Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
File: paasOO5ow2TPeRiPBkJ-nHZtTBo.mft (raw, json)
Hash identifier: To40KoST06LdB1Daybi8qAx3o+VSqnb/yGGZ5EpOSlE=
Subject key identifier: 33:32:3B:FC:44:4C:8F:10:31:AF:8A:F5:A8:65:57:05:2A:54:31:3D
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial: 0221
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
Manifest number: 0214
Signing time: Thu 30 Jan 2025 19:08:11 +0000
Manifest this update: Thu 30 Jan 2025 19:08:11 +0000
Manifest next update: Sat 01 Feb 2025 19:08:11 +0000
Files and hashes: 1: AH4YnjAtXXVJinw6XeFLQYswk5Y.roa (hash: bSG9wuIU9UOMszo+bu4aB57oa+FUHYzpCn2CnWElOcY=)
2: O8ptedJUeHbfiFe72qNyKsyeczk.roa (hash: 5c3nwJjxosIxdZbeLs2HUaEa58CnOtgBKdivQd+CbH4=)
3: RkhRQiXgHWGCdSEpFqoe45WGMtk.roa (hash: rW2A95AWu/ZjEwN11yi7vxY8p8YaooZPUQhUgfeX2DQ=)
4: paasOO5ow2TPeRiPBkJ-nHZtTBo.crl (hash: XbCkcUgSmSQiDl448mXA24zdR+lTvGODRlaYHfUNPkU=)
5: x6hYY8XHUQ6UVpfdp508Uf_pCJQ.roa (hash: cy1kkY+A7+3Wf4YoNzhgq/vkiYWpwyB6T3cqipITpxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Validity
Not Before: Jan 30 19:08:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=33323BFC444C8F1031AF8AF5A86557052A54313D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:25:7e:e6:d6:f7:02:0e:63:5d:5c:72:3e:
23:11:dc:ee:cf:d2:be:cc:e4:52:09:90:ce:13:51:
50:df:b1:6d:d7:2c:8d:a5:6a:82:57:5b:f4:f3:99:
80:32:17:48:2f:13:55:cf:55:d3:fd:34:18:f2:21:
a5:cf:ff:c3:01:dc:46:db:71:d1:89:77:6d:b8:ba:
85:cc:a2:6d:d5:b9:29:e3:19:a8:78:72:16:2e:dd:
46:42:96:21:f2:05:14:5d:71:73:18:76:d9:eb:7d:
21:60:fd:86:c6:3f:51:8a:49:d2:46:86:9a:13:cd:
cd:10:43:98:d0:cb:bc:30:32:31:6b:99:a0:fd:1c:
c0:de:3b:a4:85:10:58:c5:76:a4:5a:cd:f2:11:e7:
15:69:92:68:a8:91:35:95:bf:af:5b:51:d7:2c:cf:
cb:9c:5f:2b:b0:06:98:b2:70:f9:ef:86:9d:70:2a:
dc:e5:ae:66:ac:0d:a1:e9:2b:7d:da:cf:2a:39:8f:
60:53:3c:75:8c:ce:b6:ca:52:11:af:1d:9b:70:54:
98:8e:72:4b:0b:8c:bc:bb:e5:c4:ca:e3:39:35:7e:
3b:d5:e0:39:b1:ea:40:40:0e:c8:fb:d4:0b:7a:b5:
fe:42:5e:b0:73:a8:af:8d:84:58:71:1b:65:79:3b:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:3B:FC:44:4C:8F:10:31:AF:8A:F5:A8:65:57:05:2A:54:31:3D
X509v3 Authority Key Identifier:
keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:36:a3:32:84:40:42:c5:f4:5d:ff:0b:20:db:64:3a:8c:
79:2a:85:1d:2e:50:98:f6:b9:4e:d1:ad:96:d2:40:0d:ff:7d:
39:4e:a1:a6:60:27:d9:cb:d1:83:d1:d3:0a:18:c0:87:cf:3f:
f9:aa:fc:6b:46:b8:b6:b3:8d:8a:ac:29:23:25:28:ef:a4:07:
56:9b:36:ca:e3:91:7b:ea:78:15:79:6f:26:1a:43:11:83:82:
cb:f1:6b:a7:7b:1c:e8:06:85:74:7d:bc:67:bb:e3:83:ef:e5:
56:e8:c6:ba:36:73:50:8f:78:d6:38:9f:2a:9c:66:7a:49:d2:
7d:62:15:e0:a0:5a:df:ab:ac:ef:e9:ce:59:f2:0c:58:40:0f:
bf:5c:2e:e1:74:b1:63:63:cd:48:0d:b3:36:f9:fe:ef:39:81:
51:35:b4:52:43:26:2a:d2:2d:0a:4a:fc:0d:35:ba:27:79:31:
0a:64:98:99:48:ae:89:f6:10:61:01:7d:fe:1a:ef:ab:a4:62:
06:ff:1e:e7:f6:fd:08:dc:05:46:2c:33:5d:02:1e:f1:ff:de:
bb:81:e0:a9:bb:33:2f:23:d7:b9:f7:97:ef:8e:d7:5b:7f:97:
f1:cc:53:76:7d:72:99:48:c7:68:ee:9e:3a:e3:03:98:57:12:
76:4a:7b:bb
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTVB
NkFDMzhFRTY4QzM2NENGNzkxODhGMDY0MjdFOUM3NjZENEMxQTAeFw0yNTAxMzAx
OTA4MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzMzIzQkZDNDQ0QzhG
MTAzMUFGOEFGNUE4NjU1NzA1MkE1NDMxM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZ4SV+5tb3Ag5jXVxyPiMR3O7P0r7M5FIJkM4TUVDfsW3XLI2l
aoJXW/TzmYAyF0gvE1XPVdP9NBjyIaXP/8MB3EbbcdGJd224uoXMom3VuSnjGah4
chYu3UZCliHyBRRdcXMYdtnrfSFg/YbGP1GKSdJGhpoTzc0QQ5jQy7wwMjFrmaD9
HMDeO6SFEFjFdqRazfIR5xVpkmiokTWVv69bUdcsz8ucXyuwBpiycPnvhp1wKtzl
rmasDaHpK33azyo5j2BTPHWMzrbKUhGvHZtwVJiOcksLjLy75cTK4zk1fjvV4Dmx
6kBADsj71At6tf5CXrBzqK+NhFhxG2V5O2v9AgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUMzI7/ERMjxAxr4r1qGVXBSpUMT0wHwYDVR0jBBgwFoAUpaasOO5ow2TPeRiP
BkJ+nHZtTBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tT
SU5DL3BhYXNPTzVvdzJUUGVSaVBCa0otbkhadFRCby5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcGFhc09PNW93MlRQZVJpUEJrSi1uSFp0VEJvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tTSU5DL3BhYXNPTzVvdzJU
UGVSaVBCa0otbkhadFRCby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQADOjajMoRAQsX0Xf8LINtkOox5KoUdLlCY9rlO0a2W0kAN/305TqGmYCfZ
y9GD0dMKGMCHzz/5qvxrRri2s42KrCkjJSjvpAdWmzbK45F76ngVeW8mGkMRg4LL
8WunexzoBoV0fbxnu+OD7+VW6Ma6NnNQj3jWOJ8qnGZ6SdJ9YhXgoFrfq6zv6c5Z
8gxYQA+/XC7hdLFjY81IDbM2+f7vOYFRNbRSQyYq0i0KSvwNNboneTEKZJiZSK6J
9hBhAX3+Gu+rpGIG/x7n9v0I3AVGLDNdAh7x/967geCpuzMvI9e595fvjtdbf5fx
zFN2fXKZSMdo7p464wOYVxJ2Snu7
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:55 2025 by rpki-client