Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft
File: Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft (raw, json)
Hash identifier: Ezry+XTINLjpNCGLz2IJ7+QTe0OwZwOjnhipMAWfTwo=
Subject key identifier: A9:CF:5B:E5:FF:76:29:36:1F:EB:79:CE:E2:B1:BF:DF:FE:BF:F8:69
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0D21
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft
Manifest number: 0CA4
Signing time: Thu 30 Jan 2025 19:38:49 +0000
Manifest this update: Thu 30 Jan 2025 19:38:49 +0000
Manifest next update: Sat 01 Feb 2025 19:38:49 +0000
Files and hashes: 1: 8KKweT6B90sKjMQRqYBwlv-pc00.roa (hash: 7xAbw6QEivtqTlN14DNn6PShdNmPnAjZ3FphAlQwtH4=)
2: AdUH6pxwUBbqZmst_PDbGhUURbg.roa (hash: tyX4nOFP3RgdSEQ/rUhvBaMYGrdRMv60oy5yUOABW04=)
3: CLhNad3jpM7MoqRd4mevAOVMI7c.roa (hash: NhiCV9YaK6sVHyKyjpT7I3v2etxm38deaVqGqbjonyI=)
4: Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl (hash: AUmXTx1opt583scACTM2XTPXOxmMSdX7pIpmVMe7mzA=)
5: OZBIkuLTd3yDGoPFjDAa2t_kErs.roa (hash: cKnzsxDfMrGpoZUXA9z0sQYgIgBeqc7MTLC/72M6+QA=)
6: QyZrQ9nl8OA38fMWJr07mHQLm0g.roa (hash: /w/MbzfdITam09rPy5mYAcB5Q8o0gptYLrqwlP17CO0=)
7: SAn8OQwJO8XK6FGkBuETtDX3G_o.roa (hash: ycZugRhBbk8Jtwu16NKEuZ+3B4AS20kxbvkjnyHRwew=)
8: VyrkB2axolDdHETayiZ69Iqxkj4.roa (hash: sVDRlw0NhjqJjaHM2TDxUMjxvhy4mwEBVh9HoqbuJeI=)
9: XOx4OQskAXefIDT1vfOMFYAv7OU.roa (hash: vixFihRojDs2aEwI9JskcuM+4XRzL5fERGScHf+l0Ng=)
10: XkZyISNyRd-aY_KnxzMmVUi1uoE.roa (hash: S9ag7VflzI7n2hWZVoUbF8JUog+jV4By2eLAbkhBVbw=)
11: ZYJKDcP3qx7eSDIGlSd5PRbHlRE.roa (hash: TJwNbDD21a7HmWKW7YV2IYPEga3WqYfkPrVTugO1YB8=)
12: eAImAq2b649cm8OPZOnSEvg3nNw.roa (hash: WdUwohu2fgyY4BuahewlS4ElH2yfeDuN+4IJuNi7Ygo=)
13: gnv9_3CPdojMAaJgOFZ607gX7jU.roa (hash: /HuErrgBNMdUkg071YszQhf32IgRYORAGdZNXlg/SqY=)
14: j_ns-L0zHaiOQXB6GBfT15-WhUA.roa (hash: ofj/aTCAa5UDhZ8dEbl76P9WmwVEEtffMzpR1HbPbY8=)
15: yTsvEEawjeCJLH69A_i0rZzihuU.roa (hash: E/oWHLvM0wJgENNSP6pyEj+BLQaUyhNGjFKej5lcjjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Jan 30 19:38:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A9CF5BE5FF7629361FEB79CEE2B1BFDFFEBFF869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:7e:cf:37:b0:87:4c:c6:f3:f6:82:a4:42:
e1:96:db:77:ec:3c:f2:0e:b7:4d:e3:e0:a4:04:ee:
a8:97:8f:75:d4:a8:66:74:11:0e:70:a2:32:76:58:
d7:d5:79:6a:29:83:30:e6:83:af:13:bb:e3:9d:90:
0a:ef:1f:67:52:1b:38:c3:5f:ad:04:f8:09:5c:10:
cb:79:e9:5a:db:32:a7:c3:be:b9:c1:bc:ba:bc:75:
d0:3b:70:7e:ce:5a:45:50:8c:9f:13:37:15:e8:52:
76:c2:70:1c:58:39:0a:f7:bc:34:21:8c:bb:db:13:
f4:e3:00:dd:48:63:8b:bf:d9:82:18:27:9e:41:64:
3f:01:d8:b1:5e:6a:76:24:9b:93:a9:9a:62:68:33:
7d:9d:cd:cc:f2:a7:52:08:79:f6:4a:1e:b9:f5:6e:
6b:6f:7d:16:6c:19:97:d6:d3:d4:7c:eb:52:93:c4:
33:e4:4b:cd:3e:f8:9d:3c:7c:95:b9:dc:73:90:51:
2f:ea:dd:5f:5b:4c:18:44:a3:c5:92:a3:bd:ad:ff:
6c:e0:d3:c5:a4:31:a6:d7:aa:6a:0c:f8:d0:35:87:
3f:e4:1c:13:8c:ed:86:e0:2e:d3:52:24:73:3c:de:
3c:03:9a:cf:d3:66:65:73:ec:5f:8b:67:ac:8a:0e:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:5B:E5:FF:76:29:36:1F:EB:79:CE:E2:B1:BF:DF:FE:BF:F8:69
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:a7:f9:e6:bd:54:61:40:80:2b:82:2d:15:c5:60:f2:aa:25:
c2:e4:79:ca:3c:ca:b7:f2:ce:f4:17:61:f7:c3:42:cb:be:64:
0a:8a:ba:df:24:30:f9:6c:b4:31:8d:85:54:8b:28:d9:a5:dc:
53:5c:34:02:dc:4c:04:38:73:f5:ac:a1:ea:e5:85:d1:14:c7:
b1:b9:ec:95:1f:2a:63:99:67:c6:d9:e1:62:bb:bb:65:57:50:
e2:4d:3f:7e:31:16:71:e3:1d:36:1d:7f:83:32:2f:37:71:41:
25:e7:89:76:a9:8a:84:ff:ea:ac:a1:1f:96:cf:b5:f7:c5:d7:
84:89:7a:78:08:ce:79:5e:79:5c:dd:02:b9:34:48:b1:02:3d:
9b:f3:26:58:31:d5:b0:dd:f9:22:2d:ce:84:0c:2c:7e:78:00:
33:64:5b:7e:36:67:22:65:f7:e3:d3:f1:40:7e:ee:f4:72:b9:
31:b6:3a:c4:e5:68:25:2d:fe:d0:63:5e:f5:d1:17:6f:9c:0f:
e8:01:0c:0e:ef:37:b7:06:0f:27:d7:db:6f:a6:9d:a0:2d:1e:
55:42:23:1c:ab:6c:8e:4a:57:1a:aa:2d:28:ab:21:a1:8a:c6:
6f:3c:83:10:c3:6d:80:14:2e:25:cc:4b:bd:8f:85:38:2b:a0:
0c:c2:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:50:56 2025 by rpki-client