Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
File: 9aRLXgeIZbrvk1E2nZYda6JVbUc.mft (raw, json)
Hash identifier: i50i2YsIJCPgCDJcehfIDE9AneFfAbVBngkhZCxXcDE=
Subject key identifier: 78:C6:26:45:6B:AE:94:BA:36:46:6B:D1:ED:B2:D7:98:BF:FF:01:7C
Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Certificate serial: 01C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
Manifest number: 01BD
Signing time: Thu 30 Jan 2025 19:08:19 +0000
Manifest this update: Thu 30 Jan 2025 19:08:19 +0000
Manifest next update: Sat 01 Feb 2025 19:08:19 +0000
Files and hashes: 1: 9aRLXgeIZbrvk1E2nZYda6JVbUc.crl (hash: C1iGQ67VvC1BTIgMrPNeXw0dBvbD7/peXZtrxfCIbiw=)
2: BKQwMkwwoK0SneKhRFdOVYV4oa4.roa (hash: na297qZWl0Qa1/vBFajJF6Z2wQlGx99bpIDjP4/kDNk=)
3: Zd0mSL8U7Du-RZBF13Re_g-TU_I.roa (hash: tAaY2HO0yC8lY21u5TQd74Fqa1J4fgk2OC8bpaABrT0=)
4: lQwixuhQQ8iVj1KD37Izj6GnYPg.roa (hash: vgnx6jfVkI7FuqtO/00uwpgWGsmExoQ+v7J5b00pEFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Validity
Not Before: Jan 30 19:08:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=78C626456BAE94BA36466BD1EDB2D798BFFF017C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:a1:96:40:32:ef:af:64:da:c6:70:cd:e5:
42:ce:86:f9:47:4a:20:bb:49:3a:e0:39:71:3a:e3:
82:0d:d6:09:bf:c6:fa:b6:6e:89:79:fc:ee:b7:0f:
73:6b:5b:e8:3e:1e:c6:f9:03:f5:e5:59:ba:8b:2b:
b0:13:41:63:52:26:bf:34:d4:ed:13:62:42:8e:9c:
0a:ab:de:43:8b:df:92:61:a3:6a:7a:10:02:56:8f:
87:27:ca:b9:16:e7:5a:77:c1:89:3b:6f:fa:3c:ab:
25:47:5c:ed:7a:86:a0:f0:d4:23:e4:e9:ce:b9:b3:
1f:82:98:57:6d:05:51:1a:d9:48:17:79:e7:82:f2:
8e:b1:37:76:d4:ad:dd:40:19:0d:fc:8e:ed:2a:a6:
37:bb:2b:a8:72:f5:e4:0a:b4:0a:7e:07:12:2b:5c:
cb:d7:90:6b:21:4f:73:12:64:dd:ec:40:84:c8:5f:
ca:a0:a7:49:09:36:02:ba:d5:d8:67:f8:48:e2:00:
54:dc:b8:c1:34:db:01:17:58:a8:8d:03:d2:78:78:
06:f8:0f:1a:2b:07:4c:18:23:43:c8:05:89:43:d2:
a9:fb:06:3d:35:71:ec:8b:8a:e6:37:7b:bd:52:81:
83:3c:e4:39:8f:2f:97:b3:8a:d1:3b:f1:b8:82:76:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C6:26:45:6B:AE:94:BA:36:46:6B:D1:ED:B2:D7:98:BF:FF:01:7C
X509v3 Authority Key Identifier:
keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:f7:b4:5f:56:ba:38:5c:5a:8a:b4:2a:2e:3d:eb:6d:ae:a5:
f7:c5:8d:68:fd:9e:82:14:e9:d1:31:15:ef:be:7d:77:7f:00:
6f:f3:e9:8c:ae:2d:59:f2:43:85:9a:cd:0c:05:da:ba:fa:49:
8a:d9:3b:9a:d1:d1:cb:b7:42:bf:a3:1f:09:95:ac:0c:b2:fe:
0d:72:9b:e3:75:e6:17:c0:e4:f7:7c:25:52:f4:84:fd:f8:ea:
2d:98:ba:40:03:e4:05:80:1d:ae:e8:12:bd:d1:60:33:e8:99:
a3:df:c7:70:4f:27:c6:cb:ce:be:fe:f5:8c:5c:4d:e9:11:f4:
d8:b7:f4:9f:a9:18:84:55:d4:9f:2e:bd:54:c2:43:b9:47:d4:
9c:5a:42:cc:17:b4:5c:bf:24:34:e8:22:fa:fa:61:71:55:b0:
2a:7b:98:8a:c6:04:cf:b6:eb:b4:8f:17:07:a0:6a:12:08:a6:
9d:de:15:c3:a1:c6:3e:c3:0f:fd:62:47:fa:6d:5b:ab:73:01:
03:b0:de:c7:0a:bb:9a:18:e3:a2:42:dc:cc:7e:4f:47:f5:ac:
c0:b7:36:ef:7e:90:82:16:3d:65:83:62:aa:4d:45:a6:89:8a:
6a:ba:5b:71:99:d2:4e:ac:9c:27:20:6a:16:39:f2:c0:d9:51:
d7:1b:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:44:24 2025 by rpki-client