Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSIT/qhElCme7mCW26h-poSSh_slnAdo.mft
File: qhElCme7mCW26h-poSSh_slnAdo.mft (raw, json)
Hash identifier: ZGcRy4BtX4BcdviYjqcdeuXCNumwXgq8Q8cg4/CQzSk=
Subject key identifier: F6:B9:09:B7:FD:99:14:65:87:8D:D9:BD:99:74:62:8B:22:8F:51:CE
Authority key identifier: AA:11:25:0A:67:BB:98:25:B6:EA:1F:A9:A1:24:A1:FE:C9:67:01:DA
Certificate issuer: /CN=AA11250A67BB9825B6EA1FA9A124A1FEC96701DA
Certificate serial: 09E8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/qhElCme7mCW26h-poSSh_slnAdo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSIT/qhElCme7mCW26h-poSSh_slnAdo.mft
Manifest number: 09E2
Signing time: Thu 30 Jan 2025 19:39:10 +0000
Manifest this update: Thu 30 Jan 2025 19:39:10 +0000
Manifest next update: Sat 01 Feb 2025 19:39:10 +0000
Files and hashes: 1: _Xu8zJFF3IFFbz3b0Z1Bl14XiWM.roa (hash: CiKy19f+vBdClkZop0o7Srl8fNiTVhWfu+czGbn/V2o=)
2: qhElCme7mCW26h-poSSh_slnAdo.crl (hash: m2dQfVH+eh6tNMb7l0j42CdfjvrWE0y1HDrVvbJBpyk=)
3: sjCVidISOm3vR7K9VFcnArzplWM.roa (hash: hhMhsev+Zr3U8J6rQ5OBnnSCTIIRUo2qY6lxMJlVcRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA11250A67BB9825B6EA1FA9A124A1FEC96701DA
Validity
Not Before: Jan 30 19:39:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F6B909B7FD991465878DD9BD9974628B228F51CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:3b:b9:11:9a:cb:00:c8:c7:52:54:b2:63:
e2:a9:0c:a2:5c:fc:87:71:c9:d0:92:58:b6:9d:3d:
68:b7:b6:fc:02:af:a7:49:af:e4:47:ca:ef:ab:f7:
35:70:50:d3:02:71:46:cc:25:1f:a7:a7:d5:20:94:
b6:1a:02:7e:6a:2c:ab:c6:48:03:ce:0b:fe:e6:e6:
af:97:e6:e4:78:6e:6a:a4:7c:22:18:ae:ca:0f:05:
16:30:44:db:0e:7e:22:b6:05:30:f5:ba:c5:b2:b6:
bd:3d:eb:a3:29:2c:a5:44:04:12:af:58:2a:83:8f:
37:63:3f:c5:1f:d4:ee:a2:ba:3f:b9:f2:d3:0e:17:
4e:25:de:7e:4b:41:7e:57:13:57:b5:63:ad:12:aa:
2e:e7:2a:3e:22:32:aa:1f:8d:3a:b0:7f:ca:f1:42:
10:ba:3a:12:eb:d5:fa:ff:d8:50:e2:5d:80:da:f1:
b8:54:ce:2c:a6:aa:4d:c3:08:cf:39:d4:ec:b4:fc:
cd:7b:b7:ac:78:69:67:96:a4:2a:e4:ef:39:0b:47:
ff:cb:7b:d3:7b:b1:10:94:a6:6d:5f:97:e4:6a:c5:
00:86:41:18:87:94:1d:bd:f5:f1:1f:f6:27:9b:65:
f6:ae:5c:0e:68:b6:0a:a7:1b:e2:06:98:0a:b6:99:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:09:B7:FD:99:14:65:87:8D:D9:BD:99:74:62:8B:22:8F:51:CE
X509v3 Authority Key Identifier:
keyid:AA:11:25:0A:67:BB:98:25:B6:EA:1F:A9:A1:24:A1:FE:C9:67:01:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSIT/qhElCme7mCW26h-poSSh_slnAdo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/qhElCme7mCW26h-poSSh_slnAdo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSIT/qhElCme7mCW26h-poSSh_slnAdo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:83:c2:3c:db:0e:d8:68:d2:48:f2:d5:eb:94:bd:3c:6a:24:
27:08:d8:34:11:b8:af:96:80:ef:e0:ed:df:ff:b0:5e:10:b4:
ad:d9:90:6a:72:ad:e9:9c:16:9f:7e:2b:34:6f:e3:36:1a:2c:
51:d9:48:14:bc:b4:27:a8:e0:8b:76:28:db:64:c7:e7:b1:f8:
97:68:d8:9c:81:d8:2a:c9:bf:a6:73:92:dd:27:a2:86:60:e7:
78:6d:b5:28:d1:7f:4d:64:61:29:f3:d1:8b:85:6f:f4:68:0b:
c7:11:ce:3e:73:98:ab:cf:03:dc:17:2d:3c:71:f4:ca:19:d9:
1f:99:b9:4e:9c:9f:d7:54:b3:4e:3f:ce:e3:60:65:2a:ec:02:
1f:6a:ed:85:cf:5c:8d:d5:e3:a8:64:09:b4:15:cd:e9:59:59:
38:79:3c:2b:7e:a5:c2:e7:35:5c:79:9e:48:78:f8:c7:bd:8d:
91:46:52:83:43:5e:07:f6:0c:ba:a8:42:07:13:1c:d2:86:92:
cb:25:4c:fe:07:20:97:a3:97:16:8f:b3:48:1c:4f:c8:a0:b6:
2e:e2:ba:38:01:1d:fb:40:18:fc:93:05:5a:eb:d5:ff:8f:af:
ea:71:cd:77:9a:a2:fd:53:8c:c7:7c:0e:b4:20:2b:29:5b:52:
62:f3:21:b8
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEx
MTI1MEE2N0JCOTgyNUI2RUExRkE5QTEyNEExRkVDOTY3MDFEQTAeFw0yNTAxMzAx
OTM5MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY2QjkwOUI3RkQ5OTE0
NjU4NzhERDlCRDk5NzQ2MjhCMjI4RjUxQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv4ju5EZrLAMjHUlSyY+KpDKJc/IdxydCSWLadPWi3tvwCr6dJ
r+RHyu+r9zVwUNMCcUbMJR+np9UglLYaAn5qLKvGSAPOC/7m5q+X5uR4bmqkfCIY
rsoPBRYwRNsOfiK2BTD1usWytr0966MpLKVEBBKvWCqDjzdjP8Uf1O6iuj+58tMO
F04l3n5LQX5XE1e1Y60Sqi7nKj4iMqofjTqwf8rxQhC6OhLr1fr/2FDiXYDa8bhU
ziymqk3DCM851Oy0/M17t6x4aWeWpCrk7zkLR//Le9N7sRCUpm1fl+RqxQCGQRiH
lB299fEf9iebZfauXA5otgqnG+IGmAq2meT1AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU9rkJt/2ZFGWHjdm9mXRiiyKPUc4wHwYDVR0jBBgwFoAUqhElCme7mCW26h+p
oSSh/slnAdowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTSVQv
cWhFbENtZTdtQ1cyNmgtcG9TU2hfc2xuQWRvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9xaEVsQ21lN21DVzI2aC1wb1NTaF9zbG5BZG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OU1NJVC9xaEVsQ21lN21DVzI2aC1wb1NT
aF9zbG5BZG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4PC
PNsO2GjSSPLV65S9PGokJwjYNBG4r5aA7+Dt3/+wXhC0rdmQanKt6ZwWn34rNG/j
NhosUdlIFLy0J6jgi3Yo22TH57H4l2jYnIHYKsm/pnOS3SeihmDneG21KNF/TWRh
KfPRi4Vv9GgLxxHOPnOYq88D3BctPHH0yhnZH5m5Tpyf11SzTj/O42BlKuwCH2rt
hc9cjdXjqGQJtBXN6VlZOHk8K36lwuc1XHmeSHj4x72NkUZSg0NeB/YMuqhCBxMc
0oaSyyVM/gcgl6OXFo+zSBxPyKC2LuK6OAEd+0AY/JMFWuvV/4+v6nHNd5qi/VOM
x3wOtCArKVtSYvMhuA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:03:04 2025 by rpki-client