Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.mft
File: B-NqPSGaivyE-IswVT5jjObCzs4.mft (raw, json)
Hash identifier: yZyYlW7M6NKEcNPnejy+v4qygulfPOwWLU6WxDppI5M=
Subject key identifier: D6:69:AB:73:4A:EC:21:5E:7C:5D:DD:53:1F:9F:BF:2E:B3:35:99:6B
Authority key identifier: 07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE
Certificate issuer: /CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE
Certificate serial: E9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.mft
Manifest number: E2
Signing time: Fri 31 Jan 2025 00:38:26 +0000
Manifest this update: Fri 31 Jan 2025 00:38:26 +0000
Manifest next update: Sun 02 Feb 2025 00:38:26 +0000
Files and hashes: 1: 2gUnCbXgVlSLSvxP1aHuIjCmuNs.roa (hash: X073YL1wdmnfyT9qjdjNpFjRDAfJEsPtPq6CK5w3/Mk=)
2: 41x7IhEG1FrnuX9cR2zWYCoDdBg.roa (hash: JFUR1qKu+B+WO9hWzyO1sP9uV7Ftk/Hq94BZeRD6Dd8=)
3: B-NqPSGaivyE-IswVT5jjObCzs4.crl (hash: xhUnMijucGnI/fc0cIPCYQv/wmoRKGT554kXr/a9fQo=)
4: DCUtlDl16OJHJDawdX6ljM7G-N4.roa (hash: S2y7mUIbNn67sAZ4U+pZBVoTSujoVwUJqqcERX2+tIk=)
5: _8FWplsh9X_asp25E94ZQL8gJt8.roa (hash: EvXbv3aFeVHLkHGBAyqScz5rhMrdDotHlsFiCC1+pK8=)
6: rMt0kiU_t8SHHB1Ae_X-p7XypFw.roa (hash: YHi42I8oSSXOuyxTl0OEsalNCeYMxCKyKl1d0eLeJsk=)
7: un6Pus065CeqU9TZrHdFhzxImx8.roa (hash: P3zw/89rKqPSjmuK98nJ64se4K5SFdckqE8h+9u1Qzs=)
8: zqsiuqeq9TA1lZKcfQ-puRT8Tfg.roa (hash: InLCkeSetyD9ZDWEMLbN9dNxQ3dDeHWIimoSVhIL+0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE
Validity
Not Before: Jan 31 00:38:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D669AB734AEC215E7C5DDD531F9FBF2EB335996B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:61:21:8f:d1:38:bd:90:52:28:69:fb:cb:
49:b7:8c:96:e6:a9:59:a3:27:1c:93:c9:1e:d7:c9:
27:de:14:5c:ae:36:41:b4:e5:96:35:5b:a3:b1:91:
e4:43:08:2c:21:58:84:3b:38:1b:1a:e9:91:dd:9a:
bf:23:61:b6:74:25:bc:1f:0e:7a:56:f7:d2:49:f8:
3a:3e:1b:59:28:d0:3e:25:14:23:b0:bd:5a:9b:26:
65:4b:41:51:a8:d4:f9:e8:17:3c:01:2c:bf:08:e7:
56:2d:2f:79:25:d5:de:7a:ed:4e:0b:52:03:c5:94:
88:99:86:f3:bd:06:5a:46:99:e8:a9:df:6f:bf:b3:
48:0f:32:47:c3:17:dc:58:f5:40:5a:91:71:ef:a8:
18:17:74:7e:01:6d:f2:51:7d:d8:d2:b8:fe:0a:d6:
b1:03:c0:ec:90:a3:73:e9:d8:b9:61:6f:cb:02:89:
42:96:9d:38:1a:88:e3:ad:7e:fe:c3:d7:6d:6f:91:
2f:55:97:5f:48:23:f6:a8:c8:9a:42:06:ae:a3:5b:
d0:77:d4:d2:0d:ee:ec:8d:92:1f:bf:de:e8:83:c7:
1a:24:9c:cf:e1:81:cc:34:10:4e:ed:7e:53:76:7a:
92:b6:33:20:7d:b1:60:c8:59:90:46:12:2d:df:c1:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:AB:73:4A:EC:21:5E:7C:5D:DD:53:1F:9F:BF:2E:B3:35:99:6B
X509v3 Authority Key Identifier:
keyid:07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1b:0a:df:01:3c:b3:d7:f8:a0:fa:0c:82:30:44:bc:30:67:
0d:87:4f:1a:cb:30:6d:a8:1d:bc:a9:80:71:2f:a0:f8:09:f5:
43:bf:b4:e7:e2:62:19:15:75:95:ca:95:d7:58:d8:77:06:04:
9a:ac:60:92:a5:6c:32:5d:e5:6a:55:c1:e6:1d:32:ca:07:c2:
97:c4:fe:98:72:26:36:cc:f0:09:cc:ed:fe:85:83:6e:95:9c:
1e:ee:3f:ba:35:bb:b6:33:3f:46:83:60:2a:70:05:fa:16:a7:
3c:24:16:b2:be:78:29:02:5c:c6:30:0f:70:cc:b7:a0:9e:1d:
3e:f3:76:4d:70:ce:37:37:92:ed:be:93:0a:2d:10:54:80:a8:
33:15:d4:f0:8d:59:4c:35:c3:10:9b:cd:b3:88:e8:a0:9f:e1:
14:2d:46:45:da:0e:c7:1f:11:10:f8:de:b9:ed:12:b7:1a:fa:
99:5b:52:b5:68:d0:2d:de:b0:d1:3f:e3:92:91:2c:72:27:e2:
9a:18:d6:8c:5e:8f:88:d9:38:5e:dc:30:e3:22:06:eb:e7:1c:
cc:1d:48:e7:52:7a:0b:a2:ac:32:e8:5b:2f:86:b2:a2:67:60:
d5:34:0a:76:c1:fd:10:16:f1:37:d6:03:8b:22:8f:9f:03:8f:
59:3f:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:44:13 2025 by rpki-client