Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
File:                     OzCltkdeDqkkVy8si9JDiBXHEIE.cer (raw, json)
Hash identifier:          /TOnin0nwJLiBEVPyauE3T0dkJVbTUuGtDdQ+DFx4Lg=
Subject key identifier:   3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01836A851B4346858D9A8513DC27C970CCBB
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.mft
caRepository:             rsync://rpki.august.tw/repo/localname/6
Notify URL:               https://rpki.august.tw/rrdp/notification.xml
Certificate not before:   Fri 23 Sep 2022 13:24:11 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 47449
                          AS: 50058
                          AS: 202736
                          IP: 2001:67c:a80::/48
                          IP: 2001:67c:a84::/48
                          IP: 2001:67c:a88::/48
                          IP: 2001:67c:a8c::/48
                          IP: 2001:67c:a90::/48
                          IP: 2001:67c:a94::/48
                          IP: 2001:67c:a98::/48
                          IP: 2001:67c:a9c::/48
                          IP: 2001:67c:aa0::/48
                          IP: 2a12:dd40::/29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6a:85:1b:43:46:85:8d:9a:85:13:dc:27:c9:70:cc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Sep 23 13:24:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:f6:6a:de:fa:17:4b:89:c2:18:21:ee:8d:
                    c8:3a:f6:42:19:47:c4:81:98:45:27:c8:35:45:59:
                    de:86:7a:f8:a5:53:ce:f8:54:df:ba:24:cf:af:a1:
                    89:29:c2:52:50:0c:a7:ee:05:82:8b:1b:94:f6:04:
                    be:3a:42:ee:76:c1:07:ec:d1:ef:27:5f:6c:58:9e:
                    ed:8e:d5:d9:8e:08:93:c3:99:38:f3:9a:a0:bf:bb:
                    38:cd:f7:ce:61:52:d9:ec:23:f6:fe:3d:5f:ee:eb:
                    fb:b5:fd:be:69:c0:18:a3:a0:5a:00:a7:c2:8b:34:
                    a8:5c:46:a0:54:1d:c2:a3:4b:54:95:d5:74:e9:d8:
                    a3:3e:3b:67:d0:b3:9f:68:1f:a2:cf:97:20:f9:00:
                    18:43:65:a4:70:e9:dd:c4:4d:b9:cd:b5:04:1a:2e:
                    ee:55:88:d3:11:1a:76:8f:7f:b9:ce:09:14:4d:99:
                    77:fd:76:53:23:70:a0:9a:e0:84:61:e4:ca:fb:2d:
                    84:ee:e9:41:63:e8:12:c8:37:19:15:e1:f1:ff:04:
                    70:ce:ba:4a:9f:01:7d:8c:bf:ae:0f:76:7f:c5:5b:
                    04:39:e4:cf:04:8b:f1:b2:00:0e:36:3c:33:64:a3:
                    28:45:e2:75:fc:2a:f8:10:2d:b6:59:ed:d9:3a:95:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.august.tw/repo/localname/6
                RPKI Manifest - URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.mft
                RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a80::/48
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47449
                  50058
                  202736

    Signature Algorithm: sha256WithRSAEncryption
         7e:97:44:2f:7f:83:d9:b6:be:c2:cf:80:b9:fe:20:09:dc:b5:
         d4:4a:bb:14:88:05:79:a2:8d:44:3b:dd:1b:69:66:e2:e4:69:
         95:1e:9d:00:4e:8b:e1:c5:30:78:67:e9:a2:50:fe:14:c5:af:
         5a:1a:69:c1:2c:05:10:5e:21:6b:63:bd:87:f3:eb:63:4c:f4:
         13:59:32:0e:80:c3:13:7d:c7:48:41:15:31:85:f6:c4:77:a7:
         9e:24:c4:f0:7a:b4:21:1a:b9:23:14:c3:07:3a:0b:85:f0:9e:
         db:46:8c:91:f7:20:89:f0:1b:6b:e9:4a:8c:33:f4:8e:09:b7:
         b4:f0:9e:36:e3:4c:b9:3e:46:19:b1:93:f2:85:cc:20:16:f3:
         07:d2:b0:71:70:8b:05:07:9f:12:ce:e9:c9:d0:8f:a1:95:ce:
         14:fe:1c:2f:f3:17:1a:97:03:f9:3e:b0:e9:90:da:0e:60:4a:
         30:82:8c:7a:c5:a9:af:36:e4:b5:e3:ba:33:0d:43:fe:96:0c:
         56:11:de:fa:94:d8:49:2e:83:db:87:73:01:90:6f:58:a6:a7:
         a1:ed:4f:c4:df:91:b1:f3:8f:c8:eb:58:7a:97:1d:4e:a2:24:
         99:b4:66:08:80:a5:9b:57:e9:74:cb:81:c4:c8:64:e7:b3:72:
         28:df:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----