Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
File: g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft (raw, json)
Hash identifier: Y7By/2UQM1r7I18hzFssgLLlTGPqRH0lV5U4INMiRF0=
Subject key identifier: 99:49:C4:9D:C8:64:5C:E6:00:E8:EA:0C:24:48:76:20:0B:49:A9:EA
Authority key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
Certificate issuer: /CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Certificate serial: 0175
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
Manifest number: 016D
Signing time: Fri 31 Jan 2025 07:08:35 +0000
Manifest this update: Fri 31 Jan 2025 07:08:35 +0000
Manifest next update: Sun 02 Feb 2025 07:08:35 +0000
Files and hashes: 1: NSamg7l37QpmC2oZR7SzGfxaf90.roa (hash: dHy8vmR3/FEabzby0yE/QGvjaCrOB4kaXmhMqlrV1c0=)
2: g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl (hash: 7Wd4xcYwefG6dT6Slcfh5w4NSvVCaKpgxjeVIlMHcao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Validity
Not Before: Jan 31 07:08:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9949C49DC8645CE600E8EA0C244876200B49A9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ee:2c:7a:82:9e:91:78:70:e1:03:aa:dd:65:
79:37:3d:ca:eb:0d:6d:44:73:0b:2e:d6:d9:94:d6:
4a:2c:b9:2b:af:3c:c5:bc:3c:f5:0e:4f:74:a8:18:
06:2c:cb:4e:9c:85:f5:ae:22:b6:69:93:be:92:03:
6a:9c:b0:d4:ff:0a:47:2c:32:d2:81:b5:24:ee:b1:
49:88:5c:65:30:1f:37:b5:1f:c7:39:2f:d8:f5:75:
93:c6:33:af:54:d6:24:e3:79:79:9c:5d:5d:1d:65:
66:4d:6c:ff:d9:d0:56:ee:45:4c:3a:80:c4:06:2c:
b3:0e:a0:fe:69:29:db:46:f1:d1:1d:4f:e7:20:84:
0a:6c:a3:55:11:64:f3:8b:e8:1d:cd:26:bb:0f:d9:
9d:7c:78:30:55:fb:e1:05:f4:a3:36:c7:e7:62:1f:
d6:4d:47:b6:99:7c:7c:8d:e4:1d:31:99:76:94:c5:
3f:57:0f:d3:1c:02:c9:31:53:6e:0b:81:e5:38:23:
f1:54:cf:d3:3c:75:b1:36:07:28:96:63:57:fa:21:
ba:1b:08:0e:4c:92:ba:c9:d1:2d:75:6a:95:8f:24:
aa:b5:00:a7:85:07:22:0d:b6:ea:58:bb:80:fc:ce:
1e:97:8b:a8:72:1a:ea:a2:8c:b5:cb:4b:88:c0:4b:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:C4:9D:C8:64:5C:E6:00:E8:EA:0C:24:48:76:20:0B:49:A9:EA
X509v3 Authority Key Identifier:
keyid:83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cf:d5:bd:61:68:f2:07:89:d6:0d:1c:29:30:62:ef:2b:0e:
66:d8:70:dd:2a:db:7b:2a:7f:65:c3:e9:ea:aa:15:61:b9:ed:
7a:0e:5c:c3:a7:1f:43:6b:23:75:4b:43:95:8c:91:9e:e6:25:
c9:6e:d5:e9:83:9e:ad:95:c3:45:96:1f:e5:e0:b9:6d:e9:9f:
94:04:7c:20:77:9f:2a:98:13:8a:6a:fe:ac:3f:99:ba:b3:b3:
6a:13:d7:a4:0b:01:7c:dc:92:fd:91:bf:62:ef:72:e8:60:2d:
bd:55:fa:9d:7b:07:c2:d8:51:5d:8a:cb:bf:bb:1d:bb:3e:65:
53:50:85:1f:f5:11:56:bc:c4:9b:26:1f:59:53:18:84:9d:82:
b6:1a:ae:95:a5:f1:e0:71:ff:bd:e1:14:f4:95:97:e0:d6:e0:
2d:c6:c3:55:0b:07:de:c1:1e:93:88:54:d4:04:ca:70:63:79:
1f:83:5d:01:19:44:e6:f2:11:72:4e:5c:8a:0a:a0:ec:8b:b5:
59:e4:ef:62:41:69:f8:6b:2c:3f:1e:ba:81:b0:cf:33:7b:3c:
09:8a:c4:b1:d2:f8:e8:5f:da:13:b4:3b:47:12:84:1d:f1:f3:
d8:bf:27:df:57:ae:b0:e9:29:5d:1b:55:b3:ac:84:ff:4f:47:
29:09:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:00 2025 by rpki-client