Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
File: 8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft (raw, json)
Hash identifier: F69wUl9F6megfMg+Y4VFXVvbjYqBC1vu8nVa2fBnir8=
Subject key identifier: 82:A7:EA:2D:39:84:7C:AA:F9:6D:A1:9D:BE:9D:BF:5A:38:DD:22:49
Authority key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
Certificate issuer: /CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Certificate serial: 1300
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
Manifest number: 12F1
Signing time: Thu 30 Jan 2025 18:37:40 +0000
Manifest this update: Thu 30 Jan 2025 18:37:40 +0000
Manifest next update: Sat 01 Feb 2025 18:37:40 +0000
Files and hashes: 1: 76Ev_ZNsx0TJPEGhTUMEh03cd-w.roa (hash: vBFQ8IVz9bWw5kCEnKUzzsp9ffvmFIYvKApFBw808Is=)
2: 8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl (hash: z6QG+dCX3Yi0a9IxAfDM5s4imQwGvJfk8KbweMfgS8E=)
3: Tz4lMQpnsE4hKzLxx5vLCMKeDR0.roa (hash: uKaT4TzgugL3ii7eDGbD+Se2PD82RFs9TNUPfKMdMTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4864 (0x1300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Validity
Not Before: Jan 30 18:37:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=82A7EA2D39847CAAF96DA19DBE9DBF5A38DD2249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:ae:be:91:b9:b6:81:5a:40:6c:74:51:ba:
82:21:4f:c9:71:ec:2e:74:8a:00:b8:90:5d:5e:1f:
82:f3:89:ff:7e:db:63:8a:a9:42:68:34:70:00:28:
21:9f:2b:92:23:ca:1a:cc:65:87:6a:59:51:18:f2:
aa:2e:bf:90:f0:8f:61:83:31:a2:d6:12:bb:c2:9b:
2c:2e:1b:b8:e2:2b:d9:85:4d:b3:22:81:66:d2:03:
ee:2e:fe:91:df:6b:25:7a:c9:e7:c5:d4:27:ee:aa:
01:d6:f4:ce:53:34:5b:a6:a8:16:e7:a8:7a:0f:b9:
e0:a7:bf:8a:17:47:83:b6:30:f9:c6:d4:c9:02:ba:
0a:7d:55:73:dc:b9:92:c0:f0:95:25:dd:b1:53:0e:
30:38:ef:20:7e:b6:23:26:13:91:f3:55:01:9e:4f:
b0:23:d2:ff:72:6e:78:ff:77:2e:2f:d2:d5:82:ed:
e8:4c:3f:30:7c:a1:69:61:3e:12:e3:46:60:70:5f:
01:55:a7:12:ee:5b:ab:e3:c5:0c:43:20:4e:1a:42:
d5:57:9b:1a:79:1d:eb:dd:6d:7f:1d:20:59:41:0b:
b2:95:73:72:ea:ea:6d:be:09:bb:62:33:cd:62:55:
ef:90:4b:8f:c1:e6:c1:03:34:00:67:ff:7b:9c:b2:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A7:EA:2D:39:84:7C:AA:F9:6D:A1:9D:BE:9D:BF:5A:38:DD:22:49
X509v3 Authority Key Identifier:
keyid:F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:b3:93:41:8a:14:1e:28:ab:6a:c2:88:9e:f4:40:71:43:e8:
f9:4a:c8:c6:72:d0:6f:52:7a:62:b4:b7:26:16:88:51:2f:65:
19:d9:1b:3e:1a:ff:0d:39:b3:df:5c:6e:f9:d0:20:0e:57:a4:
b9:71:19:8d:46:b3:7b:e9:e5:d0:da:ec:df:8e:2f:a8:07:d1:
cd:7f:8a:2c:e1:15:e4:77:dc:65:f3:85:0a:22:b5:16:25:7f:
f9:9c:07:fc:9c:2f:ef:20:35:d1:4f:92:82:d7:37:13:be:f3:
d9:49:da:49:20:21:5e:c7:58:bd:40:b8:f7:f2:8a:42:8d:d1:
0c:f0:aa:95:4b:31:9b:9a:3c:f6:8d:66:96:07:63:49:cf:45:
02:bf:f4:5a:9c:67:28:6f:32:e3:60:9e:34:f8:25:42:8d:46:
04:01:d1:fd:9a:9b:77:5e:f1:72:ec:35:f9:1c:d4:ab:e0:eb:
7d:9b:8d:aa:12:0d:a5:7a:eb:c8:dc:b8:88:56:c6:39:9b:48:
78:06:d6:a0:f9:85:f6:78:65:0f:b7:83:ea:cd:e2:35:09:ca:
d0:09:05:75:38:ff:8f:1e:25:e0:d3:86:52:15:d6:f4:b6:92:
16:e9:2a:3c:21:40:f8:f4:cf:f4:c1:25:f8:6f:32:5a:c5:1d:
5a:0a:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:32:20 2025 by rpki-client