Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft
File: hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft (raw, json)
Hash identifier: LQUBl1mQ/5VOE87LyoOU8uJviV8TQbJ0GO05ZbsjIQs=
Subject key identifier: AC:03:2D:6F:B5:CA:43:54:D6:8E:C2:47:5E:A0:57:E1:6D:E9:36:35
Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74
Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274
Certificate serial: 0123
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft
Manifest number: 011F
Signing time: Fri 31 Jan 2025 16:08:30 +0000
Manifest this update: Fri 31 Jan 2025 16:08:30 +0000
Manifest next update: Sun 02 Feb 2025 16:08:30 +0000
Files and hashes: 1: 2BAvWAfM_fJPROac7AyCfIvm05M.roa (hash: KqJMPum9ofRwBAp835OICby9CVWAKGzeztZ5PweTC/U=)
2: NVgREjnb7ZU16u4QVRy2FcRORP8.roa (hash: 99Q2S0KEZjuO12RdfDdJmlgMqxQBmRbfCa48WUdXmU0=)
3: hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl (hash: yGLnMgVk4mMESO/CtygH6TMs1Fg5B820ysBcTm2xzWA=)
4: m6p6AeIWDut6dfuTkGG7IHumN7I.roa (hash: pUajqDkKIQIiGLsu05+zJdPVnFNk2jm7fWR2JzBC5fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274
Validity
Not Before: Jan 31 16:08:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AC032D6FB5CA4354D68EC2475EA057E16DE93635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:2a:97:b7:58:b9:3b:14:26:18:59:73:54:
b5:45:fb:f4:db:4c:50:63:8f:ce:c7:72:9e:32:c1:
a7:9b:db:15:73:a9:79:88:39:19:c6:8c:1f:90:b8:
61:88:d7:84:9f:e3:22:d7:31:47:7c:9f:db:15:1c:
9d:dc:73:bc:01:fb:9e:00:f0:9a:2b:80:cd:3d:2f:
65:d5:18:8a:59:82:90:c4:08:cb:0c:6c:11:f1:7d:
12:0e:25:3d:11:a4:87:44:20:18:b6:01:e2:3c:62:
31:0b:20:f0:38:a1:c2:8c:46:59:55:aa:60:d9:29:
aa:1f:14:87:a6:99:f3:d6:85:21:3b:51:91:b3:80:
ee:77:54:37:54:41:c3:81:ce:67:33:5c:83:95:82:
33:69:fb:df:6d:fb:f2:de:85:26:09:40:84:a1:3e:
11:99:30:05:f2:56:0a:5f:db:e7:69:2a:a1:51:f1:
0c:33:00:b6:0f:f4:8e:6d:f9:c4:6b:46:16:b6:8e:
b1:7d:ee:be:74:ee:25:9a:7a:f1:a5:59:d2:a4:59:
3e:86:3b:30:5f:95:22:e5:41:59:3a:86:92:9a:bd:
01:af:49:2e:a1:02:a8:47:9b:fd:a3:29:8b:06:88:
b4:b6:b1:50:22:b1:27:ec:50:27:fc:32:44:93:79:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:2D:6F:B5:CA:43:54:D6:8E:C2:47:5E:A0:57:E1:6D:E9:36:35
X509v3 Authority Key Identifier:
keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:25:12:ee:64:db:ad:85:f9:f6:9b:47:3b:d6:3d:2e:93:
66:98:cd:01:00:68:17:de:57:e3:e6:5e:99:cb:9f:88:ee:05:
e0:0a:0b:6d:57:73:db:ad:2c:36:ec:64:fd:29:cf:9d:1e:a0:
d0:28:a8:ac:f9:e0:d9:d9:0e:c7:58:a1:90:32:5f:fc:fb:c7:
18:24:fe:23:99:13:45:c6:03:47:55:bd:0c:9d:8b:f3:af:18:
64:68:53:23:3a:cd:e4:c4:c1:72:62:9c:b9:bf:07:69:2f:5f:
01:1b:72:b8:aa:c6:6d:09:9f:1c:df:1f:6e:c8:27:a0:12:f0:
a0:23:b2:f5:c0:4b:58:1f:1d:ce:49:27:70:51:18:f3:21:33:
13:67:a8:7a:53:f3:9e:08:d6:a3:e5:1e:a3:66:79:5f:a2:5f:
40:76:09:9e:d4:b3:2f:00:13:a3:5b:53:bc:ee:c0:66:40:25:
11:c8:16:3e:75:2b:f5:64:90:a8:6e:1d:88:14:64:1e:d8:23:
89:56:91:e4:44:d3:8e:96:b3:6a:08:9d:bf:8e:36:99:f4:ed:
57:7e:2a:71:78:d3:1c:e3:7e:cb:ec:51:28:c8:fd:2b:49:eb:
7e:74:2e:89:d8:5f:fe:2d:89:a0:4f:df:01:1d:a6:d7:79:45:
15:23:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:36:09 2025 by rpki-client