:9a:d7:01:41:bd:59:8c:f9:48:64:e3:15:4c:82:
c9:00:c6:4c:d1:64:5b:b0:df:cf:b1:b1:64:c3:cf:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:67:25:68:ED:AF:D0:43:AC:C9:C2:B6:93:C6:F2:BF:9D:F6:42:FE
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS203843/0/
RPKI Manifest - URI:rsync://rpki.co/repo/AS203843/0/CD672568EDAFD043ACC9C2B693C6F2BF9DF642FE.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8047::/48
2a12:dd47:80e4::/48
Signature Algorithm: sha256WithRSAEncryption
d5:29:9a:6a:0e:64:0c:51:79:ee:90:29:14:67:de:ec:35:4f:
ea:30:fc:a3:dd:85:5c:8d:1f:86:0a:dd:e7:35:64:ed:c9:b0:
e1:c1:37:4b:5b:67:2c:89:51:45:d5:93:70:3e:64:23:32:15:
47:6f:40:dd:c4:f9:87:04:1d:8e:48:55:a2:8b:47:b4:91:1f:
60:a8:b0:2d:7f:b5:6f:ea:c7:3b:f2:48:b1:9a:90:01:4f:9d:
c5:21:c2:e8:1e:6e:08:d7:fc:7a:6b:8c:cb:f8:b9:bd:8b:2f:
8d:31:d7:7a:26:99:c3:77:5a:fb:ce:8f:c4:01:f9:79:da:3a:
9c:dc:18:8e:bb:48:1f:a0:07:ec:79:1a:d7:fb:2b:16:55:2d:
8f:1b:e3:fd:8a:90:32:1a:e2:a5:1c:4e:b5:8c:e2:5f:07:31:
a9:0b:47:37:2a:d9:56:4c:13:53:61:a1:38:41:b1:0d:2a:a0:
89:36:91:47:66:db:0a:5e:f7:2d:a8:98:6e:56:4f:c7:a9:7c:
56:4b:ac:d5:63:02:2e:44:c1:12:05:bf:f7:02:4f:0b:aa:6d:
55:b8:b8:4f:d3:d7:d4:1a:1f:1f:c8:b4:8c:00:92:0d:9e:97:
9d:62:94:85:27:1a:b4:0c:00:da:55:66:85:71:09:bf:6c:92:
82:ad:5e:10
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUf/94MAzcbPRqA1Kdah8BqdFvT4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yNDA0MjMxNzQ3MThaFw0yNTA0MjIxNzUyMThaMDMxMTAvBgNV
BAMTKENENjcyNTY4RURBRkQwNDNBQ0M5QzJCNjkzQzZGMkJGOURGNjQyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GbZvuPv0o9W5XHWD3ni14Sym
iOrht95V1Za/0qPtqZgz6pZdnRL4E8/rQzY4HMdKkOAQOAEUI4x2G4MAIOL3HooD
IB03mhVmTFIvMEP/zq2ChQM3aKtK/ENea30quTPNzO4k6EGnU9iRKZR4TGtFcHg+
s7aa7dQ+6OuD+TiOHZMHE0yIO/9kRPsmZnE6+r7BByphmHAlofg0Uqewc/73D5rx
BWTd8zOrhxDZzJxfgC/VDrC3vqt3KgFbiUtFL/EZezjXiW8KvR+odRE3aq9B0rzl
+EfaYc+iIzHqbAVsQwaa1wFBvVmM+Uhk4xVMgskAxkzRZFuw38+xsWTDzx17AgMB
AAGjggJCMIICPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNZyVo7a/QQ6zJ
wraTxvK/nfZC/jAfBgNVHSMEGDAWgBRmBCicfjngjhrhJVzuc8Bb/Znz5jAOBgNV
HQ8BAf8EBAMCAQYwWgYDVR0fBFMwUTBPoE2gS4ZJcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVM5NDUvMS82NjA0Mjg5QzdFMzlFMDhFMUFFMTI1NUNFRTczQzA1QkZEOTlG
M0U2LmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2
LnR3L3Jwa2kvQXVndXN0LzUvNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0Mw
NUJGRDk5RjNFNi5jZXIwgdAGCCsGAQUFBwELBIHDMIHAMCwGCCsGAQUFBzAFhiBy
c3luYzovL3Jwa2kuY28vcmVwby9BUzIwMzg0My8wLzBYBggrBgEFBQcwCoZMcnN5
bmM6Ly9ycGtpLmNvL3JlcG8vQVMyMDM4NDMvMC9DRDY3MjU2OEVEQUZEMDQzQUND
OUMyQjY5M0M2RjJCRjlERjY0MkZFLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9y
cmRwLnJwa2kuY28vcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqEt1HgEcD
BwAqEt1HgOQwDQYJKoZIhvcNAQELBQADggEBANUpmmoOZAxRee6QKRRn3uw1T+ow
/KPdhVyNH4YK3ec1ZO3JsOHBN0tbZyyJUUXVk3A+ZCMyFUdvQN3E+YcEHY5IVaKL
R7SRH2CosC1/tW/qxzvySLGakAFPncUhwugebgjX/HprjMv4ub2LL40x13ommcN3
WvvOj8QB+XnaOpzcGI67SB+gB+x5Gtf7KxZVLY8b4/2KkDIa4qUcTrWM4l8HMakL
Rzcq2VZME1NhoThBsQ0qoIk2kUdm2wpe9y2omG5WT8epfFZLrNVjAi5EwRIFv/cC
TwuqbVW4uE/T19QaHx/ItIwAkg2el51ilIUnGrQMANpVZoVxCb9skoKtXhA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:14 2025 by rpki-client