Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIXNET/zfRCd7qW_GBykAhknAmwrqBwM-g.mft
File: zfRCd7qW_GBykAhknAmwrqBwM-g.mft (raw, json)
Hash identifier: xioD0Hp8Wg0c4iv6ATDvA/4gGe7lZ8XV0GxQMzAb8XY=
Subject key identifier: 6F:A1:4E:92:93:55:9F:9C:0E:CE:F0:0C:64:BD:4E:50:CC:1A:AD:EA
Authority key identifier: CD:F4:42:77:BA:96:FC:60:72:90:08:64:9C:09:B0:AE:A0:70:33:E8
Certificate issuer: /CN=CDF44277BA96FC60729008649C09B0AEA07033E8
Certificate serial: 0C41
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zfRCd7qW_GBykAhknAmwrqBwM-g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIXNET/zfRCd7qW_GBykAhknAmwrqBwM-g.mft
Manifest number: 0C39
Signing time: Thu 30 Jan 2025 20:07:48 +0000
Manifest this update: Thu 30 Jan 2025 20:07:48 +0000
Manifest next update: Sat 01 Feb 2025 20:07:48 +0000
Files and hashes: 1: 8smAgl5x1dy_gPUu3yy8k8FxVc4.roa (hash: UePpwSXIy1l1w65fomp3J7cwvqkwLtrQbTASMQgITgQ=)
2: zfRCd7qW_GBykAhknAmwrqBwM-g.crl (hash: NUSGUVGHDp/2mq3XtfmQ/SF4jKtEmOvIcCj8gpAZLm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDF44277BA96FC60729008649C09B0AEA07033E8
Validity
Not Before: Jan 30 20:07:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6FA14E9293559F9C0ECEF00C64BD4E50CC1AADEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:0b:21:81:ca:39:17:0e:33:7a:a5:88:b3:
ac:a9:dc:05:12:67:54:f3:89:a2:19:61:eb:b4:89:
e0:78:79:14:46:a7:29:67:5b:65:6b:c2:7c:dd:83:
f4:28:b4:2c:dc:33:f6:b6:fa:a5:8a:8a:17:b1:c1:
db:da:3a:9a:95:3e:47:92:74:f1:ef:0f:9f:20:1e:
f7:f2:1c:18:9e:35:45:3b:a4:bd:04:e5:18:49:74:
0d:ac:1f:1a:05:2d:dc:76:28:c0:79:8d:ba:3a:72:
4f:38:ab:f4:99:fb:7b:06:c9:a3:8a:e1:5f:1a:e4:
90:26:60:4b:4b:80:f7:12:f4:79:f3:6a:e1:a9:69:
af:d0:e8:3f:3b:96:b5:99:7e:49:a3:59:55:f7:3e:
96:e5:08:0b:11:94:c3:d4:64:96:94:7c:c6:4f:38:
f7:07:55:4b:e0:6d:31:73:0c:03:67:66:13:72:a6:
5c:52:03:af:5c:df:40:dc:22:75:ce:bd:d3:74:ce:
9e:9b:19:f0:b0:2e:7c:4c:0b:55:b2:46:94:d3:00:
f3:52:b2:01:db:f3:4f:5c:8e:ce:ac:69:20:35:d5:
c4:cb:b1:49:4b:b8:d6:6f:8c:7a:c3:da:4d:5e:76:
79:ef:f4:89:ae:e2:5f:82:61:2e:39:fb:20:dd:a4:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:4E:92:93:55:9F:9C:0E:CE:F0:0C:64:BD:4E:50:CC:1A:AD:EA
X509v3 Authority Key Identifier:
keyid:CD:F4:42:77:BA:96:FC:60:72:90:08:64:9C:09:B0:AE:A0:70:33:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIXNET/zfRCd7qW_GBykAhknAmwrqBwM-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zfRCd7qW_GBykAhknAmwrqBwM-g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIXNET/zfRCd7qW_GBykAhknAmwrqBwM-g.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:09:bf:ed:ca:a4:8a:5b:d3:ec:17:ec:35:e3:a2:17:40:a6:
32:b1:81:6f:cb:fe:53:8e:30:bc:dc:e9:1e:e1:ce:20:67:f5:
33:26:65:ed:11:19:33:2f:a1:6f:3a:24:35:4f:3d:7a:95:f0:
cf:74:a0:6c:0b:86:1e:6d:c8:82:cb:80:c7:2b:4d:08:34:8a:
82:6b:09:f4:63:c7:fb:9d:c2:1f:3a:09:72:f0:d7:26:bd:70:
4d:3f:4a:65:0b:38:a5:25:a2:3c:24:b2:90:8b:3c:09:9d:1e:
c9:99:8c:39:1c:54:75:d0:80:da:07:b2:c5:15:ca:68:3d:1f:
30:10:ae:1b:fa:ba:8b:aa:ae:72:10:63:28:86:63:45:a6:74:
c7:f7:41:a9:ce:42:33:3e:28:13:d7:7b:dc:8e:00:f5:83:8c:
75:10:c7:33:8b:d0:ac:3b:b3:fb:a2:9a:a5:93:22:56:13:da:
31:74:96:34:71:bc:a8:b6:87:52:43:5b:21:28:d7:20:cb:96:
a7:47:f0:9f:d3:05:80:b7:b7:ee:67:c0:65:1f:a3:53:a4:7d:
ff:27:90:37:43:86:86:a0:6e:65:84:ab:17:9f:dd:68:89:25:
4d:cf:34:06:15:7f:28:c0:66:d2:cc:c0:79:e5:1c:06:cd:af:
8d:c3:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:20 2025 by rpki-client