Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
File: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft (raw, json)
Hash identifier: UHFh5aJVqWKmax9Wu10kxPqUB7uYchOlpl1GfHcfc8g=
Subject key identifier: 76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 0A23
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
Manifest number: 0A00
Signing time: Thu 30 Jan 2025 20:07:06 +0000
Manifest this update: Thu 30 Jan 2025 20:07:06 +0000
Manifest next update: Sat 01 Feb 2025 20:07:06 +0000
Files and hashes: 1: 6c_3uaVqWg3GcvpMAiAcUs7Ywa4.roa (hash: 3mUFObv+hMcO0cwIZW9BrOjysP5E39hM+HxBwte8yeo=)
2: BMe3NS4q9yyFJ7ImD0Vu86fltcc.roa (hash: PH9wrAHdhIb8I3Cco4+M1z+pcA8YvxRFADV2GW34Qss=)
3: DYaD4A7v-13S-R_5WUaYteP1uOo.roa (hash: tjsnhPR4lU+jvGb2Oe8ILdXQXcRBLtH/eMAMhSRnmwQ=)
4: Fpti2zZYgdBN7XTByWYVuT1oztw.roa (hash: qvF1psJooWTWaJC0eNXOol6PTorZAuTd+o2fG1CiDO0=)
5: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl (hash: 57C22G//qEFgi0DFPOe7BqpWgR/R7Qa+WBI4mzUubVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595 (0xa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Jan 30 20:07:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=76E7A08E8E67F4BA25AFA80D692B380CB1C7019A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:bb:0e:03:91:e0:51:5e:54:04:35:13:d6:
1c:90:13:e7:54:b0:c3:f3:41:11:e9:65:59:cd:3a:
a2:d9:ca:61:07:10:e9:c2:6c:45:b0:08:f8:12:3a:
b9:39:3e:aa:80:96:99:58:92:b2:aa:84:f0:9a:8b:
23:cb:98:0c:6e:a2:bd:67:e5:7f:d9:51:d8:8a:e7:
dd:56:ed:71:47:88:4f:fa:88:ae:ca:3b:e8:88:35:
b9:85:8c:c6:26:be:f7:5d:eb:39:1c:d4:a0:1e:2a:
d8:e2:8b:df:81:b3:cc:be:16:d3:5d:a5:c7:9a:0e:
4c:44:d6:8a:ad:2b:ad:42:6b:ce:8f:44:74:7a:94:
e1:b5:53:ee:69:53:73:c6:21:26:a8:da:00:51:51:
f6:f4:35:4c:0d:9f:cc:d5:f1:24:5c:19:c2:99:76:
e6:1e:06:80:f8:f6:1c:5a:8d:93:0b:eb:52:68:d4:
c1:d4:e5:b3:d1:d1:ca:e0:8c:a8:1f:fb:9f:6e:fc:
7c:40:1d:e9:60:1f:0e:fd:ee:2f:ea:d9:54:ac:a3:
a5:cd:27:c9:c5:84:8b:53:7f:c1:17:7e:2c:e6:1e:
92:3b:f7:0b:39:35:7b:c1:41:91:16:10:0d:ed:de:
06:81:40:15:32:cf:bc:37:85:16:2c:de:09:5c:7d:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:52:c9:99:22:dc:8d:25:f7:c8:75:ca:2a:43:d0:a4:4a:7f:
74:32:f1:5e:f3:e6:51:c9:27:3d:7c:41:18:12:e6:ee:c4:30:
24:2d:e1:cf:3f:b8:86:a1:da:28:29:1d:0b:3e:d5:67:78:ab:
df:ac:68:ec:10:32:72:89:df:99:a8:d1:3d:d1:9a:c6:7c:3d:
48:25:41:c0:cc:00:ec:6b:69:9d:5b:61:a5:f5:33:48:46:cd:
1f:63:be:18:5c:14:ff:5d:ec:fd:ba:9f:d8:d9:55:a3:79:05:
83:2d:29:53:7a:45:60:b2:31:3e:b5:2e:31:f2:04:5c:f6:8d:
a2:6f:f7:68:99:df:59:90:d8:29:01:7b:36:49:b0:aa:ee:78:
91:28:8d:14:e1:73:11:20:91:09:51:de:d3:8a:cc:fd:b9:13:
43:79:04:e5:a6:ca:01:31:b2:fd:73:d4:45:a0:a5:c6:33:1d:
a0:b6:4a:09:b8:64:26:97:65:db:f9:59:df:dc:22:0f:c6:cb:
3d:85:e0:fe:31:e6:76:92:1a:1b:38:5b:3c:54:16:12:59:0e:
b4:f7:1e:94:ca:ab:1a:59:11:d2:76:0d:23:7d:cd:95:d4:d4:
94:49:49:f8:98:f1:0c:b9:98:91:92:66:24:dd:97:3d:4e:b2:
75:a5:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:53:48 2025 by rpki-client