Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
File: tDIP1437ak0ckjIveUlmuFJd_dI.mft (raw, json)
Hash identifier: A0B0Nr2FnDmBPa9TeWdslqGiLFiOnfSSgOuVVvWH2aY=
Subject key identifier: 1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 597C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
Manifest number: 5949
Signing time: Thu 30 Jan 2025 19:37:50 +0000
Manifest this update: Thu 30 Jan 2025 19:37:50 +0000
Manifest next update: Sat 01 Feb 2025 19:37:50 +0000
Files and hashes: 1: -tjLOJ_JzcudCYm4i6iBdrTi-aM.roa (hash: yK4BALN1VcTXwNYPVOeJvFc21jtzEFL7W4MU1J1kPBU=)
2: 0GJxPfA2IBZRKJdwOGeqFenXPE0.roa (hash: QIwkgY7mxHbKcGT5hk7KRlqVhCDyGDAGaxtOcq1lfdo=)
3: ER6ZbzB7wKI2Lu1wVWQcSoDz--0.roa (hash: xMLmxtzS7co9nimpsVCi78bZrikjnjuO3QOnmcDndrs=)
4: X96xYudbxNaWInHH7GUruV1fYS4.roa (hash: ZLW2ZwwJVf4/av1jq0a7aWttWEHm6xrFeF9evcZ2Xq8=)
5: hopZdJlQK32rqHUT6gKYea9M_SA.roa (hash: 3Spx2pA28SI3qZe6n94POhvrzrhQxwUhoiHkhqgfsuA=)
6: nbzkfdtg-rL288Zw9i-Q0HAFWsY.roa (hash: BwKF14tYfWY1BuDdBe7fGaA1HZwknuJ6D9GgSmqEC/8=)
7: oUiq5jZ9lBpCKFRweO45CxVH9q0.roa (hash: bqda3OHncwGr1KSXnU6aifHgDZfleKCBaTCOPLnSmB0=)
8: tDIP1437ak0ckjIveUlmuFJd_dI.crl (hash: rZX7HqtIxKHWeKFkluVjIh7XY9lurxWd8GX3zJVykC4=)
9: wqb4MbKOtH_lR__mdhFY8GNwwOA.roa (hash: rbxq5EVv2sNhtV+jTscQX6jMLJVICxDhvZhgPC+z2MU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22908 (0x597c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Jan 30 19:37:50 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1FA6ECAF83C39B5FFDE3AC1DAFFCA2780F9A71E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:13:73:54:80:9b:39:15:8d:ff:0d:64:6a:
90:d9:41:d9:ad:16:31:95:96:25:c1:98:68:d7:a8:
b5:50:a9:f6:8a:81:4f:87:18:dc:40:89:24:8c:09:
cb:ab:94:b2:e0:a6:73:1c:3a:e4:e9:bc:45:69:95:
8d:61:db:a0:64:cc:68:b2:f5:d6:29:cd:96:51:fa:
8d:f9:64:84:f8:ce:06:d5:42:79:4e:f1:50:f4:91:
9d:69:6e:68:9b:46:08:4b:fd:46:73:c8:79:31:2b:
41:7a:fd:d7:c4:b5:e3:93:b2:6a:75:0f:16:76:ef:
7e:26:51:96:60:6d:48:c3:49:5c:17:68:a6:1a:b9:
f0:e3:7e:ac:c3:fd:7b:64:4d:ff:0d:f0:52:cb:fe:
bc:b7:9d:73:40:ac:32:ff:4b:64:b5:db:f7:f9:21:
25:30:6e:3b:61:23:0c:1c:5b:f1:f5:f2:86:ff:84:
59:30:21:6a:11:ac:17:fb:f7:d5:1b:6c:76:94:81:
d9:72:1d:b4:8a:a6:48:75:95:72:66:f1:25:41:c0:
75:82:45:8d:b6:ef:f7:07:a7:fd:e3:a6:e1:63:19:
29:d1:30:69:57:49:e3:36:07:c8:5e:ac:b0:12:3a:
64:35:fc:33:02:9f:c1:29:d7:c5:20:4e:eb:82:a2:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7b:21:3d:f2:73:03:d9:3f:e8:f7:44:12:83:ae:ed:77:a6:
15:d3:48:88:8c:ad:3a:99:cb:70:f3:49:b5:8c:6f:0b:bd:47:
a9:08:4e:2f:83:50:cd:32:3c:79:84:a8:fe:7d:3e:cc:d2:54:
bf:85:92:e6:e2:5f:08:2e:cc:6e:5b:6e:ab:a0:50:02:0f:39:
ba:fc:b1:37:48:91:ef:8a:c3:0e:14:81:ba:ab:24:41:41:9b:
d0:cc:b7:ae:85:8f:b6:f5:86:b7:d8:56:84:53:09:2b:e9:ca:
74:95:b0:73:17:85:ec:29:ef:ca:8e:4f:62:53:ec:99:1d:4b:
d6:15:c3:09:44:75:fb:f7:de:9e:c2:29:7e:cd:a6:7b:0b:b9:
34:d1:71:3b:ee:14:9c:13:75:1d:aa:5c:85:81:be:4a:a0:ef:
32:4b:e4:82:1d:50:21:21:98:0f:e9:43:bc:1a:a1:bc:38:32:
95:2a:1b:3a:7f:9f:28:d6:b7:e7:1e:07:61:41:81:8d:89:ff:
8c:30:7e:38:11:8e:68:4e:be:2c:61:33:76:93:6b:a5:b8:d4:
cb:75:66:26:29:6c:c3:08:b9:d2:2a:03:b0:60:69:ed:c5:88:
80:dd:e2:75:77:8f:e8:01:a6:be:ad:51:59:24:4a:71:28:de:
7a:9b:ba:3b
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICWXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz
MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNTAxMzAx
OTM3NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGQTZFQ0FGODNDMzlC
NUZGREUzQUMxREFGRkNBMjc4MEY5QTcxRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJohNzVICbORWN/w1kapDZQdmtFjGVliXBmGjXqLVQqfaKgU+H
GNxAiSSMCcurlLLgpnMcOuTpvEVplY1h26BkzGiy9dYpzZZR+o35ZIT4zgbVQnlO
8VD0kZ1pbmibRghL/UZzyHkxK0F6/dfEteOTsmp1DxZ2734mUZZgbUjDSVwXaKYa
ufDjfqzD/XtkTf8N8FLL/ry3nXNArDL/S2S12/f5ISUwbjthIwwcW/H18ob/hFkw
IWoRrBf799UbbHaUgdlyHbSKpkh1lXJm8SVBwHWCRY227/cHp/3jpuFjGSnRMGlX
SeM2B8herLASOmQ1/DMCn8Ep18UgTuuComaRAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUH6bsr4PDm1/946wdr/yieA+acekwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv
eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU
Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvdERJUDE0MzdhazBja2pJ
dmVVbG11RkpkX2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AF57IT3ycwPZP+j3RBKDru13phXTSIiMrTqZy3DzSbWMbwu9R6kITi+DUM0yPHmE
qP59PszSVL+FkubiXwguzG5bbqugUAIPObr8sTdIke+Kww4UgbqrJEFBm9DMt66F
j7b1hrfYVoRTCSvpynSVsHMXhewp78qOT2JT7JkdS9YVwwlEdfv33p7CKX7NpnsL
uTTRcTvuFJwTdR2qXIWBvkqg7zJL5IIdUCEhmA/pQ7waobw4MpUqGzp/nyjWt+ce
B2FBgY2J/4wwfjgRjmhOvixhM3aTa6W41Mt1ZiYpbMMIudIqA7Bgae3FiIDd4nV3
j+gBpr6tUVkkSnEo3nqbujs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:42:50 2025 by rpki-client