Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IONET/LbKOpImaSGiREUdHpoJfwZ1SQss.mft
File: LbKOpImaSGiREUdHpoJfwZ1SQss.mft (raw, json)
Hash identifier: MjaO5miGSXsRC4NG5PwjoNf9YGfL8RQX+HGONJKCvlk=
Subject key identifier: 09:C3:B4:50:D3:85:84:D3:BF:BA:FF:57:D1:D1:B1:77:0B:58:7D:2D
Authority key identifier: 2D:B2:8E:A4:89:9A:48:68:91:11:47:47:A6:82:5F:C1:9D:52:42:CB
Certificate issuer: /CN=2DB28EA4899A486891114747A6825FC19D5242CB
Certificate serial: 0C71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LbKOpImaSGiREUdHpoJfwZ1SQss.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IONET/LbKOpImaSGiREUdHpoJfwZ1SQss.mft
Manifest number: 0C71
Signing time: Thu 30 Jan 2025 16:37:34 +0000
Manifest this update: Thu 30 Jan 2025 16:37:34 +0000
Manifest next update: Sat 01 Feb 2025 16:37:34 +0000
Files and hashes: 1: LbKOpImaSGiREUdHpoJfwZ1SQss.crl (hash: RZutsYVaeKtaaZmUDn0XlWoz6tAvHzxrgOJlMROm9Go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DB28EA4899A486891114747A6825FC19D5242CB
Validity
Not Before: Jan 30 16:37:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=09C3B450D38584D3BFBAFF57D1D1B1770B587D2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:69:bd:df:e4:8a:5c:02:8b:d6:dc:84:74:
b9:f8:58:10:bb:8d:eb:ee:3e:18:85:79:37:a9:1f:
b8:8f:6a:01:4b:12:da:d9:c0:69:2d:78:a9:94:59:
3d:75:b4:f6:08:19:3d:4a:53:e5:91:e3:36:ed:aa:
cb:11:5a:89:d2:93:c3:36:ad:b5:d4:73:f1:4d:67:
e3:b4:34:a4:e6:c7:25:87:cf:92:62:01:b5:70:c1:
1b:4f:bb:5a:9e:27:8b:26:6a:8e:9b:22:45:d6:8d:
78:40:82:cc:47:fa:57:cd:0e:c7:1a:49:fe:e1:ec:
3b:8f:67:e4:5d:0a:93:fe:b3:df:6b:fa:26:51:65:
77:c3:b9:cc:ea:a8:d5:a0:c9:ba:a9:0d:09:7b:b8:
58:ab:d9:8e:b7:06:24:23:72:1e:44:ca:c0:0f:1d:
0c:95:1e:c9:48:65:ab:bf:b5:44:08:f9:95:3e:af:
8e:58:56:d9:0d:92:26:c8:75:fa:db:ac:85:a6:de:
6e:5f:76:d6:fa:1d:60:40:6f:a5:cc:50:13:cc:45:
1f:48:c9:c1:d1:b8:a5:06:d8:29:4b:d0:90:8d:e2:
b5:a9:d8:90:1d:de:9d:d9:1f:c5:e8:35:84:31:f9:
a1:4b:8b:fe:fe:46:eb:7b:75:78:be:7d:6f:a7:47:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:B4:50:D3:85:84:D3:BF:BA:FF:57:D1:D1:B1:77:0B:58:7D:2D
X509v3 Authority Key Identifier:
keyid:2D:B2:8E:A4:89:9A:48:68:91:11:47:47:A6:82:5F:C1:9D:52:42:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IONET/LbKOpImaSGiREUdHpoJfwZ1SQss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LbKOpImaSGiREUdHpoJfwZ1SQss.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IONET/LbKOpImaSGiREUdHpoJfwZ1SQss.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6a:93:e6:64:ab:85:0d:43:1e:69:78:e7:3f:a2:95:34:1c:
00:d3:ff:de:2d:8d:e1:6c:06:b1:89:9f:5e:4d:09:21:4b:50:
b7:c8:76:54:f3:f4:46:d7:55:ce:15:5e:c9:3b:75:94:84:00:
5b:2d:05:d1:1c:01:f6:e5:8c:12:db:0c:a8:40:7e:9e:24:7f:
e6:4d:f9:36:a8:3d:0e:88:57:a5:a3:d2:f1:b4:5e:0c:fc:5d:
e1:0c:76:61:c7:71:86:5e:6d:e3:46:02:7d:02:2d:5e:c0:30:
08:a5:14:10:d7:ec:de:b7:7e:84:bc:a1:29:cd:d6:4c:51:7b:
78:85:82:55:cd:45:ef:e2:10:b2:ae:3a:d6:3b:05:f5:e6:ab:
97:48:17:6a:62:d8:b4:f6:11:3d:8d:8a:f4:fb:fa:be:e4:6e:
d7:be:e8:a9:c7:4b:45:44:94:ee:0b:24:7e:ac:6f:68:38:52:
20:7d:78:f3:52:50:1a:9d:7c:2b:6e:14:8e:16:1c:66:4d:59:
d6:23:d9:25:52:08:2c:ee:87:dd:54:10:2a:2a:6a:92:8e:7f:
cd:07:0b:9e:46:46:d0:08:32:33:a8:88:f6:bc:a5:c2:7c:d7:
cf:48:68:66:95:ba:b0:59:8b:6a:61:73:0e:c2:87:e8:93:45:
b0:ed:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:51:07 2025 by rpki-client