Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft
File: gwvEQQFipY0NsX4KNRVR-7PXUaE.mft (raw, json)
Hash identifier: W0YrXdh8889A0mk6u6CDS1hDLX9XJQtjjp02vj75wkM=
Subject key identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0CAF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft
Manifest number: 0C86
Signing time: Thu 30 Jan 2025 20:37:22 +0000
Manifest this update: Thu 30 Jan 2025 20:37:22 +0000
Manifest next update: Sat 01 Feb 2025 20:37:22 +0000
Files and hashes: 1: OXdepfqZtgrqWGsPoR3DP4M3l08.roa (hash: tAIiNtNAzyWzUckVn5drWt0ahVWLWaqMn6PMK/utbwk=)
2: gwvEQQFipY0NsX4KNRVR-7PXUaE.crl (hash: JgQv+HjUVfP+YO2CHt88N2NvKLdOpQD193yZdOevQX0=)
3: q-a1_3Y9gkX5x2g6IdsFRP77IXU.roa (hash: 8AfDeKcVLOER5uXNQ7BZPxYub7rr+BCnrW/bBLs/kyM=)
4: xZq8xx0jAuUR8w8deeFZ-x8x9_A.roa (hash: DBSVN/mjxpxQpTEdwD+Vddc1edb62PPF7S08CpzkqE4=)
5: zaDSf5RQaqs0JPpv69vcmU4cpgA.roa (hash: BPIGyyt53u3DQMfzI21srqXApnrhD8PEc1V08TTp4FI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Jan 30 20:37:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01CF58E390EF3AF26464E9734E6C92234FDAA683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:ca:58:28:32:52:b4:ca:c3:69:88:0a:6f:
1e:ba:61:57:db:f6:9a:2c:5c:e0:8e:a8:7f:29:98:
8d:f3:a3:e3:80:8b:fa:31:7a:f0:89:28:84:2a:80:
52:1a:87:ad:db:b9:9e:61:9b:2b:60:ca:1b:a7:80:
c9:5e:d9:8c:73:58:37:be:51:ff:f1:ed:fd:11:ef:
d1:7d:f5:2a:87:fe:e4:42:e4:db:e2:8c:fd:7e:61:
ed:f0:83:c9:d6:a7:bb:2c:8e:e7:8d:11:74:ba:ad:
ea:8f:15:43:91:e5:8f:d3:f3:7b:5e:4f:64:dc:38:
04:1b:28:c5:9f:e2:cf:f2:2d:ef:9d:e4:3f:76:13:
b2:52:21:c4:11:af:7c:b6:43:96:16:15:f8:fe:4f:
70:44:02:03:f6:dc:4f:c7:7c:91:b7:44:63:73:a9:
d6:08:18:ff:64:65:db:3c:be:32:8c:5a:91:1a:d3:
f6:88:45:55:17:e1:e8:ac:7d:e8:4c:e8:f1:4e:ef:
84:38:f2:cf:e0:ed:81:60:ec:77:17:3c:62:b9:e7:
8a:e6:38:ea:f6:40:45:86:8a:50:0e:a3:84:cf:cb:
26:da:c5:34:b9:4d:0d:28:c4:2c:11:c8:76:ae:bd:
15:52:b3:8d:35:45:ca:26:87:73:41:cf:17:2f:7d:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:e3:4a:9d:23:14:44:f6:41:f7:3b:46:58:2a:45:55:de:
e8:a1:d4:53:f0:dd:71:c5:4c:2a:5c:65:b7:72:76:02:aa:84:
8a:8b:22:9b:23:44:32:e6:e4:f2:ec:91:4a:be:52:d8:15:73:
62:69:cf:7f:90:23:30:6d:d4:26:7f:21:2b:0e:7a:0e:87:69:
80:f5:8d:f2:8d:9c:19:77:7d:d4:be:ba:05:fb:be:29:f9:48:
d7:16:c4:ac:9f:af:cd:79:a2:60:62:e2:ce:86:9d:47:11:a5:
27:86:1c:24:2c:ed:18:38:0c:5e:1f:ea:fc:47:42:7e:f0:5e:
b3:5b:16:15:45:77:5b:77:f3:8d:fe:1a:ca:a8:13:2c:76:4e:
48:62:3c:f1:00:2c:41:97:9f:e0:8e:30:5c:0c:6c:45:ce:91:
99:72:5c:fe:ac:41:ed:ce:b2:13:b3:66:f5:4b:77:30:6a:58:
95:a9:d3:1a:78:1f:9a:1e:0c:ea:15:f3:57:e0:5c:d2:85:7c:
1d:6f:aa:1e:71:2d:45:62:19:b6:63:eb:ae:b7:15:4e:25:0b:
6a:1a:79:9e:9b:99:18:0b:17:14:7c:eb:fd:06:f1:4e:9b:b1:
7a:d7:c0:5f:31:fc:78:74:14:be:6e:4a:c9:bf:ed:65:ec:d9:
85:8d:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:45:12 2025 by rpki-client