Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOIT/CSkz_8q9AKLzc9doLy3jwTvvt0U.mft
File: CSkz_8q9AKLzc9doLy3jwTvvt0U.mft (raw, json)
Hash identifier: C8+2Mdma2T6LCvDQH5f0ds96kz+5/haqzGW/qg5ljyQ=
Subject key identifier: 75:4F:4E:F6:82:9A:10:AE:22:2D:C5:6B:4F:25:E2:31:5C:45:9C:37
Authority key identifier: 09:29:33:FF:CA:BD:00:A2:F3:73:D7:68:2F:2D:E3:C1:3B:EF:B7:45
Certificate issuer: /CN=092933FFCABD00A2F373D7682F2DE3C13BEFB745
Certificate serial: 21
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSkz_8q9AKLzc9doLy3jwTvvt0U.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/CSkz_8q9AKLzc9doLy3jwTvvt0U.mft
Manifest number: 20
Signing time: Fri 31 Jan 2025 15:38:53 +0000
Manifest this update: Fri 31 Jan 2025 15:38:53 +0000
Manifest next update: Sun 02 Feb 2025 15:38:53 +0000
Files and hashes: 1: CSkz_8q9AKLzc9doLy3jwTvvt0U.crl (hash: iYswY1vtQFKMA4BxLnJPayJSmGAR21owH3zyDr5wsyY=)
2: S5nZcyK5KtXiniHbW7GLr630bnQ.roa (hash: /LYx2r/sihihT1E6j4d3ZOJcy8UeDCb06Uqe9FICpVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092933FFCABD00A2F373D7682F2DE3C13BEFB745
Validity
Not Before: Jan 31 15:38:53 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=754F4EF6829A10AE222DC56B4F25E2315C459C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:48:40:fc:d5:a4:dc:b9:b3:d5:cc:b1:3f:
5b:d2:78:b7:30:af:91:f3:cf:a3:e6:e6:0d:0d:24:
0c:da:b3:d6:15:a9:69:98:01:d7:94:80:a0:fc:4f:
bd:9e:14:90:82:13:98:2f:61:58:09:79:fd:b8:18:
09:54:d3:e6:b4:26:e5:43:4c:c3:14:41:30:49:14:
5c:f4:6a:27:9b:8b:ea:0e:34:bb:c5:79:50:81:d9:
30:9b:32:d1:ac:4a:41:60:2e:11:f5:50:39:f7:7a:
c8:24:4e:89:ce:b9:84:a9:66:ed:bd:08:ab:f4:b2:
45:96:ea:7b:ec:90:62:df:0e:3f:1c:7f:5c:a6:02:
eb:92:ab:b9:09:8a:c9:70:ab:24:34:12:c6:5e:34:
a4:68:86:6a:be:fb:62:28:b2:33:e6:6e:56:3f:04:
de:41:5f:4d:db:0d:d4:87:a2:f8:c1:9d:e7:19:8d:
0b:6c:0c:6a:f0:23:74:f3:5f:d6:72:e0:1e:54:97:
e3:ef:7a:ca:b1:74:7a:2e:93:ee:d3:c7:1b:c6:9f:
1a:27:58:94:7a:14:33:c5:2c:51:d6:5a:bf:bb:11:
e7:f7:0f:7c:88:63:2f:bb:5a:d0:2a:53:1e:87:16:
17:eb:9d:e3:9d:b2:51:b2:c4:81:06:af:9b:4b:1b:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4F:4E:F6:82:9A:10:AE:22:2D:C5:6B:4F:25:E2:31:5C:45:9C:37
X509v3 Authority Key Identifier:
keyid:09:29:33:FF:CA:BD:00:A2:F3:73:D7:68:2F:2D:E3:C1:3B:EF:B7:45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/CSkz_8q9AKLzc9doLy3jwTvvt0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSkz_8q9AKLzc9doLy3jwTvvt0U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/CSkz_8q9AKLzc9doLy3jwTvvt0U.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:40:d5:fc:7f:38:db:24:75:04:54:02:71:bb:b9:a5:7c:51:
f1:7a:6d:3a:23:61:85:33:0e:32:d7:b4:b9:b1:e9:a6:09:89:
45:80:91:09:3b:f6:4a:27:db:69:08:17:8d:23:2b:24:6c:86:
1a:f8:67:c3:6b:2e:6a:26:a7:9a:6f:40:17:80:58:d9:51:99:
3a:ab:26:14:73:a5:be:61:9e:67:a3:f3:a2:04:50:ed:ed:de:
b2:d3:31:de:3b:fc:af:15:e7:17:34:95:c6:5f:7d:8c:f7:24:
80:42:c4:87:18:cb:44:d2:1b:a3:24:d5:84:fa:af:12:c9:91:
28:03:19:29:85:9e:c4:3a:9b:9a:26:29:fb:4a:53:4b:90:1e:
1d:ab:f4:44:6d:65:07:76:5e:d1:0c:0c:8f:2e:b9:22:f5:e1:
5a:00:e8:78:28:3d:da:6e:7a:54:35:a4:86:f3:97:af:2e:f8:
28:0d:d4:bf:91:58:c9:a6:19:65:1a:7b:e2:a7:b1:74:1a:29:
df:6d:0f:7a:24:a4:be:54:3c:c5:ab:04:bd:25:a4:35:bf:ff:
ed:46:e4:e4:ba:f4:9a:03:0e:65:5b:08:5d:91:af:fd:1e:22:
2f:da:eb:40:e0:6c:f3:9a:1a:b3:27:d4:81:1e:7b:b7:3c:14:
d4:16:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:21:19 2025 by rpki-client