Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft
File: bjmMUswqB52pAUghCshTKMEbvpY.mft (raw, json)
Hash identifier: ipdVJTgDW/mHJkK6JVi9PerHd/t39PUxVqaWVGRNmb4=
Subject key identifier: B1:D9:FB:C3:BC:75:9A:FC:35:59:C3:2E:30:5E:B5:37:DD:FF:15:F5
Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Certificate serial: 0A09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft
Manifest number: 09EB
Signing time: Thu 30 Jan 2025 19:07:42 +0000
Manifest this update: Thu 30 Jan 2025 19:07:42 +0000
Manifest next update: Sat 01 Feb 2025 19:07:42 +0000
Files and hashes: 1: 4RNPUtYUvqdW_sNTspTkYcqa678.roa (hash: O8WEs41SSDvAutDOcQqSoxFvnssJHs1+MIUHG/sr2Hw=)
2: 6WbHkUvc7KoAfTa_eAUOOaJhOB4.roa (hash: Somfl3JwiuhbIgQ5SGrv+E0pOcxyzNtTsAbBmxJo8bA=)
3: bhLTcYyhljcTezxqEDjKM-4bOF4.roa (hash: 2K7pfdsIEMb7dy/E1nPrcTA+f9H+yQAjiuK8nFExwyQ=)
4: bjmMUswqB52pAUghCshTKMEbvpY.crl (hash: /nz9NgeGXI3PH+TqRE10PMMwLVN3M51fd3iBkjprW3s=)
5: yqep_G8fnsqZHp2KD392BykfTrk.roa (hash: HQnRcgaWLvLvNXVAcP4sgU+H6owQQrzxaUr6PmaRCBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569 (0xa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Validity
Not Before: Jan 30 19:07:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B1D9FBC3BC759AFC3559C32E305EB537DDFF15F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:e9:19:43:8f:21:7f:b1:a0:84:3e:3b:4e:
2d:8d:1b:15:13:2b:34:b2:6c:c7:a0:a4:3d:52:8e:
47:fe:cc:51:4c:57:96:af:64:ee:d7:89:6d:75:d3:
ab:79:f2:49:86:b0:7b:17:8c:7f:dc:e0:02:06:65:
58:10:0f:85:51:65:c0:b6:ab:94:2c:41:78:a6:ac:
8b:81:cd:44:92:5e:e6:76:ab:59:a4:49:9e:dd:26:
ed:50:2b:04:3a:1f:af:52:74:59:0e:7c:0d:78:ad:
05:57:68:11:e6:df:0b:97:c2:1e:70:21:cb:b9:ca:
35:5b:0c:29:53:5d:c8:5c:c4:83:3f:73:3a:64:bd:
04:50:5e:3e:be:61:43:89:3c:d7:01:e1:1f:b7:c4:
cd:75:5f:45:a9:35:2d:88:48:45:41:bb:f6:0e:69:
69:ae:8a:37:00:9c:1e:8b:9a:81:df:d7:c0:c6:d7:
56:59:6b:26:38:4b:a4:d4:8b:01:2b:43:ad:34:bb:
91:d9:59:d2:74:2e:a6:ea:82:a8:cd:7e:0f:5e:ee:
50:3e:1a:22:a1:51:24:a6:71:78:a8:dc:cc:66:d4:
8a:9a:e3:ac:d2:49:06:18:19:63:8d:bf:19:3a:4a:
f3:d9:79:c4:a5:4d:b8:85:53:74:79:33:ca:c8:8e:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:FB:C3:BC:75:9A:FC:35:59:C3:2E:30:5E:B5:37:DD:FF:15:F5
X509v3 Authority Key Identifier:
keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:85:d2:2d:0b:1b:dc:a3:56:19:e7:52:31:3a:fb:dd:d2:67:
2b:0c:5f:27:23:ad:d6:25:76:d5:1d:bd:8b:ab:d6:99:7b:2b:
c2:c3:1f:1a:5c:0e:7e:76:b5:25:f4:70:ba:6a:fe:8c:61:3f:
c3:b3:26:9a:3c:40:82:2d:70:2c:44:ba:71:1d:b8:6b:bc:bd:
e2:5a:f0:bc:c1:b6:16:1e:df:0e:0d:33:7f:75:d9:bd:58:3c:
20:f0:2c:e8:6c:0e:f8:80:5d:f7:01:e1:7f:4f:b6:7d:86:fc:
9c:23:b6:0d:34:7d:86:06:8c:0c:fa:1d:0b:76:a2:3f:d4:8b:
2d:fa:c1:8c:90:5b:78:3c:7e:f8:1c:ca:bf:a9:28:84:b1:bc:
d4:1f:49:cf:26:d3:6f:9b:b0:27:1d:d8:47:42:d8:7e:ac:bf:
31:10:c7:8d:65:1d:8e:c8:24:13:6e:58:f9:99:4a:d6:00:55:
9c:1d:81:68:df:51:d7:ee:79:10:b1:99:01:f4:6d:4b:68:64:
f2:02:be:9d:61:93:68:dc:b2:7c:35:ef:08:09:3e:e2:22:cd:
db:b1:b1:dc:00:f7:a7:bc:72:d2:85:ee:3f:87:1e:e1:03:a7:
6e:1b:d9:0c:21:5a:da:3c:4e:7b:52:66:fa:6a:ef:ba:10:d8:
05:df:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:01:51 2025 by rpki-client