Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
File: 0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft (raw, json)
Hash identifier: JoaGQnq/hLdKkbZNyVvMG1mF6CllnqQCjG7/J7bWU6w=
Subject key identifier: 77:07:07:B2:FD:D8:7D:CE:E7:49:7A:C6:82:96:42:43:F8:98:38:9A
Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
Certificate issuer: /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Certificate serial: 0169
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
Manifest number: 0165
Signing time: Fri 31 Jan 2025 06:08:13 +0000
Manifest this update: Fri 31 Jan 2025 06:08:13 +0000
Manifest next update: Sun 02 Feb 2025 06:08:13 +0000
Files and hashes: 1: 0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl (hash: GNW8MGpWzkmFSoiLgiRNb489UIXHZ/N6HF03SrD5WzQ=)
2: _yOUUfL2sWefXH1pZgVPXHWRoEw.roa (hash: QRTQJdzhBAAYh8RsMp3gJl0yer3P8lXksvLPuiTu9CQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Validity
Not Before: Jan 31 06:08:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=770707B2FDD87DCEE7497AC682964243F898389A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:b9:82:cf:c5:d4:72:69:c6:f5:70:48:14:
0a:c1:74:e9:f2:9a:34:17:2b:3b:04:30:4a:0c:da:
27:91:c6:e5:6f:35:35:03:da:31:3c:e1:53:24:31:
c5:97:ee:50:f9:02:71:04:88:08:11:9c:6e:b8:e8:
d9:e6:8c:93:54:a2:d9:0a:3e:ed:37:ca:07:85:14:
3a:90:de:5b:6a:0f:21:d3:f8:a0:22:02:51:c5:58:
f2:35:7a:16:0f:b0:c3:4d:ed:2f:41:9b:ec:b0:30:
47:14:ad:f6:0f:ac:97:42:6f:f7:6c:c0:60:56:2b:
7a:0b:91:e0:a2:6f:82:6d:4d:59:02:59:88:01:50:
b2:28:e5:97:cd:a3:8c:09:68:0d:84:d7:b4:30:2b:
82:3b:68:5e:13:3d:c9:6f:6d:bd:c3:8c:0d:3e:6f:
bd:61:6c:7e:97:65:0a:5e:01:7d:66:47:26:37:af:
1a:44:61:0c:43:93:00:e2:38:1f:c5:d6:37:42:49:
a9:cd:bb:30:1e:a8:1c:b5:3a:f7:96:bb:e2:07:fc:
a9:0b:e0:01:de:9f:e3:51:dd:57:71:bd:15:81:71:
da:60:5b:a7:2e:0e:e5:2d:04:60:d7:c6:39:44:95:
84:a1:47:85:7c:dd:08:2c:5c:9d:93:45:78:7e:e1:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:07:07:B2:FD:D8:7D:CE:E7:49:7A:C6:82:96:42:43:F8:98:38:9A
X509v3 Authority Key Identifier:
keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:09:2b:56:a6:c2:85:73:11:47:b9:41:a2:11:9a:ac:88:8f:
85:e7:06:a9:ea:f0:7a:34:ed:fa:31:16:9a:d4:87:54:3a:ed:
11:a2:bb:20:55:46:0f:f3:35:25:2f:8f:b6:c7:cd:86:c1:55:
b5:44:86:1b:29:87:bc:3d:f6:02:96:42:b1:c5:e0:1f:a1:79:
18:df:20:ed:4e:73:e1:10:f9:71:d2:ec:3e:a2:bb:67:9b:45:
5d:bf:86:84:e3:66:12:bd:42:7f:2f:79:02:29:42:22:ef:4f:
85:35:7f:fb:1a:34:e3:27:ca:db:56:c2:7f:33:76:77:3b:dc:
99:e2:e4:3d:dc:13:89:3a:5f:e2:58:0f:89:fb:3b:2e:2f:5d:
8e:5e:a1:b0:21:53:d3:75:5e:24:7e:57:ff:2d:e1:3e:35:2e:
58:06:77:45:ee:39:57:a6:c8:d1:39:45:fc:22:81:6a:3d:64:
f3:32:2d:b0:34:ee:e0:f8:33:1d:fa:d4:d7:ed:f2:50:13:9b:
a1:d6:69:26:c9:ef:57:be:d8:8b:c0:9b:02:97:52:b7:82:f3:
4b:d8:9d:af:04:47:4f:93:87:49:83:58:c7:1f:af:03:84:22:
4f:20:1f:cb:6f:bd:a9:3f:0b:01:3b:a6:6b:01:6c:02:87:25:
d8:eb:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:55:42 2025 by rpki-client