Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
File: iWrQtRYJef6sUMY4TL_BYtQD540.mft (raw, json)
Hash identifier: OIhl9wX46gjIcrvbAW05D8Zm3/ootpYE7xoSYkQeffM=
Subject key identifier: 4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
Authority key identifier: 89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
Certificate issuer: /CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Certificate serial: 0D24
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
Manifest number: 0D06
Signing time: Sat 29 Mar 2025 09:05:59 +0000
Manifest this update: Sat 29 Mar 2025 09:05:59 +0000
Manifest next update: Mon 31 Mar 2025 09:05:59 +0000
Files and hashes: 1: 1geZBQs1U-GPZsXabV78ZvopGkg.roa (hash: qKRLft/24yJAkLXUG6tuiirJVB4hIriwdTxHFbaX3fI=)
2: TtiggzP710c5H4D8DA3CePcI1sI.roa (hash: R2JglWFnvOLDbXtgP9Wbs6IR+16uNuKhoJXVaj3VkM8=)
3: h2yxcq545GJgzNro8QCVLLWCuGw.roa (hash: 7XXR1huGwm2wJ2HHiw7/UQKAjh92V8b5mj0wuiVT6j0=)
4: iWrQtRYJef6sUMY4TL_BYtQD540.crl (hash: dY89S6pnwmqXRbgbKFxLR/rL6vvqVQF1lSj7f++GLuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Validity
Not Before: Mar 29 09:05:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4EFEC9884FCADF72FA01ABA023732C6D88E481D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:14:a0:ba:97:b0:ab:dd:56:8d:78:b2:e8:
24:0e:c7:87:2d:cf:c6:23:89:a5:e1:87:44:1a:eb:
6b:94:fa:e7:b5:0f:58:aa:69:de:d2:1a:fc:03:68:
8b:8d:51:59:83:54:ce:d0:d8:63:c3:58:69:3f:85:
bc:0b:b6:fe:84:54:28:77:61:c1:4c:aa:b6:b3:11:
83:5b:7f:ae:ac:60:65:cf:aa:40:b2:d9:1b:5c:95:
8d:59:77:b0:53:56:9a:a5:6e:a8:0e:18:e1:c9:21:
d9:da:1b:6a:3c:7b:d4:bf:06:7e:9a:ce:da:d8:d7:
33:a3:10:fa:f1:ff:8c:b3:3b:da:4c:50:34:b0:e4:
2a:a8:41:44:20:41:c3:0d:0d:92:95:56:97:f6:c8:
99:34:91:3d:d7:ed:46:04:1d:bd:7f:3e:c4:8f:69:
ae:9f:61:30:95:63:99:02:8c:a8:be:3e:e3:72:82:
8d:f7:8c:d0:0a:9e:dd:2e:b4:de:c1:58:95:98:af:
71:0d:8f:20:05:68:1a:16:ad:82:c9:7f:e0:2e:ec:
14:ef:04:f4:b6:26:00:44:cb:1e:e8:bb:7a:40:f5:
71:1c:f5:79:5c:23:9c:34:6b:28:e3:0c:5f:a4:d9:
70:5a:fe:7b:7f:7f:bd:7c:d2:88:c0:e5:48:f8:94:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
X509v3 Authority Key Identifier:
keyid:89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:c6:6c:11:25:44:d6:d1:93:33:2d:bd:6c:dd:4c:73:09:55:
27:3f:80:1c:62:3b:67:c5:cf:b3:07:f0:05:1b:3a:2b:75:f4:
58:c8:c6:46:9c:08:31:b0:56:ba:65:9c:5a:ed:df:28:3e:d8:
09:83:b6:dd:91:d6:d7:4a:31:24:bb:53:7e:57:15:21:b0:5c:
67:18:81:32:9f:ce:27:9f:25:11:fa:4b:64:2b:12:f5:ac:06:
e5:47:24:53:77:4b:5e:3e:ef:dc:75:47:fc:b9:7a:09:fd:a3:
4c:79:1d:6a:61:75:2a:24:67:61:4d:de:4d:0a:3f:bb:a1:08:
80:cc:26:d8:eb:48:41:31:08:6a:03:a7:b0:ec:e6:6d:f6:88:
42:f2:fe:3f:f1:c4:92:08:55:41:bd:b3:f6:72:18:26:49:c3:
6b:f7:d6:46:4f:86:02:ff:44:58:53:e8:55:46:28:ef:f8:d5:
0e:f5:3b:7e:73:76:a9:65:d5:92:1b:d7:6e:45:3b:b5:0c:73:
21:4f:55:7e:ca:5f:53:b6:95:45:34:90:e3:0b:bd:62:df:85:
d6:49:ce:63:52:32:1b:7b:91:93:52:3f:5b:b0:87:c5:b4:85:
72:a1:21:90:4e:c4:05:5e:59:56:a0:3f:16:4d:b2:a7:80:8c:
99:42:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:59:46 2025 by rpki-client