Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft
File: VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft (raw, json)
Hash identifier: 7ADq23+TA3/roiTqPK2G0MWWgpl6Uwew4Fo4uUQw4Ls=
Subject key identifier: 26:6A:6A:E3:D9:DE:7D:68:72:39:FF:86:01:DE:DA:E8:3A:AF:B7:29
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0C9D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft
Manifest number: 0C75
Signing time: Thu 30 Jan 2025 19:07:03 +0000
Manifest this update: Thu 30 Jan 2025 19:07:03 +0000
Manifest next update: Sat 01 Feb 2025 19:07:03 +0000
Files and hashes: 1: TGyxLiFanI4WKj3NQvaVHsDZqYU.roa (hash: 4gk3kMMNslq3iXjetLzSTBZQHUCz/M5e2b5CSQIfvoc=)
2: UvoihLayc-Ce3QQglpHlec3OCtg.roa (hash: ngBpPktJUGBBwXlCji0+EXKfLMhUVApGLIyypkv5zq4=)
3: VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl (hash: ApVp2DUl6OFybhln8hvudp8XTUT35mkD2M6GjFCKpUc=)
4: gL-tfAgLl5p9BStn4aTHjNyRnfM.roa (hash: TBMb+ZxXBEjFyRZofm7TmREMlb9IFfHrUv8oFCTjxu8=)
5: je8hVqTYb4NKDJMcCHAN4vg5lWY.roa (hash: ibkZCMzPqBk4MxETbFVSatc3S8HyiYQKEppLvZHERC0=)
6: nXyImVDTqqwXLiDHdFQn1-vs_gw.roa (hash: TeD7R5pvsI+JRbMUwaN2IWjKvk84D17ubxWgMZ/Ngz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Jan 30 19:07:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=266A6AE3D9DE7D687239FF8601DEDAE83AAFB729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:fb:f1:27:45:19:3f:ba:79:c1:97:b6:22:
a3:0c:03:09:0d:55:eb:6a:e6:e7:9e:e0:c2:45:38:
f9:a1:ae:53:ea:c5:64:59:24:0d:f3:79:94:94:d1:
d2:43:50:11:01:b2:09:0f:83:c4:91:3d:1b:3a:66:
de:79:63:c4:ef:dd:8b:97:b4:0c:90:9b:b1:3d:cb:
42:a3:1c:7b:22:6c:cb:b9:10:45:90:20:69:83:63:
fb:8c:84:81:c3:96:52:60:12:3e:cf:97:fe:67:e1:
0b:36:30:04:00:24:01:82:e5:21:17:51:d5:71:66:
a2:73:d7:37:ea:14:87:ad:30:a5:e6:eb:2b:e6:3b:
a7:b7:ba:9c:b4:3d:62:8b:38:06:f2:2d:c3:6c:8a:
a9:3d:97:fa:58:02:90:90:3f:32:f5:9e:04:15:2b:
dc:17:16:4f:e3:23:17:3a:29:3a:fa:0f:08:6c:c8:
18:81:54:37:fa:e9:c5:3b:10:08:ad:4e:a2:5d:93:
a4:d3:d3:5a:6f:59:7a:1c:eb:df:b2:21:11:fa:c8:
f8:ef:0a:9d:7e:4c:07:63:26:4f:31:c9:6e:0a:4e:
88:8a:4c:13:b7:5b:d4:aa:8a:50:0e:62:3d:71:d1:
a0:b7:1b:68:09:00:cc:13:2f:2b:64:0f:29:57:4a:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6A:6A:E3:D9:DE:7D:68:72:39:FF:86:01:DE:DA:E8:3A:AF:B7:29
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:fb:4c:01:f7:c3:7e:5c:24:97:4e:82:c0:76:33:7a:1c:05:
6c:f8:03:6c:96:52:3f:d6:de:af:15:35:2b:f0:b8:4d:9b:21:
d3:e5:fd:02:7f:ed:81:8f:1e:92:9f:88:d1:40:73:63:07:05:
2d:05:ed:16:af:b3:7f:9a:f3:f3:0b:c7:fe:7a:01:43:a7:a4:
3b:10:a0:7e:a1:ff:1d:1e:17:b2:34:1f:8c:cc:cb:d8:64:e1:
7c:ca:67:7e:2d:cc:b6:9a:f9:4f:74:f4:1e:b4:09:47:28:dd:
d5:d9:60:db:e1:4e:c0:7d:33:94:1f:1f:79:d4:d0:e9:d5:95:
cc:d7:5c:d7:04:9d:8a:34:e9:69:26:8e:73:1f:98:9a:b1:b5:
fd:1e:e0:ba:e4:39:d5:cc:58:0a:4a:8b:b0:e9:4b:4c:1d:76:
ce:d2:ca:4d:5c:f8:74:79:4e:c9:0d:01:60:1b:ca:40:d1:0e:
0e:d1:16:e0:ca:24:c9:0c:73:2e:1f:2b:f3:f6:9f:2d:5b:3f:
36:58:4c:55:27:62:0c:2e:a5:25:b9:9a:d4:85:73:9b:78:72:
86:48:ce:0e:51:51:4a:aa:8a:64:03:03:d3:e5:4c:d3:76:c1:
3d:ca:99:93:16:75:1f:62:8f:57:e0:24:1c:40:e0:fb:11:fa:
54:d3:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:58:53 2025 by rpki-client