Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.mft
File: tOxh7X6MZPIQMX3MfoCKnBktiEo.mft (raw, json)
Hash identifier: 7x5E79/z/nhPCCfv+v91D1TYBF04pGjjKqA2+s9Ut3E=
Subject key identifier: 53:5B:CD:6E:31:40:24:B7:11:8E:9B:92:ED:F1:D2:09:08:41:E9:37
Authority key identifier: B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
Certificate issuer: /CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Certificate serial: 0D0F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.mft
Manifest number: 0CFC
Signing time: Tue 18 Mar 2025 21:03:27 +0000
Manifest this update: Tue 18 Mar 2025 21:03:27 +0000
Manifest next update: Thu 20 Mar 2025 21:03:27 +0000
Files and hashes: 1: 2jwyFuitOBL9htJ_jfUDjXcGgkM.roa (hash: 3yKNIbJFnB4guXv6WHaAKmMyXIoKsCNuV1qDF3cB2VE=)
2: eWIPNfA_W97lWGoSgPh0TDIQ0QM.roa (hash: Re0D+Qm/CK8uNPGIlF8/AgBwB5FpMoGZp417/9M9Iw0=)
3: tOxh7X6MZPIQMX3MfoCKnBktiEo.crl (hash: oCtotUdrM2aaKOKYGyI6lLqgHSyN9cNq00cR4lk9+Yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3343 (0xd0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Validity
Not Before: Mar 18 21:03:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=535BCD6E314024B7118E9B92EDF1D2090841E937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:5c:04:ce:d8:54:76:5d:ac:71:b9:d2:3f:
37:61:ec:2a:b9:a1:24:b1:7e:e9:27:10:e3:68:89:
ee:16:07:ea:63:e4:29:63:6d:1c:55:d6:92:df:c2:
e5:66:56:59:46:c0:dd:b8:f0:05:3a:63:a4:cb:92:
22:7e:5e:98:93:96:22:13:8b:00:29:fb:19:23:1a:
79:5f:a1:20:59:60:13:1c:cc:92:69:00:97:69:a0:
e9:a2:98:c2:a3:f8:92:84:72:32:db:ac:2c:0b:3f:
30:b7:52:4b:b4:c6:21:70:48:86:c3:99:78:1b:d3:
53:7f:ef:5d:0b:80:b8:90:c6:1c:40:d7:d4:6e:00:
48:97:55:ff:37:18:14:b3:27:ac:93:25:36:78:65:
5a:5e:99:15:ea:d0:a7:da:3e:ec:79:18:9a:e8:64:
10:95:55:d0:fb:56:56:2f:8b:10:a1:ee:f2:35:19:
ee:8b:82:45:8f:31:ec:34:28:f3:7f:56:7f:d3:95:
3b:27:3c:f7:7e:dd:06:37:74:43:ed:cc:75:1e:00:
c4:aa:b1:75:04:51:fd:42:26:84:a8:54:0f:18:cb:
b1:5c:02:e5:ba:92:bf:94:63:75:ff:46:9a:78:af:
36:17:67:59:d5:61:1b:49:d0:c2:1a:34:d1:34:0f:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:CD:6E:31:40:24:B7:11:8E:9B:92:ED:F1:D2:09:08:41:E9:37
X509v3 Authority Key Identifier:
keyid:B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:11:c5:2b:b3:16:2c:b6:79:e2:06:10:ea:c3:06:b9:cb:11:
89:a8:a3:84:d1:5f:29:24:89:33:23:0a:dd:20:8e:50:7b:fe:
15:71:77:d7:96:ef:1c:8a:2c:8e:19:66:53:6a:4e:85:e5:99:
f6:b4:46:1b:88:88:14:9f:e8:9f:b9:2b:2b:38:85:bd:18:7c:
9d:61:86:ad:21:a3:01:6b:bf:2c:ca:8b:22:bc:97:87:81:62:
99:53:1c:f9:2e:83:a2:34:17:f3:51:74:9d:a2:df:4e:fb:8b:
ad:48:de:3d:c0:30:fb:9c:ad:9e:0d:e1:09:55:bb:fb:d9:e1:
ce:91:af:e7:71:2d:34:18:03:75:5c:67:49:96:1e:b1:d0:ee:
4d:6b:da:9c:33:86:d1:ad:c1:34:cc:a8:93:9b:c0:de:e9:50:
f2:48:58:d3:28:1f:e6:fc:e3:e7:56:8b:78:48:a9:61:a8:d5:
26:a6:c4:60:5f:21:af:2c:88:45:fc:d6:7d:5f:2e:13:f9:7f:
0d:4a:fb:62:fd:60:3b:50:f9:a1:65:22:eb:8b:5d:73:f9:66:
63:3e:7c:f9:3e:6e:b3:9b:c3:92:be:dd:d6:9f:cb:8a:d0:ab:
81:13:ca:73:d9:b1:4c:60:36:1f:6f:c7:e2:80:b7:da:28:d1:
4c:ae:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:43 2025 by rpki-client