Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
File: gFHy7O_CQumvnx5FSk-3llkbjas.mft (raw, json)
Hash identifier: AjNIxfuXfBIjEgHPblGB4EfbnoEwq/JWpkCOBoaiOyE=
Subject key identifier: B3:F4:1E:4B:D4:12:F0:37:18:44:B2:30:AC:07:B4:A4:B3:4E:4E:0F
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 1365
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
Manifest number: 1343
Signing time: Thu 30 Jan 2025 19:37:31 +0000
Manifest this update: Thu 30 Jan 2025 19:37:31 +0000
Manifest next update: Sat 01 Feb 2025 19:37:31 +0000
Files and hashes: 1: -8oNsnl0ou9P4132nVLoyujfFJk.roa (hash: sDNeISvSTXyoUYlLSlbmz5X5QoKJSsquh2izLB6oMjc=)
2: gFHy7O_CQumvnx5FSk-3llkbjas.crl (hash: 0WAxww/c96lzZ9xD3I58/K6uWECvFZukIyFjQNiFiMo=)
3: qJSVNDMVIBKEhAmnmum8Mxf5Ie0.roa (hash: ZiN23hU1Q77ZVRrZI4J5S9z4U/f/yCqcKlD0Bxenaag=)
4: sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa (hash: mm1H1t+bgtqAtSukSKbWzeIs5R0FrD0rZH27ftDyp6s=)
5: tCn5GVdb8smMgK6t_m9afMsuO3U.roa (hash: 1MeUY4RbmfLyZPsM4JhV3oWbnXgxfkAWPXGI/vamNmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4965 (0x1365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Jan 30 19:37:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B3F41E4BD412F0371844B230AC07B4A4B34E4E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:c8:a4:92:b6:18:8b:21:23:0d:eb:65:b6:
c0:c0:b2:90:1b:32:af:50:df:84:ca:45:a1:f7:48:
3d:96:c1:e1:de:d5:74:1b:67:9b:23:75:d1:bc:f0:
e2:bb:aa:14:7e:15:63:3c:af:29:d2:2b:76:82:cf:
8c:a5:56:b6:29:d1:b9:68:30:68:90:d6:d3:70:f1:
c7:9c:48:b5:37:e0:e4:2a:97:63:be:22:97:d7:47:
19:69:af:ee:c0:8b:75:ad:c6:db:68:7d:5f:e2:7e:
25:c6:bc:81:a5:29:9b:09:f0:94:d5:64:a8:9d:a9:
82:68:20:84:69:5b:56:c2:9b:dc:92:4e:b6:6e:50:
06:be:7c:10:4b:a1:05:9e:34:f7:40:86:e6:5c:d9:
49:a8:df:d8:39:3d:92:2b:0b:75:3f:b6:9c:1e:8a:
96:79:24:3c:d5:3c:2f:1c:0c:2d:c3:9e:dd:fe:c6:
79:27:f0:5f:7d:19:39:26:90:63:67:6b:92:c7:a7:
2c:dd:0a:c6:8c:f4:4b:11:0c:43:28:f3:91:b7:e2:
f5:7e:f6:35:20:01:8c:78:67:a5:f5:ee:56:af:63:
0c:9b:69:c1:b5:a9:a1:f3:10:5d:e1:ab:58:33:31:
e4:55:38:bb:d5:cc:95:6f:ec:62:e2:ef:d5:15:07:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:1E:4B:D4:12:F0:37:18:44:B2:30:AC:07:B4:A4:B3:4E:4E:0F
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:80:4c:ea:11:01:49:4d:1c:d4:c6:08:d3:b7:f5:67:a6:57:
76:4f:18:b4:72:22:93:c2:56:5f:8e:7d:b3:8e:75:07:d7:84:
67:ab:80:5e:8e:53:88:b5:e2:b8:a3:44:d3:42:e5:d0:ad:e2:
5d:fe:d2:34:11:f2:96:20:58:c3:93:c9:9c:85:21:81:7f:73:
39:88:66:2d:b1:74:e2:96:fc:3e:22:bf:c2:7b:0c:a3:9b:a8:
7c:f8:f2:c6:99:17:bf:4a:fe:26:ab:3b:e7:8b:dd:7f:70:e3:
ee:95:49:8a:b9:99:22:2a:9d:05:cc:03:7e:b5:0b:83:9e:71:
d5:17:a3:ce:ab:c6:31:63:87:f2:bd:09:6a:59:fe:ed:43:5f:
7b:4a:0d:c6:1f:4a:e5:b4:17:23:fb:f8:de:95:d2:87:f2:83:
73:5a:ca:c0:ea:b2:67:72:c2:7e:43:ee:b8:e3:43:f4:24:22:
d8:d1:6f:2a:aa:d9:e2:8d:c9:d3:1b:4c:a4:f1:e7:68:71:4e:
f8:5f:9c:2a:60:fb:7d:79:f2:bb:12:51:42:38:c4:64:95:af:
20:40:14:fa:76:65:7b:e3:84:ae:ff:74:6b:53:7f:9e:d3:f6:
87:2d:16:42:ab:a2:fb:c2:ba:be:c7:b6:3f:ca:95:32:d2:89:
1f:d0:20:a6
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICE2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1
MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yNTAxMzAx
OTM3MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzRjQxRTRCRDQxMkYw
MzcxODQ0QjIzMEFDMDdCNEE0QjM0RTRFMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVu8ikkrYYiyEjDetltsDAspAbMq9Q34TKRaH3SD2WweHe1XQb
Z5sjddG88OK7qhR+FWM8rynSK3aCz4ylVrYp0bloMGiQ1tNw8cecSLU34OQql2O+
IpfXRxlpr+7Ai3WtxttofV/ifiXGvIGlKZsJ8JTVZKidqYJoIIRpW1bCm9ySTrZu
UAa+fBBLoQWeNPdAhuZc2Umo39g5PZIrC3U/tpweipZ5JDzVPC8cDC3Dnt3+xnkn
8F99GTkmkGNna5LHpyzdCsaM9EsRDEMo85G34vV+9jUgAYx4Z6X17lavYwybacG1
qaHzEF3hq1gzMeRVOLvVzJVv7GLi79UVB4k9AgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUs/QeS9QS8DcYRLIwrAe0pLNOTg8wHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F
Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU
L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL2dGSHk3T19DUXVtdm54NUZT
ay0zbGxrYmphcy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo
gEzqEQFJTRzUxgjTt/Vnpld2Txi0ciKTwlZfjn2zjnUH14Rnq4BejlOIteK4o0TT
QuXQreJd/tI0EfKWIFjDk8mchSGBf3M5iGYtsXTilvw+Ir/Cewyjm6h8+PLGmRe/
Sv4mqzvni91/cOPulUmKuZkiKp0FzAN+tQuDnnHVF6POq8YxY4fyvQlqWf7tQ197
Sg3GH0rltBcj+/jeldKH8oNzWsrA6rJncsJ+Q+6440P0JCLY0W8qqtnijcnTG0yk
8edocU74X5wqYPt9efK7ElFCOMRkla8gQBT6dmV744Su/3RrU3+e0/aHLRZCq6L7
wrq+x7Y/ypUy0okf0CCm
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:26:05 2025 by rpki-client