Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
File: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft (raw, json)
Hash identifier: QxrOhgAexhi92WUntvITtn74urYdsHRoByxjAq02tVU=
Subject key identifier: 70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Certificate serial: 0C68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
Manifest number: 0C56
Signing time: Thu 30 Jan 2025 19:37:35 +0000
Manifest this update: Thu 30 Jan 2025 19:37:35 +0000
Manifest next update: Sat 01 Feb 2025 19:37:35 +0000
Files and hashes: 1: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl (hash: IKuB4m3DhiV4hrbS9DU23i5zlUEUD3znF1+Bc+VcMjg=)
2: KgxK8MobaRd4UMQIFbfEi4GKv94.roa (hash: +bPoKcjnplhpjEn8QLy5sv4OEscwIrW7XBHpyfN5Y14=)
3: KwpuvmaJP6u6DEB9j_dkMZGXX2Q.roa (hash: LTsNhpewHr8yvGZSQWlCZuomLRlcuQh6L3iikROCEOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Validity
Not Before: Jan 30 19:37:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=704A3696F22835EA5A0B27271E18C2E98E9AD438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:c5:a6:90:83:ba:c9:33:73:e8:69:43:f8:
bb:83:eb:a6:a2:4a:28:ce:b5:e4:27:a2:bb:07:2a:
49:83:99:dd:f9:1b:95:6d:13:a9:90:73:56:f8:81:
c5:bd:c3:b0:6c:18:54:d3:e6:64:20:84:17:a6:28:
7f:ab:4c:7b:33:a5:16:48:5b:83:a8:ba:17:9c:28:
33:bc:43:92:f7:f2:04:68:1e:f4:aa:4c:0d:d4:5d:
6a:35:02:99:3c:d1:93:2c:f2:4e:e7:d6:ea:82:ee:
93:fc:6c:65:da:9b:c4:3a:53:e9:11:4f:7b:30:09:
37:34:85:48:eb:34:e2:16:40:c0:a7:33:71:eb:98:
1a:73:75:d7:1a:f3:29:5b:6d:4d:6d:c9:43:00:4e:
12:72:9d:0a:0b:a5:82:31:0c:3e:0a:69:0d:df:54:
83:e7:ca:d8:96:e9:c9:1f:05:09:8d:b2:4b:3b:a8:
be:de:8d:2c:35:58:6e:37:05:08:d5:f7:b8:e8:f1:
c9:16:11:1e:a4:79:08:1f:19:74:47:ba:6e:1e:b1:
6d:fe:7c:c0:e7:23:cf:27:7d:cc:9d:b4:bc:cc:90:
ee:52:f1:1b:e2:49:27:77:22:2b:7f:c0:d0:a1:ef:
63:b8:cf:40:3b:69:0b:24:48:31:9a:db:1e:29:c3:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
X509v3 Authority Key Identifier:
keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:78:6b:8a:85:e3:dc:d4:60:d6:eb:67:01:40:a3:e1:00:0e:
1f:fc:fe:15:9b:41:ff:df:ac:7e:e3:6f:d5:a8:a0:8b:e1:28:
2a:3c:45:b8:61:29:02:db:38:1e:16:86:1b:7e:3d:dd:a2:02:
a8:15:30:f4:4f:a8:d8:42:f5:dc:c6:4e:8e:37:22:26:b1:da:
b1:ff:cc:92:0e:c7:89:6b:f2:44:0e:aa:7a:de:81:5c:21:15:
ad:b7:35:21:42:8a:d5:57:3e:5e:84:55:50:9d:67:06:c3:2a:
fb:ac:64:ea:4a:ea:dd:a7:93:64:b2:fa:d1:93:cb:0a:85:b4:
d0:d1:08:a1:17:e4:2e:82:29:aa:84:32:d2:85:24:f9:5c:5e:
08:ea:f8:f1:af:82:d7:31:23:e2:b1:fe:11:86:18:99:44:ba:
41:d5:25:c4:7d:5f:3f:b1:d6:17:02:f9:42:dc:01:8c:5c:5a:
f8:ee:1d:d9:14:b6:29:46:db:74:89:70:09:88:07:ef:4b:43:
d4:f0:64:11:1c:6c:ec:00:61:51:80:a9:f9:1c:1f:79:8b:35:
53:5b:2d:76:fa:0f:c9:87:b0:93:28:89:af:75:3d:e5:42:18:
82:26:46:ff:49:4c:92:99:09:e0:e5:0e:b2:a7:41:b7:c6:95:
67:cb:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:40:41 2025 by rpki-client