Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
File: IKzKhxhQA3Ov93tBSyPcal8UdO4.mft (raw, json)
Hash identifier: 4Yw8grjdgfmojG34PcL8BKhlPG5/nk8ESFQK6uKiqJQ=
Subject key identifier: 63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Certificate serial: 0244
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
Manifest number: 0240
Signing time: Fri 31 Jan 2025 14:37:43 +0000
Manifest this update: Fri 31 Jan 2025 14:37:43 +0000
Manifest next update: Fri 31 Jan 2025 20:37:43 +0000
Files and hashes: 1: Cmg9Z0xpZ7mzMhuCz8iRuwONX3c.roa (hash: 6wozyNsHB5BGez1DRcn46FZdxqwnCNxnuAxSvF6LoMA=)
2: IKzKhxhQA3Ov93tBSyPcal8UdO4.crl (hash: ztG7d8yNWpIRu/RXR4ugfLK9NzDpZQDJmX/fDH2giFk=)
3: PWkbxxIpvlC1ceaPyjv7LwCByMo.roa (hash: HEmdOYU2XRPa0YiR3DzCYcBbpO+jEWfk7Cp9Xh/2Pss=)
4: aGEbZLNZ4htvSoUOmtD-gAQmGys.roa (hash: ZXmvoGmZhBsM43ZPgl/M+gVCZmjq2xEVnt8lF74o95g=)
5: w6a8w_s5dytSyGEJ7KQkqhryLn8.roa (hash: A8LcOP51wkMUYYXBGzSsWHSiCVujf+vZZYiDwylx/Dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Validity
Not Before: Jan 31 14:37:43 2025 GMT
Not After : Oct 15 15:30:20 2025 GMT
Subject: CN=637434BF3B3405E77125FEE5E8A7A7A80946E0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:74:48:cc:64:3a:a9:1e:7b:4b:a2:fc:06:
0c:d3:28:19:9c:e0:4f:77:be:b4:98:24:2d:4a:2a:
c8:39:4a:2c:16:95:9a:a7:6f:a7:15:21:ba:05:b5:
43:04:10:65:e2:f2:34:2a:90:32:12:80:a2:3a:30:
b5:35:a8:1a:bf:29:b0:01:c3:1b:7b:07:75:fb:b1:
7c:db:72:54:69:49:0a:d6:cf:de:ff:f5:72:4c:a3:
c1:04:88:1e:dc:37:70:0e:9e:76:60:03:1b:d7:53:
c6:cc:12:8d:28:df:db:dd:92:d7:71:d1:49:75:09:
5e:cb:b2:48:bb:11:46:ca:c3:4a:1a:e3:d1:a8:5e:
49:16:22:ab:f1:52:d8:1b:83:19:60:b6:b5:98:9f:
db:52:3a:bc:db:26:20:7d:92:12:d6:77:ed:64:56:
dc:77:0f:67:f0:27:9f:96:44:41:65:ab:31:1e:9c:
eb:20:51:79:68:0f:fe:04:d1:9f:35:d7:47:c4:42:
b2:2a:26:33:22:2d:ee:c1:de:e9:8c:67:af:34:b0:
c5:50:9c:e0:48:4a:c6:bb:8b:31:b0:bc:67:0d:33:
f5:b4:0e:ee:5d:4f:7c:50:20:93:9c:a3:c1:cd:42:
3a:d1:7a:a6:6a:3b:d7:1b:05:99:7e:79:71:6f:4a:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
X509v3 Authority Key Identifier:
keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a3:04:ae:8f:3f:0a:41:c5:f8:76:b3:65:36:2c:a3:90:98:
75:fa:c0:cc:13:11:2d:8d:95:f7:e0:d0:d2:00:91:29:68:bf:
e5:67:bd:e9:be:f4:3a:db:c3:56:90:5b:b5:81:94:31:ba:52:
a3:11:30:f5:63:ce:ab:02:89:c6:67:1a:4e:a4:0d:bb:40:58:
d2:ee:9b:37:d6:bc:06:8a:6c:bd:91:92:5e:34:ce:61:7b:be:
42:a5:f3:8d:a4:ea:b3:ba:4e:79:17:55:e8:61:f7:93:d3:7d:
c9:ea:c5:19:2a:5c:9f:9c:bd:01:76:b5:0a:e6:ae:84:d5:27:
85:c7:3c:67:97:2e:cc:6b:23:ed:79:9d:f3:9f:a8:d6:bc:b1:
83:85:ec:8d:9a:24:29:dc:0a:90:39:20:4a:8e:3e:45:5c:4a:
10:09:24:a4:89:09:97:a6:0f:2c:cc:c0:3d:6d:b2:09:4f:e9:
5f:ec:ff:d7:15:68:44:9d:7b:3e:d3:a3:55:ea:bf:38:7b:4f:
2e:9f:61:4f:a1:1b:25:9b:8c:50:eb:6b:32:81:c2:5b:6e:6d:
65:ef:19:37:9d:9c:8e:1e:28:c5:6c:b8:b1:4a:cb:f1:f3:55:
fd:1e:91:f8:ed:f5:6a:58:95:76:0e:2f:ab:c6:65:5a:e1:91:
b8:b2:4f:51
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjBB
Q0NBODcxODUwMDM3M0FGRjc3QjQxNEIyM0RDNkE1RjE0NzRFRTAeFw0yNTAxMzEx
NDM3NDNaFw0yNTEwMTUxNTMwMjBaMDMxMTAvBgNVBAMTKDYzNzQzNEJGM0IzNDA1
RTc3MTI1RkVFNUU4QTdBN0E4MDk0NkUwRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHeHRIzGQ6qR57S6L8BgzTKBmc4E93vrSYJC1KKsg5SiwWlZqn
b6cVIboFtUMEEGXi8jQqkDISgKI6MLU1qBq/KbABwxt7B3X7sXzbclRpSQrWz97/
9XJMo8EEiB7cN3AOnnZgAxvXU8bMEo0o39vdktdx0Ul1CV7Lski7EUbKw0oa49Go
XkkWIqvxUtgbgxlgtrWYn9tSOrzbJiB9khLWd+1kVtx3D2fwJ5+WREFlqzEenOsg
UXloD/4E0Z8110fEQrIqJjMiLe7B3umMZ680sMVQnOBISsa7izGwvGcNM/W0Du5d
T3xQIJOco8HNQjrReqZqO9cbBZl+eXFvSnyxAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUY3Q0vzs0BedxJf7l6KenqAlG4PcwHwYDVR0jBBgwFoAUIKzKhxhQA3Ov93tB
SyPcal8UdO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERE
L0lLektoeGhRQTNPdjkzdEJTeVBjYWw4VWRPNC5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSUt6S2h4aFFBM092OTN0QlN5UGNhbDhVZE80LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSEREL0lLektoeGhRQTNPdjkzdEJT
eVBjYWw4VWRPNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+
owSujz8KQcX4drNlNiyjkJh1+sDMExEtjZX34NDSAJEpaL/lZ73pvvQ628NWkFu1
gZQxulKjETD1Y86rAonGZxpOpA27QFjS7ps31rwGimy9kZJeNM5he75CpfONpOqz
uk55F1XoYfeT033J6sUZKlyfnL0BdrUK5q6E1SeFxzxnly7MayPteZ3zn6jWvLGD
heyNmiQp3AqQOSBKjj5FXEoQCSSkiQmXpg8szMA9bbIJT+lf7P/XFWhEnXs+06NV
6r84e08un2FPoRslm4xQ62sygcJbbm1l7xk3nZyOHijFbLixSsvx81X9HpH47fVq
WJV2Di+rxmVa4ZG4sk9R
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:28 2025 by rpki-client