Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft
File: aMrB-gTYDP4-K-l8erGFK2ZWU18.mft (raw, json)
Hash identifier: stmw9rC7n3X8vrXBGslikx750/0MVpjTu48jqrHhUVk=
Subject key identifier: 06:C2:74:CC:25:B5:C7:36:BD:BE:A4:AD:32:37:AF:D5:46:1B:69:09
Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F
Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
Certificate serial: 12AA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft
Manifest number: 129D
Signing time: Thu 30 Jan 2025 20:07:13 +0000
Manifest this update: Thu 30 Jan 2025 20:07:13 +0000
Manifest next update: Sat 01 Feb 2025 20:07:13 +0000
Files and hashes: 1: 9nZsTgG_HfLTyAE0p1bQkBKSDoA.roa (hash: w8ZG/DXOCL/WNlwzHNLQYhLwr+dneP1ESChcw/er1cQ=)
2: OxEekMYLJ6o4Ak8eoVztISuVxGQ.roa (hash: D/AmEAZ27c/GvGhHymp3BANqfQb+YvIgQjgYH3OP2Y0=)
3: aMrB-gTYDP4-K-l8erGFK2ZWU18.crl (hash: f07czwSIq5YVHdTY79M5uU1DgmGClZ8gZAJAe2meJfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4778 (0x12aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
Validity
Not Before: Jan 30 20:07:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=06C274CC25B5C736BDBEA4AD3237AFD5461B6909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:87:c4:0b:a7:37:be:2d:dd:5c:55:39:28:
31:c9:ca:ac:20:56:97:9a:40:08:e1:0e:b0:b4:9b:
15:3f:da:29:fd:41:72:26:82:fd:dc:23:f8:89:06:
98:f9:bf:5c:89:dd:f2:87:c3:74:4f:c2:0d:4b:f1:
0e:36:f4:dc:0b:9c:5d:15:66:d3:c2:ed:67:e2:e3:
aa:68:4d:f1:c4:a0:52:1c:5b:7d:d0:da:b9:23:83:
55:2e:71:36:db:a6:cf:97:7f:25:cb:7f:0a:50:1c:
d7:cf:09:08:e5:bd:63:95:f7:b9:c8:9e:ba:d0:79:
53:ac:69:e6:b2:23:3f:8e:95:7c:26:c6:e7:2d:19:
e2:e5:13:8b:a3:70:ce:26:36:ed:12:70:ed:6d:42:
1a:3c:2f:b5:49:45:4d:49:8c:50:a5:5c:88:16:53:
df:f6:9c:3e:eb:f6:4d:9f:3b:f6:4c:6c:eb:ea:47:
80:69:19:b5:df:15:ec:fd:8c:04:70:0b:ab:41:8a:
7a:2a:71:21:8a:50:f6:50:c7:d5:a4:3e:a8:3e:e6:
7c:86:6c:e7:8b:69:fc:f7:f0:55:8c:69:f5:ca:c8:
a7:d6:2c:c4:f4:56:2f:e8:b2:f2:e1:39:fb:41:49:
1b:40:4f:63:3a:31:4d:9d:48:3f:ea:4b:35:fd:d7:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C2:74:CC:25:B5:C7:36:BD:BE:A4:AD:32:37:AF:D5:46:1B:69:09
X509v3 Authority Key Identifier:
keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:54:b8:48:eb:ed:8e:ee:95:a4:6b:82:ab:19:68:93:4a:ff:
10:3a:18:4a:92:d9:12:85:95:c4:a8:d7:29:e8:0d:ec:7d:b4:
95:f2:4b:70:f4:41:59:2c:82:3d:a9:42:d3:04:b5:27:b3:dc:
fa:ff:93:0c:96:a2:a4:36:30:b3:d6:83:44:85:b2:1b:49:9c:
4c:0b:7c:0e:ce:54:b9:2e:6a:be:c3:b2:67:cb:0a:dd:11:70:
02:18:ac:bf:18:0b:72:69:6e:3a:ac:c7:52:a8:db:38:33:c9:
63:22:44:14:ef:a7:4a:67:e1:c7:69:73:a2:6f:22:4b:9c:6d:
ab:ae:4a:61:fd:8f:f4:83:4b:a7:1b:12:b6:59:40:fb:d5:d1:
9b:21:77:7e:d4:d4:33:b8:8b:10:9e:51:0c:55:aa:a8:40:de:
c0:6e:73:e4:27:13:26:05:58:b2:b8:fe:85:f5:ef:92:57:55:
a9:e9:87:7b:1a:c3:83:fe:03:2b:be:24:6b:85:5b:15:92:71:
9b:06:a2:02:84:1d:55:76:2a:ef:59:6c:35:77:98:f6:a0:0f:
e7:05:a3:17:5a:c6:6a:1f:83:cf:ce:12:e2:84:1c:fb:79:33:
74:5c:2f:52:0e:2b:48:e9:d8:a0:61:a2:7d:b8:4e:0e:d8:69:
02:0c:53:d6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICEqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD
QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yNTAxMzAy
MDA3MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2QzI3NENDMjVCNUM3
MzZCREJFQTRBRDMyMzdBRkQ1NDYxQjY5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT1YfEC6c3vi3dXFU5KDHJyqwgVpeaQAjhDrC0mxU/2in9QXIm
gv3cI/iJBpj5v1yJ3fKHw3RPwg1L8Q429NwLnF0VZtPC7Wfi46poTfHEoFIcW33Q
2rkjg1UucTbbps+XfyXLfwpQHNfPCQjlvWOV97nInrrQeVOsaeayIz+OlXwmxuct
GeLlE4ujcM4mNu0ScO1tQho8L7VJRU1JjFClXIgWU9/2nD7r9k2fO/ZMbOvqR4Bp
GbXfFez9jARwC6tBinoqcSGKUPZQx9WkPqg+5nyGbOeLafz38FWMafXKyKfWLMT0
Vi/osvLhOftBSRtAT2M6MU2dSD/qSzX91xN/AgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUBsJ0zCW1xza9vqStMjev1UYbaQkwHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8
erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ
VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS9hTXJCLWdUWURQNC1L
LWw4ZXJHRksyWldVMTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0FS4SOvtju6VpGuCqxlok0r/EDoYSpLZEoWVxKjXKegN7H20lfJLcPRBWSyC
PalC0wS1J7Pc+v+TDJaipDYws9aDRIWyG0mcTAt8Ds5UuS5qvsOyZ8sK3RFwAhis
vxgLcmluOqzHUqjbODPJYyJEFO+nSmfhx2lzom8iS5xtq65KYf2P9INLpxsStllA
+9XRmyF3ftTUM7iLEJ5RDFWqqEDewG5z5CcTJgVYsrj+hfXvkldVqemHexrDg/4D
K74ka4VbFZJxmwaiAoQdVXYq71lsNXeY9qAP5wWjF1rGah+Dz84S4oQc+3kzdFwv
Ug4rSOnYoGGifbhODthpAgxT1g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:47:38 2025 by rpki-client