Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft
File: POusQFclHIqquVTcIgsiSWvu9WM.mft (raw, json)
Hash identifier: rR7q8UT0TECWCFgUQgzjr7qHxlC+4plS4FN3ARQmNHw=
Subject key identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB
Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63
Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563
Certificate serial: 02E1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft
Manifest number: 02D6
Signing time: Thu 30 Jan 2025 19:07:23 +0000
Manifest this update: Thu 30 Jan 2025 19:07:23 +0000
Manifest next update: Sat 01 Feb 2025 19:07:23 +0000
Files and hashes: 1: 5kkjt29yn7Kj_FMjRfQA8269elQ.roa (hash: P2dJeH2Hq3LdnTr+dlFvv3uatyUvibXpTtftWzBcmuI=)
2: POusQFclHIqquVTcIgsiSWvu9WM.crl (hash: 1rjNQMyPE6RJMQMSOz5ayIiJgp8Ncx4gmfGhMl+CgDE=)
3: objJj7wvy-_et92tNUx2pLZo5io.roa (hash: EnTaRy5TyoM1rnuNFheCaPsO4WRwqRSiLzhl/eiHmNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737 (0x2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563
Validity
Not Before: Jan 30 19:07:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C8CD023F29E25DE9D3BBA766BB4D1201BA7074DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:c8:2c:ab:24:28:82:73:e4:d4:7b:89:27:
22:a9:1c:80:9a:96:6e:19:52:cb:4c:30:68:87:42:
7f:4e:6d:9d:c7:f8:91:a0:af:55:5e:9d:a6:a5:5f:
be:57:be:b8:69:95:fe:cd:2a:2d:8c:8a:73:01:61:
27:8a:8b:b4:22:c7:68:ed:bb:be:57:3b:e3:b6:e7:
bd:b0:d0:c5:f0:64:ec:c1:48:5f:27:ce:ec:17:59:
c0:57:3d:1c:ac:d2:70:13:2c:dc:64:24:13:19:51:
cb:c3:d8:3c:35:6e:7e:e2:25:78:bd:36:23:42:fd:
dc:7e:29:ba:73:59:ca:ab:eb:92:f8:89:39:4f:fe:
f2:ee:10:fa:b9:32:81:2a:e6:1f:35:ec:ae:0f:f3:
70:7d:6e:0b:d6:6b:e4:ff:c4:9f:5a:85:db:63:50:
ee:bf:f1:90:62:e9:2e:16:48:cf:c5:d6:e4:99:51:
45:57:ca:3f:14:60:e7:04:a6:06:ac:b0:ef:1c:24:
89:ca:f0:d5:b8:6f:73:20:ec:1f:42:6c:8e:fc:2c:
5d:2d:52:ab:1f:9f:ae:54:46:79:29:40:62:f5:08:
da:05:bd:5b:c8:2f:d3:93:6b:00:b7:53:e3:9b:ec:
c6:ad:f7:cc:f7:66:91:a7:9c:87:6f:01:ce:89:24:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB
X509v3 Authority Key Identifier:
keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fd:29:b5:5a:25:4d:b6:ed:15:94:9b:e4:37:6f:9b:b0:6c:
ef:ab:7e:30:2c:13:4e:c0:91:c8:a1:33:39:cc:d8:56:7f:9b:
4e:c9:a3:4b:cc:53:5b:23:7c:55:cd:2f:9d:dd:7b:f3:bb:4a:
bc:ae:02:9e:bc:ec:53:a4:d0:79:d4:b2:c9:ba:9b:91:aa:8f:
46:ec:c5:8e:e4:b1:29:d1:6a:88:08:b7:5c:42:b0:4f:aa:5c:
96:70:64:8e:b7:ba:ef:dd:4c:bf:ed:fc:28:b9:99:3b:26:1d:
07:aa:34:ad:d3:12:e7:11:24:14:9e:0d:c4:fc:16:92:42:46:
c6:a8:90:55:38:21:c4:ec:cb:39:e6:e0:4e:6b:0f:a9:a4:bf:
eb:1c:2e:c6:7b:d7:70:88:69:f5:88:34:c9:c8:0a:ae:ad:68:
37:70:7b:b4:38:f3:39:27:e6:49:e0:b6:52:7d:70:80:b1:5d:
01:02:5c:31:85:ec:c6:75:fc:6a:a9:11:ee:85:1c:73:8f:62:
35:9f:9e:20:f0:d2:42:ab:c9:77:b3:0f:e3:4e:4a:22:b9:e4:
a0:7e:87:29:61:29:b9:84:57:95:85:0a:8d:ad:28:b1:ce:7b:
b7:82:44:e3:e3:3b:9a:b3:4f:3c:5c:de:73:5c:61:61:e4:13:
e8:56:c2:fb
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF
QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yNTAxMzAx
OTA3MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4Q0QwMjNGMjlFMjVE
RTlEM0JCQTc2NkJCNEQxMjAxQkE3MDc0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkSMgsqyQognPk1HuJJyKpHICalm4ZUstMMGiHQn9ObZ3H+JGg
r1VenaalX75Xvrhplf7NKi2MinMBYSeKi7Qix2jtu75XO+O2572w0MXwZOzBSF8n
zuwXWcBXPRys0nATLNxkJBMZUcvD2Dw1bn7iJXi9NiNC/dx+KbpzWcqr65L4iTlP
/vLuEPq5MoEq5h817K4P83B9bgvWa+T/xJ9ahdtjUO6/8ZBi6S4WSM/F1uSZUUVX
yj8UYOcEpgassO8cJInK8NW4b3Mg7B9CbI78LF0tUqsfn65URnkpQGL1CNoFvVvI
L9OTawC3U+Ob7Mat98z3ZpGnnIdvAc6JJIy5AgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUyM0CPyniXenTu6dmu00SAbpwdNswHwYDVR0jBBgwFoAUPOusQFclHIqquVTc
IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz
ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvUE91c1FGY2xI
SXFxdVZUY0lnc2lTV3Z1OVdNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALX9KbVaJU227RWUm+Q3b5uwbO+rfjAsE07AkcihMznM2FZ/m07Jo0vM
U1sjfFXNL53de/O7SryuAp687FOk0HnUssm6m5Gqj0bsxY7ksSnRaogIt1xCsE+q
XJZwZI63uu/dTL/t/Ci5mTsmHQeqNK3TEucRJBSeDcT8FpJCRsaokFU4IcTsyznm
4E5rD6mkv+scLsZ713CIafWINMnICq6taDdwe7Q48zkn5kngtlJ9cICxXQECXDGF
7MZ1/GqpEe6FHHOPYjWfniDw0kKryXezD+NOSiK55KB+hylhKbmEV5WFCo2tKLHO
e7eCROPjO5qzTzxc3nNcYWHkE+hWwvs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:35:31 2025 by rpki-client