Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
File: nWILRckJhQasS_EYS-5s2-nXHEw.cer (raw, json)
Hash identifier: c07Gh2DYX3BxWTCAYMCz8LpGaoSRZfh9PYLvskm+bwo=
Subject key identifier: 9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019363577BA84F7DD0B6951965C7E4039FBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
caRepository: rsync://dev.tw/rpki/August/5/
Notify URL: https://dev.tw/rpki/notification.xml
Certificate not before: Mon 25 Nov 2024 12:41:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.116.227.0/24
IP: 2a12:dd40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:57:7b:a8:4f:7d:d0:b6:95:19:65:c7:e4:03:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 25 12:41:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d620b45c9098506ac4bf1184bee6cdbe9d71c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:aa:89:ed:8d:08:f6:63:d4:07:8b:5d:83:
cb:c5:f5:04:51:22:04:62:20:56:f6:0f:11:25:c9:
82:42:70:94:58:bf:6b:48:f9:77:95:44:b6:dd:35:
0f:69:2b:f3:ca:54:1c:2a:00:c0:3a:2b:e8:3a:78:
36:18:82:18:cb:8f:bb:00:a4:3e:6c:1c:b3:ad:81:
8e:66:3a:39:b1:3d:55:67:1a:2b:c2:bc:e8:af:7b:
2f:44:b1:2d:33:6d:76:12:4d:68:3c:d9:be:38:e1:
b7:08:97:c1:14:57:2b:df:72:3e:84:ec:95:42:df:
dc:e6:60:34:1d:4b:96:b0:58:68:b6:ef:f4:2a:64:
ad:c0:0d:9b:4a:e5:ed:7d:28:f4:10:92:e5:ef:04:
5c:8b:30:2a:5a:8d:59:c2:1c:1b:ca:4c:1c:1d:0b:
e3:05:6f:07:de:ba:4e:3b:c7:b7:b4:56:86:f0:f5:
8b:81:dd:8b:e7:04:e8:0f:65:31:02:b1:32:cb:31:
dc:80:68:3c:fb:0a:87:13:a8:44:83:b9:85:47:ee:
66:56:89:63:d9:88:d7:e5:f5:3c:91:89:83:ef:64:
2e:97:01:4b:e9:cb:1b:6f:c0:c0:59:7a:94:ee:7d:
47:18:ee:f5:59:04:80:8f:19:df:4d:ee:98:79:6f:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:0B:45:C9:09:85:06:AC:4B:F1:18:4B:EE:6C:DB:E9:D7:1C:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://dev.tw/rpki/August/5/
RPKI Manifest - URI:rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
RPKI Notify - URI:https://dev.tw/rpki/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.227.0/24
IPv6:
2a12:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
80:91:6c:50:7f:0f:d1:f0:96:a4:7b:81:43:1f:54:fe:2c:57:
9c:d4:97:3c:03:2e:07:97:3d:04:2b:7c:cd:ee:98:15:c4:08:
e6:79:e0:78:c2:57:60:fc:5b:a5:31:3c:03:d7:15:ae:15:3e:
5c:c6:7a:82:71:6b:1a:5e:bc:c9:cc:a1:90:47:b3:08:37:65:
66:df:ce:ed:07:e5:c8:b8:c9:09:0c:76:b9:9e:f2:39:a2:fe:
cf:a7:38:73:49:42:26:0c:ed:34:1f:ab:cc:71:f7:4a:b6:47:
cf:08:15:7c:54:44:1d:fb:32:58:20:cc:f8:25:85:73:93:34:
af:b5:b1:63:7d:4d:80:ba:95:b1:80:5b:0a:04:c7:4d:c5:c3:
a1:4c:db:91:40:14:c0:fa:13:70:fe:3c:4d:d3:3d:63:75:50:
13:39:e0:91:28:1d:48:74:f6:57:c1:46:b5:27:1f:20:56:a1:
a5:94:72:c6:4e:2c:2c:75:d1:06:5d:d4:74:13:5b:4a:f8:57:
7c:a2:86:93:c3:32:09:28:f7:0c:12:0f:e9:8e:7a:24:85:c9:
da:7c:c8:f1:76:68:eb:33:46:61:be:6f:41:a2:e6:9a:5e:9a:
6f:e4:85:7a:ab:17:04:0b:93:b3:6a:41:1f:08:56:98:44:25:
7b:63:c7:6f
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZNjV3uoT33QtpUZZcfkA5+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTI1MTI0MTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDYyMGI0NWM5MDk4NTA2YWM0YmYxMTg0YmVlNmNkYmU5ZDcxYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsiqie2NCPZj1AeLXYPLxfUEUSIE
YiBW9g8RJcmCQnCUWL9rSPl3lUS23TUPaSvzylQcKgDAOivoOng2GIIYy4+7AKQ+
bByzrYGOZjo5sT1VZxorwrzor3svRLEtM212Ek1oPNm+OOG3CJfBFFcr33I+hOyV
Qt/c5mA0HUuWsFhotu/0KmStwA2bSuXtfSj0EJLl7wRcizAqWo1ZwhwbykwcHQvj
BW8H3rpOO8e3tFaG8PWLgd2L5wToD2UxArEyyzHcgGg8+wqHE6hEg7mFR+5mVolj
2YjX5fU8kYmD72QulwFL6csbb8DAWXqU7n1HGO71WQSAjxnfTe6YeW/xzQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJ1iC0XJCYUGrEvxGEvubNvp1xxMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcQGCCsGAQUFBwELBIG3MIG0MCkGCCsGAQUFBzAFhh1yc3lu
YzovL2Rldi50dy9ycGtpL0F1Z3VzdC81LzBVBggrBgEFBQcwCoZJcnN5bmM6Ly9k
ZXYudHcvcnBraS9BdWd1c3QvNS85RDYyMEI0NUM5MDk4NTA2QUM0QkYxMTg0QkVF
NkNEQkU5RDcxQzRDLm1mdDAwBggrBgEFBQcwDYYkaHR0cHM6Ly9kZXYudHcvcnBr
aS9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwnTjMA0EAgACMAcDBQMqEt1AMA0GCSqGSIb3
DQEBCwUAA4IBAQCAkWxQfw/R8Jake4FDH1T+LFec1Jc8Ay4Hlz0EK3zN7pgVxAjm
eeB4wldg/FulMTwD1xWuFT5cxnqCcWsaXrzJzKGQR7MIN2Vm387tB+XIuMkJDHa5
nvI5ov7PpzhzSUImDO00H6vMcfdKtkfPCBV8VEQd+zJYIMz4JYVzkzSvtbFjfU2A
upWxgFsKBMdNxcOhTNuRQBTA+hNw/jxN0z1jdVATOeCRKB1IdPZXwUa1Jx8gVqGl
lHLGTiwsddEGXdR0E1tK+Fd8ooaTwzIJKPcMEg/pjnokhcnafMjxdmjrM0Zhvm9B
ouaaXppv5IV6qxcEC5OzakEfCFaYRCV7Y8dv
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:29 2025 by rpki-client