Certificate

$ rpki-client -vvf rpki.co/repo/AS945/5/B05B9A671551176C23DA01A5FA4056943F58AA56.cer
File:                     B05B9A671551176C23DA01A5FA4056943F58AA56.cer (raw, json)
Hash identifier:          OvYUnmEkZbVFl02cBrLwVZkdTTzl85CDFMXefJtvWFw=
Subject key identifier:   B0:5B:9A:67:15:51:17:6C:23:DA:01:A5:FA:40:56:94:3F:58:AA:56
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       3C914C968D36F5819F8887E2E96B1140F4775BE1
Authority info access:    rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Manifest:                 rsync://rpki.co/repo/AS199203/1/B05B9A671551176C23DA01A5FA4056943F58AA56.mft
caRepository:             rsync://rpki.co/repo/AS199203/1/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 01:04:05 +0000
Certificate not after:    Wed 12 Feb 2025 01:09:05 +0000
Subordinate resources:    IP: 2a13:c007:8020::/44

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl
                          rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.mft
                          rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:91:4c:96:8d:36:f5:81:9f:88:87:e2:e9:6b:11:40:f4:77:5b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Feb 14 01:04:05 2024 GMT
            Not After : Feb 12 01:09:05 2025 GMT
        Subject: CN=B05B9A671551176C23DA01A5FA4056943F58AA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:1e:0d:5c:20:79:73:5c:81:a1:23:a0:b8:
                    70:f6:93:35:03:aa:22:24:8a:60:21:76:2f:06:85:
                    d7:f1:65:33:cd:9b:76:c6:b6:1a:06:75:82:8a:39:
                    0b:a8:f2:c9:c6:2a:cc:7b:51:b3:1e:c4:51:18:1c:
                    e9:5d:e7:9c:c4:d2:4f:99:c9:24:8b:23:b3:94:d2:
                    91:7a:39:9b:af:bc:68:12:81:ad:6c:61:15:c7:b0:
                    8e:d9:17:d4:64:06:90:05:bf:59:ae:c9:06:6d:db:
                    6f:ad:f2:aa:0e:bf:ee:20:c8:90:78:52:b4:68:8d:
                    8c:98:7b:a3:d5:55:c1:6f:d7:6d:65:56:53:93:e1:
                    24:42:e1:e6:78:1a:fe:47:4f:8c:1b:67:9b:cf:d6:
                    4b:27:e4:7c:5a:06:dd:99:b1:ed:05:77:76:12:38:
                    4f:f0:65:49:dc:a5:44:8e:0e:54:02:d5:7f:92:13:
                    55:70:b7:5e:5e:16:da:e3:30:5f:1b:19:2c:cc:82:
                    ef:b5:2e:6b:06:4d:d9:b5:de:c8:8e:5d:7f:c1:62:
                    3f:92:87:18:45:49:41:f0:75:dd:fd:f2:33:87:f0:
                    16:bb:9a:89:6f:e4:17:df:12:7b:4c:da:0b:23:70:
                    e3:03:89:08:89:09:f9:16:f9:4d:ea:fc:a6:ea:d7:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:5B:9A:67:15:51:17:6C:23:DA:01:A5:FA:40:56:94:3F:58:AA:56
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS199203/1/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS199203/1/B05B9A671551176C23DA01A5FA4056943F58AA56.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:19:4c:7e:c5:e2:48:d7:6c:a7:eb:f7:05:cb:50:d3:52:
         9b:71:ce:a7:f9:f1:fb:a3:97:7b:ee:c6:46:e1:e8:07:b4:1e:
         86:c5:2e:b9:77:64:fc:33:9a:74:13:c9:b9:e8:f3:5f:da:ca:
         ff:ea:2e:37:e3:eb:c8:6e:27:0c:90:a1:ff:3c:45:d4:3c:ea:
         c0:dd:a2:55:cb:fb:c0:76:77:6c:93:48:ee:5f:97:69:2a:9d:
         4e:3e:7f:b6:93:7f:9e:ae:61:e5:b3:07:8b:d6:12:fb:29:78:
         11:52:03:0a:81:c9:de:b7:56:76:2e:f0:a9:42:08:c6:bd:6b:
         da:54:a3:c4:24:d6:95:36:96:14:e8:74:f2:75:06:79:4d:b6:
         12:5a:6f:b4:84:c2:48:12:5d:cc:73:df:60:9b:39:2d:15:92:
         e4:bf:5f:05:f8:51:ca:08:4b:ce:fe:67:f4:b3:9e:38:f8:f6:
         3c:45:88:4a:e0:68:79:de:42:05:08:bd:ea:a7:e4:48:5b:8f:
         51:01:5f:33:e8:a5:62:e8:96:60:f5:21:75:27:a7:a5:aa:6b:
         a1:f8:b2:d6:56:f2:f6:91:a7:f9:09:00:13:b8:a3:d5:26:ba:
         97:57:09:99:93:f5:18:fc:f5:6c:8b:c5:f8:08:79:e4:f2:bb:
         77:21:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:23:15 2024 by rpki-client on console-ams.rpki-client.org