Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
File: NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft (raw, json)
Hash identifier: 6ZzbyT3I4okRW578lGqT8DyUP7h9z4gNi/h63A8Zku4=
Subject key identifier: 45:86:DF:10:0F:31:5E:43:98:B7:E4:CA:F7:57:ED:17:11:00:06:C9
Authority key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
Certificate issuer: /CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
Certificate serial: 0124
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
Manifest number: 011D
Signing time: Thu 30 Jan 2025 18:37:35 +0000
Manifest this update: Thu 30 Jan 2025 18:37:35 +0000
Manifest next update: Sat 01 Feb 2025 18:37:35 +0000
Files and hashes: 1: AHJbG7tGQZaDkCbNruVE2brYPgg.roa (hash: yk3ArMnUsyJ8QnIGmSwBipZF8cyVFlRhuOCJ7TgduYU=)
2: NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl (hash: BLvQFOy+fbR1NYfhJrqIsymfzhcGU7ZuiUsNY1wMXLI=)
3: QUaAwZl1bnjKDSjbQ59POZzwzXk.roa (hash: XvTsamoEbLso/O5kfgym+HmW90pXGPfqpk5pTiJ1Dm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
Validity
Not Before: Jan 30 18:37:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4586DF100F315E4398B7E4CAF757ED17110006C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:4e:ee:c4:93:3f:d5:58:94:41:5b:f1:c0:
46:81:42:12:ea:48:a5:92:92:72:9a:b0:cf:67:c5:
7d:24:7d:d8:32:9a:33:38:18:a3:ee:04:26:ab:59:
7c:18:65:2f:89:a1:41:77:ac:7d:24:73:e4:11:09:
99:c9:25:41:c8:5a:c6:29:b9:64:03:8c:a8:a1:49:
4b:05:7f:a0:03:07:b5:d0:e6:87:6d:ea:49:75:32:
19:73:a7:26:b9:8c:98:8d:bc:34:43:bf:34:19:88:
19:4c:10:53:1c:e6:9a:09:16:4c:69:e2:22:19:81:
8a:12:ee:26:c9:5c:2b:cc:2e:c0:f4:c4:bc:df:26:
8a:4c:f2:7c:33:73:38:b0:06:37:31:79:0e:81:f6:
4a:59:2a:58:48:57:5b:5e:f5:b4:22:9e:db:cb:0a:
c0:87:fa:d8:13:a6:b5:05:31:02:27:20:d0:04:6e:
bf:ad:3e:55:fa:ca:c2:58:2b:80:eb:9b:26:f8:15:
e4:79:ed:54:bd:ac:45:3c:df:d5:54:09:30:ac:24:
a6:d6:bd:f0:ed:df:a7:ed:fd:94:70:97:b3:83:05:
d0:8f:7f:1d:3a:94:2c:3d:6c:00:2c:75:9e:fe:51:
f1:3d:93:06:25:14:6e:73:37:11:c5:48:f1:98:b4:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:DF:10:0F:31:5E:43:98:B7:E4:CA:F7:57:ED:17:11:00:06:C9
X509v3 Authority Key Identifier:
keyid:37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:05:f2:09:40:7a:45:22:45:7c:30:f2:8d:54:28:bc:33:
3d:e6:96:36:c1:29:ea:7e:5e:7f:72:ba:5e:2c:3d:c9:56:7f:
50:b8:f2:0c:7e:ba:4e:88:d6:17:6f:08:b7:ce:0d:57:b2:18:
d3:71:79:9d:2a:90:bf:27:72:27:39:89:79:3c:78:7d:d0:27:
d7:c8:e9:b4:b3:fe:b2:51:ec:02:85:89:67:78:87:91:c1:4a:
0c:c1:86:31:e4:be:b3:17:87:40:d4:e1:b4:35:fe:22:99:4b:
32:6c:aa:94:0d:7a:51:c0:42:1b:47:b6:9a:81:a6:52:83:a6:
f0:a9:4b:e9:28:c3:1b:6b:2d:6d:84:4a:7c:90:04:4e:1b:b5:
23:cb:fa:b1:25:87:a1:bb:5d:e1:81:eb:6e:10:44:37:f8:b0:
ed:2a:8a:a9:ff:41:48:6b:26:b3:e7:c8:10:3f:ab:51:79:46:
52:b6:5c:b1:03:3d:f8:a7:e8:6f:c5:87:aa:32:56:9d:db:16:
cf:0b:f3:90:d9:f3:50:12:6a:9e:ea:70:7a:5f:5e:44:31:7d:
f8:fc:60:ce:c7:16:6b:fa:06:e1:e6:29:01:c8:a7:58:1a:61:
9e:e2:91:9b:9b:43:23:2a:1b:f4:cb:0f:58:5d:4f:b6:a1:b8:
01:93:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:34:28 2025 by rpki-client