Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
File: iWrQtRYJef6sUMY4TL_BYtQD540.mft (raw, json)
Hash identifier: s5h3MAb2/IZbVn6Ax4qPA6jG8H5HAtc4ibmqVgOFA3E=
Subject key identifier: 4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
Authority key identifier: 89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
Certificate issuer: /CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Certificate serial: 0C91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
Manifest number: 0C76
Signing time: Thu 30 Jan 2025 19:38:57 +0000
Manifest this update: Thu 30 Jan 2025 19:38:57 +0000
Manifest next update: Sat 01 Feb 2025 19:38:57 +0000
Files and hashes: 1: 3c8iVA8Ln24kipb0ZX6MchW15HE.roa (hash: 4k5H9oBX6mUVip0Zxiir027FSAiU395oFMnhYA56C7M=)
2: Iidl9KDXzf3l5HuZ24HppGxZZWE.roa (hash: LbGudeP3NMAy34RC4ZuFPABW4E8f6HhxFBGk0f1Ibp0=)
3: YlVWyxg5k4AemiA08mPZoP9MYhI.roa (hash: GXbjo0KfxCZVkzeda+KCBwP3h8fZ7kQy9tiIxe3myXw=)
4: iWrQtRYJef6sUMY4TL_BYtQD540.crl (hash: MEhwqKQaxSOftKao4CWpoOywQflllAnojdyeXCD3xPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3217 (0xc91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Validity
Not Before: Jan 30 19:38:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4EFEC9884FCADF72FA01ABA023732C6D88E481D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:14:a0:ba:97:b0:ab:dd:56:8d:78:b2:e8:
24:0e:c7:87:2d:cf:c6:23:89:a5:e1:87:44:1a:eb:
6b:94:fa:e7:b5:0f:58:aa:69:de:d2:1a:fc:03:68:
8b:8d:51:59:83:54:ce:d0:d8:63:c3:58:69:3f:85:
bc:0b:b6:fe:84:54:28:77:61:c1:4c:aa:b6:b3:11:
83:5b:7f:ae:ac:60:65:cf:aa:40:b2:d9:1b:5c:95:
8d:59:77:b0:53:56:9a:a5:6e:a8:0e:18:e1:c9:21:
d9:da:1b:6a:3c:7b:d4:bf:06:7e:9a:ce:da:d8:d7:
33:a3:10:fa:f1:ff:8c:b3:3b:da:4c:50:34:b0:e4:
2a:a8:41:44:20:41:c3:0d:0d:92:95:56:97:f6:c8:
99:34:91:3d:d7:ed:46:04:1d:bd:7f:3e:c4:8f:69:
ae:9f:61:30:95:63:99:02:8c:a8:be:3e:e3:72:82:
8d:f7:8c:d0:0a:9e:dd:2e:b4:de:c1:58:95:98:af:
71:0d:8f:20:05:68:1a:16:ad:82:c9:7f:e0:2e:ec:
14:ef:04:f4:b6:26:00:44:cb:1e:e8:bb:7a:40:f5:
71:1c:f5:79:5c:23:9c:34:6b:28:e3:0c:5f:a4:d9:
70:5a:fe:7b:7f:7f:bd:7c:d2:88:c0:e5:48:f8:94:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
X509v3 Authority Key Identifier:
keyid:89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:b9:81:2b:60:20:75:9d:e2:d0:8c:17:42:70:7c:7a:13:
6d:c4:e4:2e:83:0d:ed:0f:73:2c:d1:e3:00:8b:d8:5c:7c:1c:
3a:76:c8:b4:b5:8a:fa:52:82:ca:7f:c0:dc:64:65:79:bc:19:
be:2a:bb:88:bf:05:6f:f8:57:33:5c:b4:92:04:c8:af:b7:84:
f8:b2:6e:3a:35:de:70:82:45:8f:32:99:3f:cf:9c:e8:82:36:
90:71:92:85:d9:a9:e9:95:ae:dc:82:1d:ca:ed:e9:ce:42:fc:
94:5a:07:87:5e:57:81:5d:95:ff:ad:e2:bb:87:ba:0c:60:c3:
ef:02:fe:ba:8d:46:0c:49:ef:18:4a:6f:bd:84:87:39:5a:5d:
6d:4d:20:fa:1c:d2:f2:f5:72:0b:e8:af:5f:91:bf:0d:9f:bf:
b9:3c:2f:96:ca:28:fb:c8:c3:60:62:1c:5e:b3:1e:0b:e4:e4:
1c:ad:0c:ba:8b:92:bb:a9:b8:62:53:09:79:c0:6e:23:e1:b4:
97:ad:9d:c2:23:3c:5a:51:79:e8:c1:75:a2:25:59:d9:69:8f:
3c:a4:9e:16:55:75:73:56:bc:aa:a9:18:f2:40:27:fa:cd:ad:
3f:33:e7:b4:d4:50:1b:66:d5:37:26:11:61:10:54:15:48:7e:
09:09:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:22:59 2025 by rpki-client