Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
File: RPjc9msltxkFbR7WXBbqklflVT0.mft (raw, json)
Hash identifier: IpFUZzBd7AAqaXBzsBSf10XiHF+SVF/xKapVT2O6Oak=
Subject key identifier: 0D:6D:D4:A7:BB:8F:7E:44:C3:ED:CE:0D:2D:AD:14:23:B0:CD:01:DF
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial: 03A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
Manifest number: 039D
Signing time: Fri 31 Jan 2025 17:37:36 +0000
Manifest this update: Fri 31 Jan 2025 17:37:36 +0000
Manifest next update: Fri 31 Jan 2025 23:37:36 +0000
Files and hashes: 1: IL00J-ivuRaGzlJpWy1Bf-YyRQU.roa (hash: dTo6ZI0P2p84fUunBHaZ+OdNTrPxelZ2GqS5lFFhw+4=)
2: RPjc9msltxkFbR7WXBbqklflVT0.crl (hash: zFqnjiTEMs7fO2kbU+ZBiQcCt5P8tSlE37/4AuheEUg=)
3: UJEQ7-2s6XI9kPmDdwVmt_m6npY.roa (hash: olfqE3XHqfN/JLGIYpR+2AgoNpyg0g5q1x90BDHP1hw=)
4: XuAEk7ccPfKGbG0pii_rmDn-1mk.roa (hash: z7NY5CLnow6dVjDWYuft/2GjFA/6RQig7rGfAc64sWQ=)
5: erZeiV1X-Fb2m-I6TjI8Mi47D1s.roa (hash: hOL9oFsZfuNn/12P4ZUIv/wvUX5bp0yOqqriaLHgn5E=)
6: mB5Pg4UjnoVv0MgOp4I1TXqjKpI.roa (hash: LWs58E6H5G3CaTblcQPMMEIGEMhpFLcXYdj5vGlt4Uc=)
7: vOpAEXPgkqwheuiGpVNPsiQQvuY.roa (hash: aXPWK0QaPm2ihvIcx1OmZa6CLFVr7Up+lYxtb3R4MJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Validity
Not Before: Jan 31 17:37:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0D6DD4A7BB8F7E44C3EDCE0D2DAD1423B0CD01DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:90:8d:3c:2e:50:36:c1:8e:b5:c1:93:e2:
fe:a2:d7:05:2a:84:cc:1f:f5:e8:30:f5:f5:14:42:
ea:8d:d0:4c:5e:f5:23:59:50:4f:5f:80:8e:4b:b7:
74:fa:f8:c1:7f:52:c0:a6:08:81:f5:30:01:d5:22:
7c:41:45:e3:6d:80:e4:eb:21:46:f5:d3:6b:06:6d:
56:96:53:97:3a:43:d2:59:eb:51:b0:b4:e3:9c:32:
ce:ad:1e:8a:7c:99:4b:35:21:08:ef:31:22:dd:22:
35:39:db:60:81:ba:4f:9b:bf:60:e6:ef:f3:e4:55:
c3:6a:1a:47:6f:13:3a:e4:a4:6d:b7:27:fd:82:9a:
f6:73:3c:a6:45:4b:db:4a:20:87:9d:95:dd:9b:da:
66:5a:ed:7f:63:46:23:42:df:ed:77:9f:6f:22:3b:
95:70:ce:41:f5:2c:33:09:2b:9a:28:7b:52:c6:c2:
36:f5:b3:37:ee:93:ac:26:db:87:fc:a5:39:6b:37:
e4:9e:1e:9b:b7:63:2c:ff:4e:78:88:ef:89:bf:1e:
b2:de:9d:e5:48:a9:a9:e6:84:d2:30:c8:23:75:c8:
7e:78:d4:66:9f:29:cd:80:94:2e:e2:3a:05:c5:0d:
b2:75:48:f5:f5:3f:92:96:60:bd:e1:44:1d:38:04:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:D4:A7:BB:8F:7E:44:C3:ED:CE:0D:2D:AD:14:23:B0:CD:01:DF
X509v3 Authority Key Identifier:
keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6b:23:23:f2:ca:b4:4f:ed:73:b5:bd:76:93:30:9c:0a:78:
41:e2:6a:30:24:2a:68:ab:af:70:80:43:0b:fa:d3:be:b3:09:
ca:a9:bb:bf:ee:98:fc:5a:0a:b2:ee:17:95:59:10:c2:8f:17:
9b:e0:1a:26:8c:8b:41:29:5d:17:18:25:39:d0:0b:4e:bf:f2:
7a:12:26:9f:45:70:ef:f0:e4:48:03:89:0e:8a:0c:45:e6:54:
37:a4:70:5a:1f:d1:ed:a3:a4:3b:b3:47:f1:ff:60:da:28:50:
34:10:38:4b:4b:07:ca:04:d3:ad:4a:01:a5:91:88:69:d5:04:
29:85:e1:22:11:5a:cc:05:af:0a:cb:e7:f9:4c:89:01:16:70:
66:35:b4:83:8a:ce:5e:85:2e:92:ba:9e:46:9b:cd:b0:31:59:
3c:ff:b9:28:c9:eb:17:23:5c:91:a5:43:d0:38:eb:f3:5d:ff:
a5:67:c9:5d:5f:0c:84:a5:42:e5:36:17:6e:71:fd:fc:3d:12:
d3:b5:60:bb:fc:04:0c:63:82:1d:da:79:66:59:13:c2:32:3a:
59:37:34:f6:ac:f5:5d:e8:a6:1a:42:e6:a3:fd:bc:d8:80:97:
b4:97:4c:45:e0:d1:08:86:b5:71:86:58:a6:07:ee:c5:76:9e:
43:9c:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:07:48 2025 by rpki-client