Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
File: wNLIw9TC-7ok09g1CKsULy1JQn0.mft (raw, json)
Hash identifier: a8QcgGSkSy2WAn1qTe1QyqomgeDsJeYLXZgF4WH5J0I=
Subject key identifier: B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 130D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
Manifest number: 12DF
Signing time: Thu 30 Jan 2025 19:09:06 +0000
Manifest this update: Thu 30 Jan 2025 19:09:06 +0000
Manifest next update: Sat 01 Feb 2025 19:09:06 +0000
Files and hashes: 1: aMRBPCzVvabO3TTBLpOctFxr5s0.roa (hash: FFcEYx667HjKNh44hrDWBuQW0yJUexU5D24hlN5oYsM=)
2: en010qInKUrBsZfoP4lBiQ2MMH8.roa (hash: 5aQJ3wYL9pXSnvRSuHmb0mtiPB3Sbjn6nMMmaHLhKvk=)
3: fm4NsW1iQI9Wii7nvuxkFOUFhAo.roa (hash: c+QSOC1Fu6n9PgyW3T6xmNxcUBlNAKcWZPGm6xsj788=)
4: gjcM39pmUoxDEKPk0Il3JxhCQOA.roa (hash: wEZWnOucd71MSaMILc5ZWOYHeHoIJ5NMe9ENa6cVjBY=)
5: hRz6dnwZww2VMorKssEh6JvMLWo.roa (hash: +WSOF+mgwN5eFtDlecU3FGdmSCJV7vMDzKf5MBRkqnU=)
6: o4ZoO2jNAXZDclMKcJpzB5zTgjo.roa (hash: 1dqwazLbDAvYrIx4vcqUmvqhxuJvieNDVX44GJOBWQ8=)
7: wNLIw9TC-7ok09g1CKsULy1JQn0.crl (hash: rJaxCKD25wsjIzM6XsBas7vqkVlp2kiqHw0ZLOa40UY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4877 (0x130d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Jan 30 19:09:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B7A072FFD5A0F5D2705647B66024DBB3C43B95BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:62:44:b4:9e:d6:69:a1:7c:5f:31:b7:69:
c1:b2:10:9d:9e:b2:99:07:6a:82:b5:03:07:6d:c9:
55:f4:2e:18:dd:c8:21:13:16:f9:e9:d9:38:68:16:
d4:24:24:5d:83:53:c4:ad:79:42:0a:ce:6c:af:cd:
f9:78:da:7d:18:fb:00:53:d8:b4:06:1d:75:3e:06:
25:c1:2e:35:59:b5:b1:83:30:50:58:cb:1f:19:5b:
63:46:d1:aa:21:e6:a8:76:8e:d7:72:46:26:86:51:
1d:bf:1f:90:6d:a8:5b:fb:73:79:81:da:0e:29:95:
be:29:d4:22:e8:b1:b9:c4:3a:22:a0:b3:30:c4:18:
a0:94:f4:c2:f2:bb:96:1f:ac:c0:81:7b:8c:49:3f:
e9:94:a7:c2:a1:1e:77:db:74:8f:40:92:85:1c:ad:
67:62:49:d0:fd:c2:32:48:7e:df:67:b8:46:34:cb:
53:6d:d7:ea:ed:fa:af:0c:47:6d:07:a5:12:ed:76:
1d:2d:b6:2a:d6:99:f9:5a:bb:35:5a:b6:89:63:bc:
43:cf:09:c0:cb:a5:50:d1:25:5c:b2:38:a0:e2:a8:
4f:e1:ff:32:25:5c:26:a5:32:ef:28:36:0c:10:84:
ba:81:4b:74:6d:0e:c5:90:56:6b:35:eb:4c:aa:51:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d7:31:dc:e7:5f:e2:67:a9:be:6a:73:74:ce:db:45:08:75:
c7:42:f9:78:73:31:02:1d:a0:ca:fb:0e:41:ec:d8:29:ba:ca:
fe:a8:0d:0c:1d:58:8d:89:35:6c:41:1c:20:4f:77:28:82:c8:
c6:7f:6a:36:e9:43:cf:e5:4c:d2:2d:55:92:6c:77:f3:86:85:
59:1c:a4:38:73:f6:ec:1b:62:34:f5:f1:8b:35:59:d5:65:1d:
de:1d:5f:1f:37:9d:2b:a4:81:ae:f2:b0:ce:d4:80:8c:35:b5:
78:f0:33:40:f8:13:b2:af:7a:c4:2f:68:60:be:b5:cf:08:b2:
b3:ba:0f:cc:b5:7e:2c:3b:90:0f:c9:70:6f:e3:e4:92:79:0f:
bb:85:c7:ce:d5:01:c7:10:54:ad:36:95:8d:57:e4:e4:39:15:
b0:df:20:78:f2:59:85:bb:c7:e9:47:ac:89:3c:52:73:be:6a:
7e:95:d9:be:93:ce:37:4e:e3:d5:46:52:e5:40:d4:c8:97:83:
49:e6:51:75:c9:1e:b2:4e:2d:d8:aa:3e:77:53:a8:d8:f0:e5:
52:1b:47:b2:ad:fb:fc:b0:a8:75:77:9e:d0:d8:18:c5:08:04:
a3:bb:2c:d1:3a:d7:82:03:5c:a2:d4:de:23:8d:2a:8c:82:8d:
85:18:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:27:53 2025 by rpki-client