Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.mft
File: wo9XMk52a8Xp-pnE161MQNOVj8Y.mft (raw, json)
Hash identifier: Mb+3o4AkzXPJkpW+IcqQNZtofbdtgdMHiJT2yTeB8VY=
Subject key identifier: DA:D3:44:CD:0E:9A:53:7B:02:43:E5:50:CC:80:DA:FC:E8:70:11:19
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Certificate issuer: /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial: 0C55
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.mft
Manifest number: 0C2C
Signing time: Thu 30 Jan 2025 19:37:17 +0000
Manifest this update: Thu 30 Jan 2025 19:37:17 +0000
Manifest next update: Sat 01 Feb 2025 19:37:17 +0000
Files and hashes: 1: 6YHj56NA25a0BbCgU5J19YfeEDo.roa (hash: xXyCNebelu4ztilOloJsXlOIJdzlRuumn9BhailCENw=)
2: IDg_a8NA3AVh_cg41_TJpvTwr5M.roa (hash: yLjnyV33aQegjecSrcGKlIUQoyRs1FjOX6G1MkGiWiY=)
3: Q9zW1uc4j5mDb-LQaJ8Tg_jweZw.roa (hash: DeP349PeLAKkclYjaLXTdTp1SviG7syVFowfbM43+4o=)
4: XCt8VUG5H5Xq0ErqLZ2e_nBG9hc.roa (hash: OzqkO9ydz7qKN3dxLch2fZuWrRDmWuc8YKkjWy90XGw=)
5: ZJ6LjDgixQ3XeNelS_fuCmTTHSo.roa (hash: l7gfBuF6qhDGBYgrj0ZoJndfTkpJxqkRONNTzdoJIWU=)
6: wo9XMk52a8Xp-pnE161MQNOVj8Y.crl (hash: VXBPvONBYQQyGWe1SJnNcYMf5b2fgzVJVgQ1zdig0KY=)
7: xfgWt1tY9HjZOWmBb949CqUJhLw.roa (hash: uR2W2qClSjls3kwaeIPECxy9jznMQHzvnFOccNWVdNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Validity
Not Before: Jan 30 19:37:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DAD344CD0E9A537B0243E550CC80DAFCE8701119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:b8:8c:42:40:5c:32:ed:11:5c:66:61:a7:
10:aa:d5:88:6d:76:41:89:8a:b9:42:da:f0:00:41:
e1:18:37:76:24:95:d4:88:a5:70:c4:82:80:ba:40:
6b:cf:1a:6d:c0:49:7f:fd:6b:53:56:86:bd:26:0a:
4e:3a:af:9e:ca:dc:3e:b3:20:15:ac:60:00:93:bf:
b9:14:63:97:57:ea:cf:7f:3e:4b:f9:8c:10:c0:ed:
4b:7e:19:05:1a:98:83:8f:10:de:84:6f:3e:0a:84:
51:ef:11:d1:5d:d8:8b:4e:4e:2d:50:89:2c:35:b6:
24:95:06:64:21:f4:e4:19:e3:22:4a:0e:a4:b3:46:
b4:e3:7d:69:4f:db:7c:88:fe:b4:a4:dd:01:a5:1d:
73:cc:ee:37:a2:d6:46:35:6d:23:7b:b8:6c:6c:19:
18:c0:f6:da:4b:e2:9a:56:01:61:26:11:5a:19:5c:
3c:1c:d0:ae:b6:d7:b9:3f:11:86:22:f3:51:d8:65:
74:5d:a5:2b:a0:f7:4a:51:37:d8:74:13:fb:cb:e3:
46:d0:3e:8b:3b:56:1e:b3:d8:05:b7:eb:67:42:09:
45:9e:55:f0:3d:54:37:6a:17:d6:36:dc:84:7f:74:
f4:43:5d:4f:c2:af:0b:37:63:1b:af:3f:2c:0d:8a:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D3:44:CD:0E:9A:53:7B:02:43:E5:50:CC:80:DA:FC:E8:70:11:19
X509v3 Authority Key Identifier:
keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:4c:39:da:84:d5:67:0c:9e:69:91:2f:4b:1f:34:c5:c8:7e:
83:68:1a:24:07:70:b0:10:e6:2e:98:ab:e5:12:e8:86:ed:44:
cb:9e:b1:b0:00:38:77:3a:ef:36:90:68:a5:f2:35:45:05:29:
46:f7:90:30:cc:0e:5a:ca:5b:42:1d:58:ae:d8:52:8a:e9:4d:
ae:5c:42:1c:4f:41:23:ea:0f:8c:ac:b0:ff:28:b1:90:2a:c1:
da:cd:63:f6:93:c5:64:55:3e:a0:b8:b6:f8:4b:08:7a:bd:a7:
29:d0:87:cd:ba:40:2e:6e:a2:b9:fd:0a:91:39:6b:c5:12:b8:
dc:09:2b:73:79:ce:26:11:d9:6e:35:90:91:46:58:bc:04:56:
25:0c:ce:0e:58:3a:16:6b:b5:71:9e:43:5b:3c:34:9c:0a:00:
3a:5d:fe:20:0d:10:9a:14:75:25:6a:49:f3:01:04:4c:12:4b:
5f:6b:9e:f0:79:d9:a9:6e:93:43:d5:57:19:0d:98:da:45:d0:
41:08:e9:c3:22:da:7c:20:53:ed:87:6d:80:6b:d2:a8:4c:90:
db:b2:ae:0a:d2:56:c2:32:2e:d4:ac:07:6d:dc:24:ef:e8:63:
b6:78:d8:43:df:1b:1c:da:82:6e:f3:9e:78:7e:e6:ea:2a:60:
8a:81:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:25 2025 by rpki-client