Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft
File: dK8EAv71bDShktHSGF5vtUaqcCw.mft (raw, json)
Hash identifier: gc42EdUcAGO0idYOZ/KrHAXDdE4iu25PxmMpWFyvREo=
Subject key identifier: 3C:CC:70:A9:75:44:68:01:E0:FE:81:68:A6:08:C1:46:CE:67:2A:A8
Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Certificate serial: 01D4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft
Manifest number: 01C5
Signing time: Thu 30 Jan 2025 18:38:17 +0000
Manifest this update: Thu 30 Jan 2025 18:38:17 +0000
Manifest next update: Sat 01 Feb 2025 18:38:17 +0000
Files and hashes: 1: 0RoJn1kOpPb74NwfG3wag4PeNX0.roa (hash: so4/Wr/D5vu/sU2bUC82n0aVYN4OSwos2WYCL67AxfQ=)
2: 7V18K82Bwwod6v_l9_P3eZVztiM.roa (hash: XuJ62ku496UJ92XBfi8/uWf2RPU+MPp1pmnsvYB3+Rs=)
3: M2BuwcfGZfDLu__gp8E3CcBYqO0.roa (hash: yB3iiBVHyDnk+l6XrjPf2t5w/k3AGrfp7TxmU4oGXPk=)
4: dK8EAv71bDShktHSGF5vtUaqcCw.crl (hash: X/5t9PCaoz6iUC3/4lcTXkOi9kxZdzGXRlkGfgho6ik=)
5: oOhSzx4X9WlXmQPlQcjjm6rlHk0.roa (hash: /lD2PacBYiFX9imdYIFIORPU7uTUsdzjKfyta2sdy7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Validity
Not Before: Jan 30 18:38:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3CCC70A975446801E0FE8168A608C146CE672AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:e4:88:4d:a9:1a:71:46:16:af:b3:15:e3:
d4:dc:08:95:8f:cf:40:fb:64:58:39:3f:a6:a7:53:
3d:90:7b:d3:fe:8c:66:29:ce:a3:07:f8:fd:8d:82:
40:9f:2f:9d:42:7a:88:f5:92:75:20:4e:60:df:f2:
7a:0b:d8:a2:e3:5f:c9:60:95:9b:34:69:9e:a7:cc:
ab:b4:85:99:ee:d5:63:a8:b0:7a:b0:78:9e:dd:5f:
9d:24:fc:2d:ce:f2:2f:ec:a8:14:8a:19:55:dc:29:
09:92:bb:f8:06:a7:a9:b5:22:c5:fe:30:c2:e3:4f:
66:cd:7f:62:30:dd:76:7f:f5:1d:36:22:8f:6c:33:
8a:a0:41:a4:b5:43:8f:b4:df:c6:7d:e1:ea:a8:49:
8a:07:d6:5f:db:b2:cc:db:48:05:c4:f9:55:69:c4:
b4:94:b9:ee:54:5d:7f:13:46:f3:1f:f9:90:90:11:
b4:1f:ac:c2:1d:1c:b3:26:52:99:26:89:1a:e8:ef:
b4:47:90:5c:15:8b:6c:64:92:d1:70:5b:49:44:cc:
32:23:19:8a:4e:08:04:a6:fd:64:38:3f:6b:a8:a3:
0f:7d:99:a4:f2:20:53:bb:20:62:96:3b:b5:39:90:
62:90:30:0c:dd:59:eb:e5:c4:53:48:e0:ba:13:fd:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:70:A9:75:44:68:01:E0:FE:81:68:A6:08:C1:46:CE:67:2A:A8
X509v3 Authority Key Identifier:
keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:9c:f3:3c:1d:f4:69:1a:3c:5e:77:83:05:e7:fd:0e:4e:
b0:d4:5d:55:cb:a8:ce:34:56:de:4b:8a:5f:8c:d0:b3:6b:2c:
f1:cd:4a:43:4f:d0:67:4b:45:16:fb:b0:a8:09:2d:8f:34:dc:
dd:aa:33:43:04:fe:27:4c:a4:eb:9d:47:80:dd:f8:09:5f:7e:
14:d9:5e:a8:07:73:c3:6a:23:7b:c6:d3:cf:9a:4c:d9:a6:14:
b4:03:d8:44:c3:75:cd:4c:45:37:47:ea:b0:07:8e:d5:f6:fc:
ce:4a:d9:6a:6b:ac:c4:48:e7:3a:dc:39:73:ed:db:fc:6f:29:
2e:69:c4:f9:6d:50:56:68:ac:fe:71:ba:a8:3c:5f:53:2e:c4:
c7:2f:2b:08:2a:cf:b6:80:96:b8:0b:ac:8a:7c:76:85:15:95:
8a:76:79:d8:10:e1:96:f4:6c:ea:33:48:57:09:a1:e4:0d:76:
ab:7a:68:5c:89:05:0e:1b:f1:3d:35:33:a7:21:cb:bd:5b:ae:
41:6f:d0:a3:9c:b6:54:84:c8:a5:55:ef:1b:8e:9c:9f:44:31:
48:a8:12:ea:bc:c3:80:39:a7:1d:44:e2:17:1a:f8:70:7c:76:
f1:8f:9b:69:f9:0b:34:38:06:95:54:aa:4e:a0:79:b8:8e:86:
c2:e2:8b:76
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRB
RjA0MDJGRUY1NkMzNEExOTJEMUQyMTg1RTZGQjU0NkFBNzAyQzAeFw0yNTAxMzAx
ODM4MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDQ0M3MEE5NzU0NDY4
MDFFMEZFODE2OEE2MDhDMTQ2Q0U2NzJBQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHoOSITakacUYWr7MV49TcCJWPz0D7ZFg5P6anUz2Qe9P+jGYp
zqMH+P2NgkCfL51Ceoj1knUgTmDf8noL2KLjX8lglZs0aZ6nzKu0hZnu1WOosHqw
eJ7dX50k/C3O8i/sqBSKGVXcKQmSu/gGp6m1IsX+MMLjT2bNf2Iw3XZ/9R02Io9s
M4qgQaS1Q4+038Z94eqoSYoH1l/bsszbSAXE+VVpxLSUue5UXX8TRvMf+ZCQEbQf
rMIdHLMmUpkmiRro77RHkFwVi2xkktFwW0lEzDIjGYpOCASm/WQ4P2uoow99maTy
IFO7IGKWO7U5kGKQMAzdWevlxFNI4LoT/azbAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUPMxwqXVEaAHg/oFopgjBRs5nKqgwHwYDVR0jBBgwFoAUdK8EAv71bDShktHS
GF5vtUaqcCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xBUksv
ZEs4RUF2NzFiRFNoa3RIU0dGNXZ0VWFxY0N3LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9kSzhFQXY3MWJEU2hrdEhTR0Y1dnRVYXFjQ3cuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTEFSSy9kSzhFQXY3MWJEU2hrdEhTR0Y1
dnRVYXFjQ3cubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr2c
8zwd9GkaPF53gwXn/Q5OsNRdVcuozjRW3kuKX4zQs2ss8c1KQ0/QZ0tFFvuwqAkt
jzTc3aozQwT+J0yk651HgN34CV9+FNleqAdzw2oje8bTz5pM2aYUtAPYRMN1zUxF
N0fqsAeO1fb8zkrZamusxEjnOtw5c+3b/G8pLmnE+W1QVmis/nG6qDxfUy7Exy8r
CCrPtoCWuAusinx2hRWVinZ52BDhlvRs6jNIVwmh5A12q3poXIkFDhvxPTUzpyHL
vVuuQW/Qo5y2VITIpVXvG46cn0QxSKgS6rzDgDmnHUTiFxr4cHx28Y+bafkLNDgG
lVSqTqB5uI6GwuKLdg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:42:40 2025 by rpki-client