Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft
File: MRjDNNpY18ACHcqsqIHfudyDZf8.mft (raw, json)
Hash identifier: p/TcoS1jChbCSJ5am1l8mvj0da6/3X43IbDCyW4Flgs=
Subject key identifier: F6:56:C2:46:23:F1:C5:FA:82:6A:36:23:D5:49:C7:8C:94:78:6F:D1
Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Certificate serial: 08DE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft
Manifest number: 08AF
Signing time: Thu 30 Jan 2025 19:07:57 +0000
Manifest this update: Thu 30 Jan 2025 19:07:57 +0000
Manifest next update: Sat 01 Feb 2025 19:07:57 +0000
Files and hashes: 1: MRjDNNpY18ACHcqsqIHfudyDZf8.crl (hash: 3kdmdjeZZZ4/iSmIRodlPlpN+d44LhUc4N1riaQHW7w=)
2: Q05_24adGzgjz_TJRF2S5DnXBLQ.roa (hash: glP8VekPWmOlJYKEwf8AeyNKtE0cdR86TV6nu2SrKzs=)
3: d0kxl-vA8H_0Hlv1riqS-9ygJ0s.roa (hash: IW3OHzDhwM8t7iVM1g0Qp3ppDFZlTtspQEWOl+bFOog=)
4: rK93iBxMGydTLx7FwegK6uJzNiA.roa (hash: elDtjg/qPdYSucaV3wPjDXq4GxhSSi1J24crcxQzKzM=)
5: ytMepmu5BiFeT2WA7noR61E6tVA.roa (hash: 6aPhZKK5Z0qm2qNqRdpgb90WpgDZLs36YKdS05obmx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF
Validity
Not Before: Jan 30 19:07:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F656C24623F1C5FA826A3623D549C78C94786FD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:20:a4:b2:9a:76:7c:ab:42:d7:70:d3:11:
ff:4c:9e:35:91:34:8d:27:c0:20:0c:c4:f8:8e:bb:
4e:eb:cb:ac:9d:86:aa:fb:ed:1d:66:51:89:3d:d3:
22:12:f0:f1:b1:6b:75:a8:29:8c:24:a2:33:16:b6:
e5:d8:67:ba:fc:86:88:a9:eb:9b:f5:e9:2c:cf:67:
49:62:ed:af:f1:98:aa:03:92:91:08:f6:0f:f8:88:
76:45:d3:10:fe:af:c9:73:8b:7d:26:7e:05:dd:82:
39:a3:ac:2e:08:16:55:ae:a6:3e:cf:ce:74:33:8d:
9d:83:82:c7:b4:37:38:16:a6:58:90:b2:57:37:3c:
b7:52:09:7d:24:a8:3e:6d:9f:73:0c:1c:c3:56:ad:
76:76:93:f6:5f:58:43:4f:91:dd:0a:21:ce:cd:d7:
4d:49:e6:f9:7a:0b:c3:f6:55:05:c6:ab:85:f7:3c:
8d:e1:e9:3a:79:e5:44:bc:54:d3:5f:3c:e2:93:b0:
72:02:0f:61:f9:bf:4c:cf:b7:e5:03:95:1f:7b:ef:
c2:ab:18:c1:ce:67:16:1c:a3:26:b2:34:a7:aa:4b:
d3:af:09:ec:a4:f4:0b:69:6b:31:4d:fc:86:35:09:
33:35:4d:e4:88:28:8c:11:49:32:fa:fa:53:ea:a5:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:C2:46:23:F1:C5:FA:82:6A:36:23:D5:49:C7:8C:94:78:6F:D1
X509v3 Authority Key Identifier:
keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:9a:27:0b:93:eb:d7:28:67:8e:0f:cb:0a:32:2e:7a:5c:
82:af:22:18:4b:7a:0f:6a:42:15:ef:8b:48:ee:fa:b2:99:05:
b7:db:b2:0f:30:2a:6f:74:f1:b3:c3:a9:22:2b:ea:80:38:a7:
b3:c5:78:67:da:a7:03:bf:7d:fc:67:36:12:db:8f:24:b4:f0:
4f:bd:15:59:c9:69:4b:cf:69:79:50:7f:60:d1:5c:de:07:ec:
b0:3e:03:60:a7:6a:d6:2e:3a:bc:ac:0d:94:10:7a:34:d2:2d:
ff:21:5a:76:00:d7:e3:03:dd:65:70:3c:9f:a7:a5:03:38:bb:
6f:6d:c2:98:0c:d4:c3:e6:b4:e8:b2:9d:3c:22:01:43:38:3e:
58:a5:c3:e4:c6:00:55:91:32:1b:3b:de:6f:40:c1:1a:0a:05:
46:62:45:a8:b5:f9:58:dd:84:6f:30:2c:0d:05:a1:60:28:6c:
b2:d5:3e:ac:1c:cf:9f:ee:f9:c4:a2:9e:2b:6a:33:88:73:e9:
21:8e:97:75:6b:b8:b1:d4:c8:b9:4c:59:05:73:a5:59:6a:33:
15:44:c1:98:43:48:17:72:66:19:ba:f9:03:84:5b:ef:69:48:
91:14:90:87:98:dd:c8:c3:18:1b:a0:e3:e9:ac:36:72:6e:5d:
fa:05:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:43:54 2025 by rpki-client