Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft
File: AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft (raw, json)
Hash identifier: 9pI0hGWR9Ea1XmCJRRDYENekNaMO6cE411WH4QpS7RQ=
Subject key identifier: E8:0B:E4:ED:62:7E:C7:DA:C2:99:5E:89:4F:73:B3:F8:A4:55:B0:D7
Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Certificate serial: 017E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft
Manifest number: 0170
Signing time: Thu 30 Jan 2025 22:08:07 +0000
Manifest this update: Thu 30 Jan 2025 22:08:07 +0000
Manifest next update: Sat 01 Feb 2025 22:08:07 +0000
Files and hashes: 1: AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl (hash: AbRS3WdJjMHFqMd9dUPOerMqP5VtHgYAFF5ysw7CMyc=)
2: RCS0Ep2nIG5Sx_BDhaOfPen5CTM.roa (hash: BttQ6CynP32CswJMNujK9AEdOI2l+QrSEBAlO71pp5g=)
3: Zn6CYI_Og0_7VrvbELthgYYG9wk.roa (hash: NzGXkE+/jaGwfxFZNNAEjkaXNsM4iIa5VJeeoUKgpwM=)
4: mAIYc7cE_7exIEEFvtBVk_4OSbs.roa (hash: 8syaeJT1nH2DfWafwPPZDYvEfDnK7fC+EcegT0Tl6NE=)
5: pFWvi5vVPqYCD_Ok17lIEmPGE7A.roa (hash: vBbEYHwpt1aDkmFY6feM7OhGEyq1+5H7Vwq6aa5LfmM=)
6: qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa (hash: Ckg8mFQpR9Q5JmJgnWpeHspgpRNmMikubm5MDwhvX4c=)
7: xedW4iKso6LuvrEHP_2sgw-T3GA.roa (hash: /FiKctAooLy1bvV+1xwNpyWlwz+PCJd+kO+siaBD9nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Validity
Not Before: Jan 30 22:08:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E80BE4ED627EC7DAC2995E894F73B3F8A455B0D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:cc:a8:2c:81:6d:6f:9b:be:6e:81:e6:85:
35:05:05:b0:fa:3c:e6:fa:2a:54:c3:43:2a:86:eb:
db:39:bd:12:25:4f:4b:9b:2f:9b:53:ce:05:e7:df:
eb:6a:fb:58:41:e5:cc:2c:25:c4:7e:96:97:fb:33:
87:8c:36:2b:d5:ed:1f:9d:c5:da:4c:03:6c:69:98:
c8:a1:b3:fe:10:38:60:6a:b1:2f:a4:f5:a6:ef:93:
02:8d:a6:57:56:9c:50:a0:1b:80:2a:89:58:7d:05:
61:8c:95:cc:47:92:8a:de:45:23:f8:45:ae:67:99:
4d:61:d3:9b:88:d7:de:1c:b2:a5:ea:3b:27:f2:90:
b0:4f:ba:a8:29:84:04:ea:0d:47:8d:64:96:0e:4c:
41:b3:2b:e6:14:34:cc:61:81:3f:97:54:72:f9:2c:
77:b5:76:44:61:d8:90:b7:13:82:1d:0c:a0:3c:77:
8c:4a:d0:81:13:78:f1:98:0d:1d:72:b5:83:87:33:
0a:c5:0b:b6:9f:d7:41:a5:a6:36:f1:63:50:07:a2:
13:fb:66:a4:9e:6b:56:8f:8c:8d:60:3a:cc:13:10:
a4:84:72:9f:dc:d7:c2:cc:78:bc:f5:4c:05:78:43:
78:43:58:7b:d3:95:43:c8:ad:32:ba:99:4f:0d:1a:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:E4:ED:62:7E:C7:DA:C2:99:5E:89:4F:73:B3:F8:A4:55:B0:D7
X509v3 Authority Key Identifier:
keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:12:a3:cf:55:97:41:60:32:16:ae:60:90:b0:1c:6c:22:8d:
83:40:9a:47:e7:2f:eb:3d:5e:87:de:0c:8a:22:dc:8e:2d:03:
49:24:24:b5:e1:9a:bc:55:f6:1e:ec:c7:8e:4a:a1:4e:49:b8:
d0:6c:e4:e2:94:86:6a:4e:0f:23:69:34:0c:79:7b:2b:d9:ac:
76:94:96:7b:73:30:03:09:ab:83:30:33:99:c1:8b:5a:58:84:
21:1f:b3:ff:d4:65:d5:ac:52:8c:ea:cd:43:8e:63:7c:13:3b:
08:a9:9c:44:7f:8c:21:a6:97:5f:13:53:0a:63:0f:73:60:28:
4d:cc:91:46:78:52:2d:3e:14:90:05:7d:ae:46:69:ca:3e:e7:
86:1c:80:bd:98:69:6f:04:10:67:d5:b3:83:1a:47:61:e3:75:
f3:e6:95:a3:aa:e3:22:0b:73:b8:87:22:a9:7d:8e:a1:b4:a9:
7a:17:36:17:b1:a0:a8:1d:b8:de:0c:e8:4c:41:0e:96:6d:27:
1c:2c:48:69:94:a1:f1:47:38:aa:21:80:70:c1:37:a2:73:d3:
12:d2:f6:9a:15:7c:3f:0e:9a:4e:d2:ba:be:7a:0a:66:17:7d:
99:71:ef:54:3d:eb:9e:8c:c8:c8:9c:44:9c:40:20:70:1b:07:
dc:c6:fe:8f
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI2
NEE0MUE3NDFFNUYwMEFFRDJCRDdFNEE3QTQyRjVCMUQ3NThENTAeFw0yNTAxMzAy
MjA4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4MEJFNEVENjI3RUM3
REFDMjk5NUU4OTRGNzNCM0Y4QTQ1NUIwRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRFsyoLIFtb5u+boHmhTUFBbD6POb6KlTDQyqG69s5vRIlT0ub
L5tTzgXn3+tq+1hB5cwsJcR+lpf7M4eMNivV7R+dxdpMA2xpmMihs/4QOGBqsS+k
9abvkwKNpldWnFCgG4AqiVh9BWGMlcxHkoreRSP4Ra5nmU1h05uI194csqXqOyfy
kLBPuqgphATqDUeNZJYOTEGzK+YUNMxhgT+XVHL5LHe1dkRh2JC3E4IdDKA8d4xK
0IETePGYDR1ytYOHMwrFC7af10GlpjbxY1AHohP7ZqSea1aPjI1gOswTEKSEcp/c
18LMeLz1TAV4Q3hDWHvTlUPIrTK6mU8NGtVTAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU6Avk7WJ+x9rCmV6JT3Oz+KRVsNcwHwYDVR0jBBgwFoAUAmSkGnQeXwCu0r1+
SnpC9bHXWNUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0RDTC1U
Vy9BbVNrR25RZVh3Q3UwcjEtU25wQzliSFhXTlUuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FtU2tHblFlWHdDdTByMS1TbnBDOWJIWFdOVS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NEQ0wtVFcvQW1Ta0duUWVYd0N1MHIx
LVNucEM5YkhYV05VLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AMYSo89Vl0FgMhauYJCwHGwijYNAmkfnL+s9XofeDIoi3I4tA0kkJLXhmrxV9h7s
x45KoU5JuNBs5OKUhmpODyNpNAx5eyvZrHaUlntzMAMJq4MwM5nBi1pYhCEfs//U
ZdWsUozqzUOOY3wTOwipnER/jCGml18TUwpjD3NgKE3MkUZ4Ui0+FJAFfa5Gaco+
54YcgL2YaW8EEGfVs4MaR2HjdfPmlaOq4yILc7iHIql9jqG0qXoXNhexoKgduN4M
6ExBDpZtJxwsSGmUofFHOKohgHDBN6Jz0xLS9poVfD8Omk7Sur56CmYXfZlx71Q9
656MyMicRJxAIHAbB9zG/o8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:35:50 2025 by rpki-client