Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
File: bKW4t-CigcRnJiJG3wyFnfX4fx8.mft (raw, json)
Hash identifier: 2EnSYXbBqydIKkKs1PSQgz08Dck3WD5k/8UkpD5V4Ew=
Subject key identifier: D7:62:F2:FD:46:30:B4:60:04:B4:DC:69:56:A9:96:5F:50:00:63:37
Authority key identifier: 6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
Certificate issuer: /CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Certificate serial: DD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
Manifest number: DB
Signing time: Thu 30 Jan 2025 18:38:34 +0000
Manifest this update: Thu 30 Jan 2025 18:38:34 +0000
Manifest next update: Sat 01 Feb 2025 18:38:34 +0000
Files and hashes: 1: -Y7wpraZt-_PI1FLYtnEjjSsNvA.roa (hash: Cf00dec5u78ptkJnyfZfkcGmyHYOj3dMSo3uqUYCnnA=)
2: bKW4t-CigcRnJiJG3wyFnfX4fx8.crl (hash: 0bN0T0zIRzbPWgiR1E78lmt6NYzQkPkCZydpqs8LTBk=)
3: eAJVkLaku43w7o8lmO8C1-hWynU.roa (hash: XLqYrQsGhIru68C9Nw8WbTuyOZXSkhcK6EsZO7MHkuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Validity
Not Before: Jan 30 18:38:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D762F2FD4630B46004B4DC6956A9965F50006337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:b7:8c:80:8b:3e:ae:56:61:8e:87:ba:af:
d9:44:2c:dd:ab:f0:fc:5c:87:fb:b0:d7:b4:1a:b8:
7f:84:9c:82:ae:e5:88:66:f9:2b:53:b3:2f:33:52:
85:5a:fc:34:3c:b1:e4:3f:c2:21:62:0d:8b:a4:67:
3d:43:42:00:73:e1:57:43:24:38:e3:76:3d:59:41:
00:4e:80:7f:e6:a5:c6:e6:7b:cc:20:72:09:76:b7:
59:5c:40:d3:be:09:63:f8:12:6f:0c:10:be:ec:ab:
f0:88:84:8e:6f:f6:87:64:cc:fc:0e:f1:85:eb:c2:
7a:c2:2f:fb:80:f6:5b:2a:25:86:14:ec:07:cb:e5:
29:ae:b3:89:7f:24:74:6b:a9:ba:66:b5:9f:03:b6:
03:67:35:3c:0a:42:4c:07:7a:45:38:c8:30:3a:3f:
7f:5d:81:01:6b:de:49:b9:51:06:2c:31:ef:cc:2c:
7b:31:2e:8e:0b:3c:d1:e2:9e:d6:4b:b5:ca:6c:0a:
54:d7:61:65:fe:5a:eb:4a:c3:e9:81:5f:e6:76:76:
b1:e5:d3:12:b5:7e:5c:2f:26:1d:ff:3e:27:73:74:
5c:8a:ca:56:73:f2:d3:68:4e:ff:60:9a:b3:3e:03:
b9:6e:44:77:09:d4:5e:b8:82:d0:cd:e2:60:43:30:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:F2:FD:46:30:B4:60:04:B4:DC:69:56:A9:96:5F:50:00:63:37
X509v3 Authority Key Identifier:
keyid:6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:93:5f:49:d1:4e:ac:00:b3:df:26:36:6f:30:56:77:bd:e3:
9b:86:5c:eb:81:b3:64:dd:ae:71:df:80:91:27:9f:41:0f:c9:
47:40:38:30:69:c4:b2:97:a2:a4:0e:9c:8a:1b:6e:5f:d6:56:
80:ff:41:2b:79:cb:11:7f:d2:b9:72:2b:32:35:9a:d9:65:b7:
93:bf:b2:48:da:2c:dc:2a:1d:62:2f:d9:98:44:10:1d:61:35:
df:e6:fc:62:d4:64:90:ff:56:97:c0:3d:99:e1:3d:64:62:12:
5a:ea:31:dc:3d:e3:74:b1:78:42:d3:7c:68:dd:a8:df:f8:62:
35:4a:14:f9:cb:27:3d:46:ce:cf:ef:0f:92:5a:a6:e5:fa:c0:
3a:62:2e:d2:1e:6e:f8:50:63:f1:71:2d:26:c1:6f:b7:bc:b9:
c3:8f:1b:0b:9b:76:20:53:85:77:d9:2e:10:fb:16:62:ae:0d:
05:f3:6d:1e:b3:77:a3:ba:d4:b6:d5:a9:5a:62:2c:a3:0a:68:
1e:65:be:04:d6:39:78:58:50:99:97:37:99:8d:f3:bc:82:d8:
ee:41:36:68:3d:d6:03:3d:27:c8:09:a1:42:fb:8b:bf:e8:c3:
6b:94:87:d1:0a:ad:73:45:1c:f8:25:eb:9f:7d:f6:2e:8e:90:
62:3b:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:31:34 2025 by rpki-client