Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
File: AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json)
Hash identifier: JBssbe00Vh0CsKO3Ndo7ig/bJSPXAAe5AgNwvzya1jM=
Subject key identifier: 37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0D3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
Manifest number: 0CB7
Signing time: Fri 31 Jan 2025 02:08:21 +0000
Manifest this update: Fri 31 Jan 2025 02:08:21 +0000
Manifest next update: Sun 02 Feb 2025 02:08:21 +0000
Files and hashes: 1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: om8T7NoWfRfyTpNhp4SPJydAvkbGUNEZCGFW+Plt27w=)
2: EgYiDLDALxPavvj6GOqynyj2ips.roa (hash: mqruHNqLHb3ngxeewtMJx5DdrP5/wyfvKeBaReR6qPY=)
3: QDoD9aiXJ_1J16bJlL_XtiLUjec.roa (hash: vIq5htsAIS3xgUuAbFOtat1TSaVyUxbjFFyE3VWld/E=)
4: QamQjSRh65PAD5qQUmiLAL97hm8.roa (hash: 6UaDzITi0UWMpqQ72teU21yEHhBU4U9kp0OGOItBuVs=)
5: RpRHX7JODkCsRhoeb6Zlrseictg.roa (hash: VD+Q/rLHS6EIwp0nV5DWfBoo7swtsYPBgh8bUcVXg7o=)
6: j0KF7w_waFy7Pzm_PHjTbDVXFFk.roa (hash: /Ydb/xNQz3xo62zlXX56oMPjgQcUpBU20SI3QaOQTzo=)
7: jeIXYqfTUk-TXg0rNxqRopbx8qA.roa (hash: wrWYgnolm3ySco/3pPiDy/RulXlUdHkIoSVzH0CjqMc=)
8: lfiWbqhCgsAKes-UVw2VPz9jemU.roa (hash: HZTMIkx6bkhkRZfw4OKXmtgE2bhb6wwpYgDEUJyMdbY=)
9: vfc0YYqbgV017xcaQ2Dp4phd2E4.roa (hash: GzR8w92o9oV0ht6yXiCZXRTQ8iRRWR3mgRguRpMSDzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3387 (0xd3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Jan 31 02:08:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f:
e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4:
8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46:
c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14:
2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f:
bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f:
66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0:
fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37:
01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec:
03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df:
7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79:
ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e:
2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37:
f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73:
6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4:
67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b:
ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:8f:52:bf:de:1f:f0:a5:a0:64:ea:7a:00:42:6b:2b:e2:bd:
d9:5b:9a:c7:20:5f:e0:59:52:b0:5f:80:51:81:9a:bf:8e:93:
6b:84:08:32:ef:2d:d0:22:53:f4:a0:5e:ea:04:04:f3:27:0d:
a9:c0:1b:70:c1:3b:bd:e3:d5:0f:6a:f0:bd:34:c0:af:e7:fe:
01:01:ea:29:bd:35:85:33:c9:f4:fd:1a:6f:b5:13:96:5c:93:
5d:6a:32:bf:13:93:42:2e:25:d9:4e:ac:9c:07:03:39:1c:80:
0b:31:4c:f0:a2:1f:6b:9d:b9:42:14:68:a5:51:d1:ea:c7:94:
62:05:fc:c1:73:63:43:fc:ea:86:18:94:7a:6c:24:15:e0:8e:
5e:86:ad:e5:62:0e:55:56:b6:ec:cd:b4:13:45:2b:d2:58:db:
97:be:24:44:d3:9e:4d:77:59:8c:8f:54:a5:23:29:a0:c7:db:
55:08:a3:64:7c:c6:e6:8c:01:77:9d:bb:b3:d8:ca:3c:89:b2:
47:c0:ba:48:22:dc:a3:52:25:e0:77:3d:be:a3:dc:2e:82:f1:
3c:b8:b4:97:3d:19:f3:d8:50:61:e1:64:43:eb:d6:36:6b:cb:
a6:6c:bf:dc:ac:cf:cb:ce:02:98:bb:d5:ef:5b:6f:96:71:ab:
2d:fc:9e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:58:11 2025 by rpki-client