
Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
File: KY7S_WrVxbVoffYUonXC_ISNTpQ.mft (raw, json)
Hash identifier: PrsvzCf5ewBfz25nQAMmJRV9fRaPlgCI9TG1j5PJS9g=
Subject key identifier: B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Certificate issuer: /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Certificate serial: 0284
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
Manifest number: 027B
Signing time: Thu 30 Jan 2025 19:07:36 +0000
Manifest this update: Thu 30 Jan 2025 19:07:36 +0000
Manifest next update: Sat 01 Feb 2025 19:07:36 +0000
Files and hashes: 1: KY7S_WrVxbVoffYUonXC_ISNTpQ.crl (hash: pdYjJ2qF121uOE6YKFvEqDCxhA/kjkcqbG4Zee5+cKQ=)
2: _ImarZLfEV40V5siaRNDJV-q3xY.roa (hash: np9OZP0OhnoRTbu1v/+2OR9BLSS04OLSHac2XL0oQrg=)
3: yrF0SRYRWfMvPeHlHMm-z9BTVKQ.roa (hash: huL5OTQfKgfJ+e3UruHkSHDp9OKhM03ld8L7od488gc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Validity
Not Before: Jan 30 19:07:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B03685E84040AEF372A7530642B60A22918BA415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:c5:43:f2:41:c1:58:1f:f2:6b:c8:89:6a:
9c:a3:c3:3a:ff:fe:f1:0c:55:e8:13:49:bf:8b:b1:
eb:13:04:81:5f:11:1c:73:a7:a4:04:51:38:8b:88:
02:49:da:61:e0:18:4d:22:f1:c3:fc:4c:3a:45:87:
9a:19:90:ea:21:1b:78:6f:57:b2:2a:b9:bb:d9:9d:
c0:45:9b:73:99:48:44:1f:ce:87:cd:70:d0:be:48:
ab:6b:2b:c5:68:21:79:93:1f:b0:2e:e6:9b:93:66:
ff:27:db:e4:4b:da:0c:11:92:be:a6:1b:37:36:5b:
79:72:cf:d0:6e:92:e3:7f:40:0c:2e:b3:41:f8:3d:
26:d1:ef:50:6a:a9:91:58:7d:23:a0:9e:98:7c:73:
73:6c:86:16:4b:cb:51:20:ab:91:5d:b8:73:a9:99:
8a:93:df:1f:80:52:25:2c:e6:1a:96:d8:75:5b:5e:
24:97:18:bb:69:70:30:31:b4:d0:0e:63:ad:2e:f0:
14:ef:af:34:38:cf:e8:58:9a:49:7a:ec:d6:4e:e5:
be:4a:f6:f1:21:d9:8a:c6:ec:7a:48:ef:47:3b:74:
ce:8b:6f:ad:f9:82:38:70:4f:4b:7f:b4:37:42:f8:
0a:3f:34:e7:64:83:55:ef:97:f6:e1:c8:b2:2a:d8:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
X509v3 Authority Key Identifier:
keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f7:b6:4c:a4:9c:83:d6:17:41:c4:7f:60:7e:f2:63:fb:e3:
ab:59:41:ee:2d:47:09:08:89:54:1c:f9:c8:1d:50:b5:2e:8e:
c9:84:8b:31:44:12:ac:ab:86:dd:30:e7:63:c8:f9:02:e2:56:
00:ee:05:72:5d:0b:d7:94:c0:f9:37:67:70:9f:90:86:2d:ad:
68:5f:46:a4:24:51:e4:e0:5d:20:14:41:f3:8c:17:dc:83:08:
0b:aa:81:39:10:93:b6:7a:51:55:f1:60:d0:7d:3c:3b:39:af:
b0:3e:5a:ab:c5:1c:97:c8:c6:b8:d1:8f:9f:0c:11:46:1b:a4:
8a:63:5d:e0:14:6d:d1:55:a6:9c:ad:61:4d:70:fa:c9:5c:12:
85:53:13:2a:79:e6:ce:9e:1c:0c:90:3a:95:1a:a9:48:a1:b1:
23:ff:e0:6f:2b:80:2c:d2:8e:9f:86:04:cc:35:81:6a:55:29:
89:58:21:32:9c:96:ad:ee:30:ac:3f:e5:3b:2c:69:6a:4f:5b:
46:80:88:81:47:b0:f3:3d:63:e0:eb:3d:c4:2a:eb:10:b8:84:
aa:0e:3d:07:3f:60:6a:35:4d:5e:a4:a8:62:f3:61:30:ce:14:
45:de:9e:06:30:d1:cc:6d:bd:b6:6b:33:cc:fe:9e:82:e3:61:
a8:96:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:12:03 2025 by rpki-client