Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft (raw, json)
Hash identifier: ASwCF1jjWL0eShX30bf8ridXHWn8o3mC+QONE5imDdU=
Subject key identifier: E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F
Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Certificate serial: 19A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
Manifest number: 199D
Signing time: Sat 29 Mar 2025 10:04:51 +0000
Manifest this update: Sat 29 Mar 2025 10:04:51 +0000
Manifest next update: Sat 29 Mar 2025 16:04:51 +0000
Files and hashes: 1: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl (hash: k93p0rvccGET1+OElnyfR1SvutDOzzmw/Hw6piwwGCA=)
2: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (hash: 8s+ATDf5L1jasQZaZTJXWpmX3UYe3O9PjMF1aH+ucz0=)
3: u4ipF4WngsjqPN3tPnwfCdp59kc.cer (hash: pXA0oKPXgUjd7jiuIka+EJuR8oLDWwoaBUaj0sqPDB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6569 (0x19a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000
Validity
Not Before: Mar 29 10:04:51 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=E056A7AFF9F72732A2275CB078DD072D62236F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:0b:34:55:73:ff:4a:78:ea:7a:f1:4d:13:
5c:91:ee:7c:ea:e3:23:ab:49:e0:46:6f:5e:0b:d5:
2c:73:ec:79:f3:fb:09:8c:43:b3:35:83:f5:55:e3:
13:25:82:f8:87:1f:c9:11:f2:d6:af:b6:fd:b2:d7:
4d:0d:e8:c6:c7:ad:73:cb:20:1c:b7:64:1e:e4:d6:
3e:ca:a3:ac:7e:c6:56:0b:2c:97:5c:be:00:39:af:
5a:0b:23:ba:a9:2e:5a:36:f6:d5:d4:69:34:96:47:
2d:c0:e9:03:7c:e5:0b:56:c1:a2:97:7a:43:67:48:
e3:ac:e7:70:27:7c:46:a2:09:f8:9d:8c:03:72:a0:
f0:03:1a:7c:38:6d:42:b1:f6:05:4d:ca:7e:ae:9d:
f8:86:44:2b:7a:1f:06:dd:9f:86:d6:e4:dd:9c:4e:
e3:b6:ce:cc:07:3a:a1:75:bb:b9:5f:2b:e5:7b:65:
0b:2a:6d:ab:07:f5:73:bd:71:6c:e8:58:77:2f:4b:
49:76:91:54:53:9a:e2:ab:8b:01:7b:32:e7:ae:b7:
e5:64:cf:b1:2f:eb:46:1e:2b:3a:9d:61:bc:0d:97:
1f:b5:7a:21:77:99:3e:fb:00:1c:e7:af:cb:98:d0:
78:80:68:a9:3e:0e:5a:5d:ea:1b:08:fd:78:71:48:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F
X509v3 Authority Key Identifier:
keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:92:a3:a3:89:ce:28:c3:62:02:05:32:ca:d9:29:ee:0b:
44:4f:52:b8:55:06:f8:75:94:1c:c5:67:a8:5e:2f:77:5e:77:
38:e6:31:73:cf:ad:51:4a:d9:89:7a:5f:6d:58:91:66:7b:51:
21:0e:66:f3:dc:d9:d5:44:2f:37:08:96:df:0c:83:65:ce:78:
10:d9:f7:62:ca:3c:a2:1e:39:7b:d8:d2:39:fd:8a:a0:4a:29:
fd:0f:83:8c:80:7c:ce:9c:01:68:0f:12:2b:95:5f:1a:f0:52:
d4:43:2a:3c:db:51:cc:01:c8:9f:06:90:f9:95:36:29:1c:9a:
ab:b4:a6:8a:c9:21:5e:d3:e9:9d:49:32:fd:4a:7c:8c:a1:c6:
bc:87:b9:fa:11:3b:29:4e:96:e6:a9:1d:40:c9:75:98:98:7c:
71:e8:9b:cc:fe:77:4d:bf:91:c4:f9:23:74:87:9c:27:27:bc:
d1:95:34:e9:cc:58:f1:3c:81:71:a9:ae:b6:83:c5:57:3d:f1:
aa:a6:fd:3f:6f:1c:e9:c4:0a:f7:b8:5c:87:b5:6e:08:fb:dc:
77:d9:96:f1:5e:1b:20:2a:6c:39:d9:61:41:c1:54:8a:d8:b3:
3a:65:06:84:85:29:74:bb:f3:48:2f:4b:34:98:54:a5:ca:7e:
48:79:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:27:36 2025 by rpki-client