Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.mft
File: 05oCrhUIYtFftyfFEbEE1j77RoY.mft (raw, json)
Hash identifier: 1lVS0fg/0szsLkd8Je+f4HOp1pp+poS9T8K6Dp0Op4o=
Subject key identifier: AB:4B:54:3E:FB:79:74:31:23:9C:57:D4:3D:E7:3E:09:FF:F2:97:7A
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial: 125E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.mft
Manifest number: 1247
Signing time: Thu 30 Jan 2025 19:38:48 +0000
Manifest this update: Thu 30 Jan 2025 19:38:48 +0000
Manifest next update: Sat 01 Feb 2025 19:38:48 +0000
Files and hashes: 1: 05oCrhUIYtFftyfFEbEE1j77RoY.crl (hash: uG1Zk9Gw2ZYQE6c5GUC7ShVONGdqSoumgY+s2YfcS/4=)
2: 5pyUoag8aKIcwce03p8lgcqjowE.roa (hash: 5eML+Lqqt09qTr7gJlLAQfhIm3PsKENUc4R/Vpd793M=)
3: 8yXOjN9zRtosBBIHEBVGLCLQjgA.roa (hash: BAuZs+IaUZMMWWZrKQaB+eMDnXUmrrmOCFhCQH4CHz8=)
4: VSd5VMBEnUQHDxefBFJ4F4qMLA0.roa (hash: KfamYkOxd8tQdMHzxMJ/UGl6bOC0HooJsB/fre/BaRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4702 (0x125e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
Validity
Not Before: Jan 30 19:38:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AB4B543EFB797431239C57D43DE73E09FFF2977A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:01:12:bf:21:4d:b4:15:2b:78:f5:71:02:
2f:a7:89:0a:8f:ac:0e:02:43:89:f1:9a:8f:7e:bf:
58:a9:e5:e9:96:92:29:b5:fe:2f:d5:69:aa:87:9e:
bf:19:c6:ae:fc:f6:d4:1b:24:2e:a5:e8:54:4c:90:
69:be:11:65:7d:cf:d3:51:cc:a4:4b:8c:11:98:d6:
0f:fb:6f:01:de:4d:96:19:55:eb:fb:f1:3a:15:cd:
95:32:b3:9d:97:f0:cb:c1:5f:84:22:38:a5:fc:af:
0f:33:f3:20:32:44:80:ef:a2:18:4a:f0:cf:e1:cb:
2d:35:e5:b6:38:21:e4:79:9e:5d:4f:46:a6:75:e4:
4b:79:b1:40:38:8d:32:ab:4e:00:0c:36:b1:c6:30:
40:e5:75:78:46:f2:92:a4:d2:0b:76:67:65:f5:c0:
f6:8f:e9:3a:14:4d:88:28:e4:e9:60:82:7e:e1:ea:
be:f8:73:6d:fe:97:61:8a:1e:c4:fc:9f:47:d8:96:
3b:80:a1:8d:64:24:8b:5a:38:81:23:18:70:1f:65:
6f:dc:ee:dd:42:12:6e:b8:9b:e9:d6:c7:e1:6e:ef:
a1:89:83:32:9b:12:4c:83:c6:71:ec:41:42:dc:c1:
6a:f4:33:0e:b8:e4:bc:2f:fe:0e:7c:e5:ff:99:99:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:54:3E:FB:79:74:31:23:9C:57:D4:3D:E7:3E:09:FF:F2:97:7A
X509v3 Authority Key Identifier:
keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cf:c1:81:60:45:91:81:cc:bb:22:fb:5e:61:4d:3a:74:94:
ae:80:dd:26:55:21:76:50:4c:17:6b:0f:5a:5e:eb:40:99:8f:
41:b3:57:99:bc:ea:2c:b5:27:05:ce:9e:b3:12:b4:7c:df:a8:
e7:a4:a4:4f:47:ef:76:89:b9:7d:21:40:17:ec:92:a9:1c:aa:
ee:44:2d:85:af:ef:96:43:e2:3b:70:dd:f6:dd:30:4b:3c:b4:
f6:ff:97:0b:04:e4:5c:19:a1:ba:11:1a:b5:95:62:1a:dc:1a:
c2:8d:41:bc:48:28:ce:d3:36:c2:13:d8:fc:ae:ce:72:9e:f4:
e8:3d:0b:cd:43:e3:5f:57:3e:1e:86:3f:18:19:02:9e:9d:eb:
06:65:84:4d:5d:cf:f4:70:17:ba:c3:7f:d0:6b:cd:bd:73:33:
59:eb:c8:ee:09:ef:52:af:17:40:37:e1:45:6b:75:15:e6:e9:
82:d6:c1:e5:7b:3e:8d:69:21:20:94:cc:e2:a7:b4:01:b3:1c:
50:d0:c9:fd:3f:bb:e2:75:73:b8:b4:73:c7:48:a6:d4:31:97:
f8:ea:2c:43:da:78:d1:25:bf:c0:2f:72:e8:15:06:03:37:68:
ad:fa:8b:fe:bb:30:4a:9c:ae:db:8c:44:67:6b:37:15:05:37:
c1:0d:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:27:55 2025 by rpki-client