Certificate

$ rpki-client -vvf rpki.co/repo/AS945/1/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer
File:                     FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer (raw, json)
Hash identifier:          5JZiKtSc0pnVXpwJUmrzAbGsbAuiQNmKBIvEI3wYvaU=
Subject key identifier:   FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7A2B0E0CB964157C1957507A65B6EDFC0D4C944C
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Manifest:                 rsync://rpki.co/repo/Matt/2/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.mft
caRepository:             rsync://rpki.co/repo/Matt/2/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 Apr 2024 23:11:31 +0000
Certificate not after:    Mon 21 Apr 2025 23:16:31 +0000
Subordinate resources:    IP: 2a12:dd47:b000::/36

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2b:0e:0c:b9:64:15:7c:19:57:50:7a:65:b6:ed:fc:0d:4c:94:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 22 23:11:31 2024 GMT
            Not After : Apr 21 23:16:31 2025 GMT
        Subject: CN=FDA07574EA362EFB2E46B3038EE05A6ACA0BF301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:02:db:89:fe:f1:d9:27:33:e7:7c:ca:2a:
                    22:ea:21:8d:65:1b:dc:d1:a7:33:3c:0a:51:17:08:
                    55:6a:07:12:e9:43:3e:c0:3c:e4:38:68:a6:ad:c7:
                    a8:54:b8:82:4d:a0:4a:b3:c4:20:3e:47:2d:98:9c:
                    d4:ee:64:02:55:91:a8:8a:41:8b:46:47:ff:f6:dd:
                    67:0d:80:45:ff:c7:b6:b1:8b:84:1e:e0:65:ee:47:
                    69:0b:35:29:93:29:55:4c:ad:96:2d:a2:7b:a0:3a:
                    89:7d:54:4e:53:20:89:cb:36:3c:30:96:a1:69:81:
                    22:eb:6d:43:c8:d9:d5:f4:78:af:0f:09:6c:32:25:
                    a9:32:80:d7:11:4c:db:e4:7d:5f:f5:17:17:c7:22:
                    fc:4e:2c:78:f8:cd:ff:42:08:f1:f3:ae:70:22:48:
                    3e:51:1e:90:cd:db:00:42:eb:b8:05:69:89:ec:b4:
                    e4:4e:1c:ff:d8:0a:76:32:2b:af:99:ac:70:20:2f:
                    8d:65:d7:6a:c8:83:c7:64:49:05:1f:d8:9b:5a:9a:
                    01:14:90:56:17:cb:54:f5:42:6c:ef:58:4c:8b:22:
                    bc:61:79:67:eb:38:ab:2b:7e:21:a4:e7:6b:31:bb:
                    76:7f:59:58:48:3e:61:45:5e:f0:47:25:42:81:7c:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Matt/2/
                RPKI Manifest - URI:rsync://rpki.co/repo/Matt/2/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:97:5f:8d:6f:ae:cc:db:ca:cb:25:71:03:e6:f0:a7:88:
         a4:fc:b4:80:ce:6b:1e:30:01:50:7d:5a:33:0e:03:aa:0f:7e:
         38:35:a3:4c:88:dd:b2:d8:fb:2c:fd:c4:d1:30:be:43:b8:b8:
         e4:76:f8:a1:84:d6:1d:62:09:2e:64:e3:1d:4d:fd:d7:71:a3:
         b9:09:ac:e1:79:34:33:16:ba:01:5e:56:1a:96:30:73:e6:18:
         b9:69:42:9e:b6:d6:81:72:9b:af:6c:69:ca:39:e9:7c:48:1b:
         78:e5:3c:af:1b:ca:ef:16:91:42:fd:d2:a2:0c:ec:bf:d1:f3:
         b3:91:aa:4d:fe:f6:c9:1b:05:48:50:0c:04:cb:38:e3:28:84:
         e8:14:ab:ea:31:52:96:90:74:f6:15:c6:c1:9b:12:cb:a4:cf:
         5f:c6:75:72:2f:62:24:42:1c:10:db:40:33:8d:43:4a:75:30:
         2f:28:36:9b:e8:08:5e:6a:36:30:3e:50:27:95:a9:5e:7e:06:
         92:87:6b:06:a7:16:02:63:50:5b:d1:62:58:87:00:39:b0:db:
         34:51:48:81:77:78:b5:ab:1c:6d:e2:ea:ba:4e:e3:d4:f1:89:
         b6:8a:d5:c2:d5:a4:f5:46:e1:5f:c5:47:bd:d1:a2:54:02:ed:
         0f:97:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:01:24 2024 by rpki-client on console-ams.rpki-client.org