Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
File: ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft (raw, json)
Hash identifier: QK8k2ovXJvpw589T+pQPZVQGbZoJDHGfBuEY4++98Q4=
Subject key identifier: 9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial: 0894
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
Manifest number: 0886
Signing time: Thu 30 Jan 2025 18:37:46 +0000
Manifest this update: Thu 30 Jan 2025 18:37:46 +0000
Manifest next update: Sat 01 Feb 2025 18:37:46 +0000
Files and hashes: 1: -2Aw1vk5bYbW5GXZrLAmyW2lAiE.roa (hash: jyjhpdbjyIZ+8g6NnyFpVcQt2yumJARHrtJyc3A2+Eg=)
2: QU2dPofH_-BIsdehCmaITT57tNc.roa (hash: OEFElonVOEraX+7dokvSqNT8S8acpgbZEHrErSuUIRs=)
3: ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl (hash: Cpvp/fa2HP6hZj9nElu47xFEa2vp47BjYQQ4SQuo7Zw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Validity
Not Before: Jan 30 18:37:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9E0948674DB51888C393AF9B532AFDB9C59BFD3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:6e:f0:47:be:1b:cf:5e:b9:5d:65:92:4f:
b2:27:2d:a0:b3:21:e5:91:f2:f4:6b:cc:d5:9a:e4:
21:4f:37:ca:ac:5e:f6:27:39:12:11:23:a5:34:8d:
a3:e0:d7:29:71:07:d6:11:45:e9:e6:9b:3f:4c:c7:
3d:76:43:d8:49:e8:33:67:75:1d:9a:98:a6:eb:84:
1e:5f:60:47:25:ed:a2:0a:07:51:eb:c7:83:45:dc:
ca:f8:c0:b0:da:b0:88:65:04:60:d7:32:43:4a:18:
61:f5:65:ac:27:6a:64:b7:dc:aa:ce:ef:f5:9d:35:
8a:ff:0b:b4:9a:61:b6:7b:f0:bf:3c:c2:25:71:75:
c2:df:3d:fd:b5:56:46:a2:e0:92:fe:70:ad:4c:d6:
2a:9f:ce:bc:bb:e9:ed:f3:06:03:42:9f:33:23:f9:
21:35:34:19:af:4a:e0:45:22:f0:95:6d:5e:09:c7:
22:51:00:91:da:d4:36:ac:0b:00:17:ef:a0:39:e1:
69:49:06:d1:07:76:ac:7a:e5:3a:d9:3d:82:8e:56:
c5:12:ba:aa:28:36:e0:ba:81:4c:b2:b4:4e:b7:2c:
47:d8:0d:9b:a6:f7:03:c0:4a:a9:87:4b:22:08:6c:
e2:c2:0c:d0:c8:a7:26:32:a2:3e:6f:f2:ef:4b:31:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
X509v3 Authority Key Identifier:
keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:03:51:40:8a:4b:ff:af:be:8d:00:a2:bb:e7:fd:de:a9:6c:
56:ca:a3:dc:ef:37:cf:7d:29:e3:8e:a9:db:00:28:1a:ac:e1:
83:6a:38:b7:7f:fe:f2:62:2a:9d:07:b7:4e:68:ef:f7:4c:a6:
61:5d:a4:5f:24:fa:66:9c:fa:c6:8e:d3:1b:1e:69:da:7e:51:
db:6d:6f:db:44:4b:51:41:7e:98:f7:c6:1c:8f:ae:28:30:0a:
a2:b5:ca:5f:db:c2:16:02:6c:af:b1:98:79:b6:f3:da:55:49:
63:78:1a:b8:2d:c3:1b:b6:d7:4a:ea:f5:bb:56:ba:b0:63:36:
e6:cb:cb:e5:1e:04:2c:97:35:25:34:a8:7c:04:8b:df:af:9c:
fd:22:70:6b:49:7a:d8:dc:93:1b:52:73:57:46:2a:4c:d9:12:
94:db:22:8d:a0:29:02:c3:c6:7d:14:fd:a9:76:94:df:c0:19:
c5:e7:04:8d:d1:52:0b:20:8f:f7:ec:c1:06:33:4e:ba:86:e2:
a7:b9:ab:b4:c8:8b:95:ee:05:d4:98:2a:58:3d:24:a2:10:69:
2d:16:d8:b7:a9:d2:38:c3:b2:df:00:89:ca:f4:3b:ed:df:67:
25:a7:a1:bb:71:20:13:29:4d:c6:17:8f:2b:f2:5f:b5:f1:da:
dc:9f:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:24:55 2025 by rpki-client