Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.mft
File: DOaJWMQHR1D5sBlnwY9Q-csRIhI.mft (raw, json)
Hash identifier: maWab1i+CMTuYBfKKK/V6qdVaD69q0nfOSJFnTRMrOg=
Subject key identifier: AC:2E:E9:B3:19:A1:A7:C3:FC:04:8C:3D:A5:D5:EF:FE:FB:10:39:E1
Authority key identifier: 0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12
Certificate issuer: /CN=0CE68958C4074750F9B01967C18F50F9CB112212
Certificate serial: 0C3F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.mft
Manifest number: 0C35
Signing time: Thu 30 Jan 2025 19:08:00 +0000
Manifest this update: Thu 30 Jan 2025 19:08:00 +0000
Manifest next update: Sat 01 Feb 2025 19:08:00 +0000
Files and hashes: 1: 8GdQmtgex9Sqjz6DEci9cR07By0.roa (hash: VvNNxJsEO1EB1cVJ1gtEp0ZAXOn9P4yAF8DKJCBTt4U=)
2: DOaJWMQHR1D5sBlnwY9Q-csRIhI.crl (hash: fJO0+Y2NYXjmkc3/3uUpznr1tWX4kubKzI7pL+Pq/aQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3135 (0xc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE68958C4074750F9B01967C18F50F9CB112212
Validity
Not Before: Jan 30 19:08:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AC2EE9B319A1A7C3FC048C3DA5D5EFFEFB1039E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:30:d1:99:1b:51:69:5c:c2:d2:0c:19:71:
fe:b6:09:ae:b4:19:72:15:f4:b9:88:f5:9f:86:c0:
27:6a:be:da:b2:30:ef:d8:72:82:cc:83:17:63:69:
b2:d5:9e:d0:83:1f:16:68:05:0c:5b:0e:21:52:8b:
49:2c:30:41:45:c7:25:7c:ac:bf:5d:09:a6:fa:3d:
78:e6:bf:2b:5a:cd:88:ec:a9:57:b5:49:ea:58:26:
f3:11:f5:cf:5a:b3:3b:ce:58:68:84:fb:14:6e:40:
76:5e:88:a5:a7:31:2c:b0:5e:dd:1b:8c:e2:a2:cc:
da:d3:b2:ef:03:e5:83:ea:dd:c9:c8:60:f3:c5:91:
81:8a:e5:7e:5a:7f:6c:e5:a6:ec:26:75:d8:55:c9:
35:cd:14:97:a2:3b:a4:2a:ce:9b:57:c6:33:b8:f1:
fe:63:14:a1:5a:ec:65:5a:73:65:aa:b5:b7:ef:5d:
5e:61:10:b7:5b:38:a4:e5:28:1d:04:f0:9c:ec:c8:
b7:aa:a4:f0:77:20:1d:24:96:88:5c:e4:0c:21:1a:
bd:9d:67:f3:48:a8:e9:d6:9b:c4:be:7b:72:91:20:
30:14:46:da:c9:1f:dd:64:aa:cd:da:d8:52:11:b7:
48:e0:4e:14:b2:7c:01:a2:13:5c:38:7e:28:89:d7:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:E9:B3:19:A1:A7:C3:FC:04:8C:3D:A5:D5:EF:FE:FB:10:39:E1
X509v3 Authority Key Identifier:
keyid:0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9d:bf:6d:8d:9b:61:27:d6:88:5a:64:8d:1b:6a:0e:e1:27:
4d:e7:92:de:0e:fb:95:6a:23:73:06:af:0a:9f:81:f4:53:20:
e9:68:36:a2:a2:f2:79:56:e8:02:f8:84:82:bc:a9:d2:23:69:
f0:f2:86:0f:87:32:6a:fa:86:83:46:b4:12:20:17:b0:29:10:
9c:02:e8:0a:00:2d:73:cf:3e:80:03:6c:b6:43:fa:28:42:f0:
8e:c8:8c:b0:01:6b:e2:3b:f1:f6:c5:ad:ad:71:3e:47:37:48:
fd:d9:d1:0b:2a:24:31:b7:8c:ff:69:1e:6e:22:99:8f:08:42:
ca:76:f7:66:9e:4d:29:61:28:37:ce:db:74:fb:08:6f:c1:60:
8d:f3:29:24:5f:99:c5:ad:6e:18:f9:53:9c:5d:02:73:98:7f:
34:22:49:80:b8:ff:d8:51:92:eb:a1:c3:18:86:f6:41:a8:fb:
ce:8a:26:63:f3:8d:9a:2c:72:33:cb:f9:b3:47:21:29:bf:0c:
90:65:1b:9f:9f:9a:53:c3:6a:00:8e:76:9b:72:20:d8:1f:bd:
70:ad:07:45:b7:ef:46:ca:34:74:a1:76:67:1e:9c:d2:2e:1c:
a8:0f:a7:ed:a8:09:40:77:40:63:0c:79:50:3f:37:05:f6:70:
79:8f:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:32:12 2025 by rpki-client