Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft
File: 4hRiP9Epy5cnQNOR2vORlvKt8r0.mft (raw, json)
Hash identifier: +AJzsHbMgPTt/dgRGi5IIdRzvsLyptkKpRIxg+8dRAs=
Subject key identifier: 5F:4E:01:3E:85:88:F2:0D:76:04:DF:EA:79:DA:C4:D6:4B:88:E9:AB
Authority key identifier: E2:14:62:3F:D1:29:CB:97:27:40:D3:91:DA:F3:91:96:F2:AD:F2:BD
Certificate issuer: /CN=E214623FD129CB972740D391DAF39196F2ADF2BD
Certificate serial: 6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4hRiP9Epy5cnQNOR2vORlvKt8r0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft
Manifest number: 6A
Signing time: Thu 30 Jan 2025 18:38:36 +0000
Manifest this update: Thu 30 Jan 2025 18:38:36 +0000
Manifest next update: Sat 01 Feb 2025 18:38:36 +0000
Files and hashes: 1: 4hRiP9Epy5cnQNOR2vORlvKt8r0.crl (hash: sktEQU7JflPe/hciAzCgcggJkTZAa12vtYNT029kGvM=)
2: mq2F8gpAWjLsZD7T3r-QppQLdqU.roa (hash: tbNXeWixuvrApOPy0Cgkh5zIR8kykzjsIfRRcFvJauI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E214623FD129CB972740D391DAF39196F2ADF2BD
Validity
Not Before: Jan 30 18:38:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5F4E013E8588F20D7604DFEA79DAC4D64B88E9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:a8:8c:da:a4:d9:95:81:48:9d:98:2f:23:
36:0a:90:d7:70:72:d0:66:3b:92:cc:47:d1:62:8a:
61:2c:f3:fe:e2:cc:00:9b:2c:62:ff:19:9f:43:0a:
49:75:35:66:ab:6b:2a:9c:c6:38:70:dd:11:a3:c8:
ed:c0:34:19:e9:f6:84:d1:18:53:59:fd:90:94:4a:
1f:75:c2:cb:4f:40:04:94:aa:04:17:48:7d:db:b3:
ba:94:c3:97:d1:b5:c7:a1:a1:fa:97:cd:48:b6:b9:
de:2f:2d:0d:97:e1:75:ba:6c:26:fd:a6:a6:3c:a5:
7e:e5:59:c2:5d:8a:3a:37:5a:ff:df:a2:2d:28:46:
8a:47:d6:e6:88:b8:d2:90:68:42:b2:40:76:b4:90:
0f:03:92:34:db:47:05:77:c8:95:eb:8d:b2:05:0e:
a8:c7:47:57:4a:7a:47:f4:44:89:27:b7:ae:0d:bb:
aa:c8:ff:14:93:de:ae:4c:e6:94:b5:e7:e7:7d:95:
0e:bd:b2:86:37:c0:03:26:fe:de:77:54:ff:99:08:
47:0d:74:88:b6:31:5a:1d:02:e0:13:89:c5:4b:0d:
13:ab:39:5a:f7:3d:b6:d1:a7:cb:e5:19:37:bf:18:
1b:34:58:ee:dd:33:56:ac:0b:83:53:d2:f6:dc:28:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:01:3E:85:88:F2:0D:76:04:DF:EA:79:DA:C4:D6:4B:88:E9:AB
X509v3 Authority Key Identifier:
keyid:E2:14:62:3F:D1:29:CB:97:27:40:D3:91:DA:F3:91:96:F2:AD:F2:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4hRiP9Epy5cnQNOR2vORlvKt8r0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:53:b1:e7:e0:2a:b4:58:ca:58:40:6a:5e:be:9f:a7:d5:d9:
7b:8b:9d:03:7b:21:4c:75:02:bc:d1:18:09:36:9e:51:a3:7f:
63:c3:d5:77:43:7f:02:6e:9d:50:01:0c:da:9d:0b:40:1b:99:
99:27:c5:33:04:74:34:24:65:97:26:b9:aa:fb:64:25:c7:d0:
6a:37:5e:85:29:5d:71:b1:37:52:78:1a:ee:36:7a:24:bd:64:
51:f3:c0:6f:e2:86:42:3f:5d:77:ef:9c:ff:f7:0e:87:f3:c9:
12:5c:46:c6:5c:d7:91:a9:9f:c2:56:8b:50:78:0a:20:41:6e:
b3:f2:d5:93:da:c3:2d:2a:85:e2:e7:82:86:42:19:09:2f:7a:
59:ac:61:28:64:65:0d:b9:d4:8e:ff:d4:2b:4b:7a:05:77:dd:
d6:10:37:52:41:cb:cf:07:6d:58:ec:0c:53:99:bd:27:99:78:
94:2a:1c:df:9c:03:86:17:c5:b0:46:ea:42:2e:51:00:fe:a9:
75:29:39:b5:e6:67:97:68:93:9b:6b:09:a1:ab:74:23:da:91:
e2:56:e4:00:f6:8a:49:3e:e6:2b:1f:63:70:af:5c:0c:7b:6f:
8e:4e:13:d4:6f:d5:17:c8:11:19:17:28:14:57:be:e7:0b:32:
25:14:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:26:22 2025 by rpki-client