Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
File: ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft (raw, json)
Hash identifier: DLMNkjxjHojPEu4HbYB/l/lyE4RqdKOUU2lRNd1ETf4=
Subject key identifier: C4:93:19:11:3B:6E:1A:87:D5:87:DA:0E:05:0F:FB:ED:E7:F0:E1:0B
Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC
Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
Certificate serial: 08DC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
Manifest number: 08C5
Signing time: Fri 31 Jan 2025 07:07:29 +0000
Manifest this update: Fri 31 Jan 2025 07:07:29 +0000
Manifest next update: Sun 02 Feb 2025 07:07:29 +0000
Files and hashes: 1: BymjH3VacsKQ4M6zoT7stzGUCiI.roa (hash: r9HY+OUmeRBhqA/OQcF5sgIZJK+PWQeCJ5iX7ABwWbM=)
2: U11X0eGZ1CnO1LbwSYjyPzZKq-M.roa (hash: o/JvUiixXU7025/UsYD/+jnhtxqBUV+FXnGWmJBOwDY=)
3: bz3NPlYe7TXeKY_CcKg_FJSVUfA.roa (hash: eX4SvEF6xGClG364laNbt1aCS32cSif15k0yOj4E/Ec=)
4: h6IgVOZ3XTyWcWiaGmdC4k51uQU.roa (hash: GQFKfxP/eryx68umBJsQbI3z9H/2CgjeSIWbdagXadE=)
5: ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl (hash: qHyFKirHeqr5+TVbHYiDRKCNcQqaLsFcX2vpunOmU2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC
Validity
Not Before: Jan 31 07:07:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C49319113B6E1A87D587DA0E050FFBEDE7F0E10B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:26:23:7e:72:ac:59:ab:82:b7:b4:48:3c:
db:45:de:b1:97:2b:5f:e8:58:b2:e2:90:6a:30:a3:
ef:8a:13:46:5d:5e:4d:56:b3:ce:28:a1:1f:c5:1f:
d6:5d:d7:4f:1d:db:f0:e5:f5:f3:f6:a9:3f:bb:30:
a7:e0:32:0b:19:59:60:c8:c2:57:53:fc:04:4d:72:
0d:3f:22:a1:25:7d:e4:51:f9:f2:b2:36:93:c1:44:
5d:80:97:5d:48:e3:6f:4a:28:b5:d3:26:74:a0:2e:
92:92:15:9d:a6:90:41:21:1c:e3:b6:ce:15:8a:40:
40:a8:70:64:f0:d7:d5:f7:80:93:d3:73:05:af:2a:
84:22:d6:7c:60:65:1a:e5:2a:9c:95:ac:bc:55:9b:
dc:5f:c6:9a:f2:bc:bf:04:d3:f3:35:38:3e:9f:ba:
02:bc:7c:dd:83:63:9a:c5:c0:28:26:b5:9e:76:56:
07:bf:8f:8e:fd:c5:8b:99:2a:99:d9:dc:ef:68:45:
35:e8:4a:87:1c:11:5d:27:27:f3:f5:9b:1c:e0:91:
a8:80:42:51:17:c9:d6:85:d3:e1:13:d5:fe:8f:9b:
d7:2b:ce:31:ff:02:b4:0b:be:8d:dc:39:5c:f8:c7:
3d:62:b2:4b:41:fc:76:62:a0:cf:03:18:90:29:54:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:19:11:3B:6E:1A:87:D5:87:DA:0E:05:0F:FB:ED:E7:F0:E1:0B
X509v3 Authority Key Identifier:
keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9a:79:c3:35:31:04:6e:5a:21:e4:c8:8f:29:b6:04:08:3b:
11:72:af:f8:ee:6f:65:8f:f5:3b:66:23:55:45:41:51:18:5b:
ac:71:02:e8:fa:02:cc:1d:69:c0:32:78:e2:95:77:66:e5:15:
87:13:38:a9:f5:7c:cc:eb:d3:aa:c4:21:4d:d5:cc:5f:e9:34:
50:8c:38:41:4a:63:43:58:f8:30:d5:d9:0d:38:5c:d2:02:37:
e3:2b:bc:c2:8a:5b:cc:08:a5:27:ee:78:5f:8a:f9:c8:91:ba:
31:dd:94:a9:90:88:f0:7b:6b:d4:c0:2e:44:10:fe:72:1a:22:
8f:51:c1:d0:f6:3d:e0:94:21:23:af:cd:8e:d9:47:a8:b0:b1:
e6:0e:28:a6:d6:fc:5c:aa:82:a2:a0:c0:19:47:51:e7:c6:52:
87:7e:4f:84:6e:84:e8:41:93:dc:eb:e3:2c:c9:b2:c7:09:88:
5d:67:d8:45:06:56:24:b4:21:d7:8f:7a:12:17:58:92:39:17:
85:b2:36:9d:cd:f1:d4:7c:0b:4b:16:d4:5f:40:a2:b0:f5:de:
a7:c0:19:2d:15:db:1b:47:cf:3e:89:e8:f4:8d:7f:b4:28:bb:
d2:9f:33:fb:37:6b:9e:32:36:74:65:c1:63:c0:9b:1b:69:d1:
60:6b:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:18:36 2025 by rpki-client