Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft
File: gwvEQQFipY0NsX4KNRVR-7PXUaE.mft (raw, json)
Hash identifier: eq+uHwkOV1BMVPC2SXBHpgM+IISCwawo1h53DP/HNtE=
Subject key identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0D50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft
Manifest number: 0D23
Signing time: Thu 17 Apr 2025 21:07:48 +0000
Manifest this update: Thu 17 Apr 2025 21:07:48 +0000
Manifest next update: Sat 19 Apr 2025 21:07:48 +0000
Files and hashes: 1: 3Kf3vQjh77j-rovWseazIe2p3N0.roa (hash: 07kUCJaDVepBYELuXGf6572F1XUmEmaBDfv569uoqAE=)
2: 9F3wUx7xk_uyyBAckXeo8GtKBCg.roa (hash: Inb/cjQwutVg2dLsNevaryukIUxJX4sS3o22vwCOT7w=)
3: NBMitYmQhIh2rnquqkNjJdTprQA.roa (hash: 9ElOZUZFrBnQxctX56S3T+EwMNiefRafQOIg0vsLUxo=)
4: cmBNJBmOkVoPRxVqC932eEk8U4U.roa (hash: KtkGafBeLiSh3QNd4wYz+hrNvhwahgzQlmZ3K7/RZJg=)
5: gwvEQQFipY0NsX4KNRVR-7PXUaE.crl (hash: BpMiqyLTCVb26yaVKv3cAjkcTCCsg/lhUu8HhH+LPtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Apr 17 21:07:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01CF58E390EF3AF26464E9734E6C92234FDAA683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:ca:58:28:32:52:b4:ca:c3:69:88:0a:6f:
1e:ba:61:57:db:f6:9a:2c:5c:e0:8e:a8:7f:29:98:
8d:f3:a3:e3:80:8b:fa:31:7a:f0:89:28:84:2a:80:
52:1a:87:ad:db:b9:9e:61:9b:2b:60:ca:1b:a7:80:
c9:5e:d9:8c:73:58:37:be:51:ff:f1:ed:fd:11:ef:
d1:7d:f5:2a:87:fe:e4:42:e4:db:e2:8c:fd:7e:61:
ed:f0:83:c9:d6:a7:bb:2c:8e:e7:8d:11:74:ba:ad:
ea:8f:15:43:91:e5:8f:d3:f3:7b:5e:4f:64:dc:38:
04:1b:28:c5:9f:e2:cf:f2:2d:ef:9d:e4:3f:76:13:
b2:52:21:c4:11:af:7c:b6:43:96:16:15:f8:fe:4f:
70:44:02:03:f6:dc:4f:c7:7c:91:b7:44:63:73:a9:
d6:08:18:ff:64:65:db:3c:be:32:8c:5a:91:1a:d3:
f6:88:45:55:17:e1:e8:ac:7d:e8:4c:e8:f1:4e:ef:
84:38:f2:cf:e0:ed:81:60:ec:77:17:3c:62:b9:e7:
8a:e6:38:ea:f6:40:45:86:8a:50:0e:a3:84:cf:cb:
26:da:c5:34:b9:4d:0d:28:c4:2c:11:c8:76:ae:bd:
15:52:b3:8d:35:45:ca:26:87:73:41:cf:17:2f:7d:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:fe:ef:c3:30:d2:c5:0c:7b:ab:d7:a4:e2:12:5f:1f:ba:
ae:0e:43:6e:72:ff:db:bd:77:96:d9:89:2b:88:19:e8:a7:28:
98:8e:09:00:72:55:f0:c8:ea:e4:42:d2:1c:65:51:9b:b6:d2:
dd:10:9e:99:7a:9d:e5:5e:23:dc:e8:40:40:87:28:ad:01:70:
aa:bb:69:76:90:35:42:7c:8e:e3:cf:bb:b0:89:b3:cf:31:d2:
0b:2c:79:33:12:28:2e:6c:70:cd:c3:02:43:5d:f0:87:38:10:
37:6f:f1:f0:e1:3f:52:2d:5d:05:56:42:85:3c:29:ce:fe:02:
82:25:91:75:5d:e4:ac:c2:c7:b2:25:cf:c5:a5:a5:f8:f2:ff:
d7:9e:c5:7a:81:e2:cd:15:cf:51:42:fc:ab:fa:b3:2a:f5:0d:
60:99:3f:92:44:2b:a1:90:1c:5f:82:44:1c:62:b8:11:af:cb:
f0:cc:30:8d:e8:ad:0b:5c:71:81:01:fd:cc:af:db:b9:ac:29:
da:91:34:28:a8:81:8e:e6:f5:06:03:49:ac:23:68:23:2a:e1:
e7:17:dc:f3:97:f4:2c:b2:50:b3:1e:9d:fe:00:d2:d0:7b:14:
c1:95:d3:d9:bb:dc:71:c0:e3:70:74:96:e4:3c:db:f8:41:39:
9d:52:96:4e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw
QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNTA0MTcy
MTA3NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxQ0Y1OEUzOTBFRjNB
RjI2NDY0RTk3MzRFNkM5MjIzNEZEQUE2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY6spYKDJStMrDaYgKbx66YVfb9posXOCOqH8pmI3zo+OAi/ox
evCJKIQqgFIah63buZ5hmytgyhungMle2YxzWDe+Uf/x7f0R79F99SqH/uRC5Nvi
jP1+Ye3wg8nWp7ssjueNEXS6reqPFUOR5Y/T83teT2TcOAQbKMWf4s/yLe+d5D92
E7JSIcQRr3y2Q5YWFfj+T3BEAgP23E/HfJG3RGNzqdYIGP9kZds8vjKMWpEa0/aI
RVUX4eisfehM6PFO74Q48s/g7YFg7HcXPGK554rmOOr2QEWGilAOo4TPyybaxTS5
TQ0oxCwRyHauvRVSs401Rcomh3NBzxcvfbf7AgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUAc9Y45DvOvJkZOlzTmySI0/apoMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K
NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U
RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9nd3ZFUVFGaXBZME5z
WDRLTlJWUi03UFhVYUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA0X+78Mw0sUMe6vXpOISXx+6rg5DbnL/2713ltmJK4gZ6KcomI4JAHJV8Mjq
5ELSHGVRm7bS3RCemXqd5V4j3OhAQIcorQFwqrtpdpA1QnyO48+7sImzzzHSCyx5
MxIoLmxwzcMCQ13whzgQN2/x8OE/Ui1dBVZChTwpzv4CgiWRdV3krMLHsiXPxaWl
+PL/157FeoHizRXPUUL8q/qzKvUNYJk/kkQroZAcX4JEHGK4Ea/L8MwwjeitC1xx
gQH9zK/buawp2pE0KKiBjub1BgNJrCNoIyrh5xfc85f0LLJQsx6d/gDS0HsUwZXT
2bvcccDjcHSW5Dzb+EE5nVKWTg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:08:13 2025 by rpki-client