Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
File: XNEK1bakd108UE1mEHH4ziQ-KAc.mft (raw, json)
Hash identifier: V7vyCptTtm2guOOBemBj4GC6+Dtx6lbDe5IjpMNDuKg=
Subject key identifier: FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0CFC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
Manifest number: 0CD3
Signing time: Sat 29 Mar 2025 09:34:08 +0000
Manifest this update: Sat 29 Mar 2025 09:34:08 +0000
Manifest next update: Mon 31 Mar 2025 09:34:08 +0000
Files and hashes: 1: HsR6sjj-hOKAFOKzwz1thWUyo6Q.roa (hash: zRZ8JBiIZscJUMwTedK1E/3txJth8lb/oDXYTrHw5qQ=)
2: MxiNdT7aEQeB8wztqXY_vSUN-dk.roa (hash: Etv9TcX0xFLkz64oHHgkUNb644eF5J5iy8ADXhtqNnc=)
3: Sy1F_a4V3Lif37VEOWW6mP92i4E.roa (hash: LKfqJKZ6BLmRQBWO8GIbgctVbys6nSd9eLqv1OiYU8w=)
4: UTJnvZ0ps4aMJTHGC_3lNpB9esE.roa (hash: nusUT1KZboa5FNpu4qx+46MqmqPmdl8WsxFspPfbu54=)
5: XNEK1bakd108UE1mEHH4ziQ-KAc.crl (hash: vRHcnhlej8fVKWEfTlbDmhEGPi/HvIfcHnjjMHv7M8o=)
6: iYhsLmbrPqcQEp7DILngZqrDl3k.roa (hash: hCvrbHWgIQLjuO3fCfliFS9Hj6WutWEpcj1/49ANFX0=)
7: vyMwoLjdbeaAhA55LFWSOpJ9iDA.roa (hash: BkhPVtaF8mEU9sumkeW7L83/KqgBiQIS9MDvZeRDTZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3324 (0xcfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Mar 29 09:34:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FA3526779133AF500CEB1BBDB975CA67F893021E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:f0:ba:38:10:67:07:45:db:31:3e:c3:54:
90:bf:83:9b:2e:a7:bb:01:15:ec:64:d5:ac:2b:28:
33:68:4f:e2:e5:f3:cf:83:ae:a2:0f:c3:c3:3f:64:
13:ee:3d:86:a6:c6:99:50:ee:85:f4:24:de:71:be:
55:cd:34:6f:62:19:5f:71:bf:08:5e:07:d5:b8:1c:
0d:cf:90:db:f3:c0:33:ac:8c:55:f7:b5:dd:8f:34:
80:1f:48:b9:e8:92:39:8e:39:57:fe:02:36:1a:9c:
56:25:58:c9:5e:4d:69:d2:3a:77:a3:c2:83:a3:62:
48:dd:ba:8c:79:0c:b7:63:23:39:c8:60:8f:6b:7c:
a4:f5:1c:c7:db:5b:11:76:10:b2:49:e5:0a:9b:01:
12:48:97:08:6c:1c:47:5f:1f:82:bb:0a:44:09:2b:
01:b1:cd:74:8a:9b:c5:01:b8:57:6f:32:cf:d3:de:
19:46:e8:0f:b2:ed:68:6e:f8:96:39:09:e3:74:10:
cf:71:19:88:f6:32:47:0f:db:2b:41:c4:9c:69:ca:
76:72:f6:02:44:96:a0:11:7d:48:b6:47:18:39:5d:
c6:eb:d2:c1:fe:a8:49:5f:c4:e6:4d:3c:d9:6f:71:
05:30:8d:35:2e:77:b7:9d:e8:bc:a8:b0:af:09:01:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:2b:9d:1d:8a:d6:a7:fe:01:29:2d:79:f6:e0:2b:b6:ce:
6d:61:50:ca:85:e0:b2:72:80:cf:3d:84:42:3e:cd:14:23:48:
0c:69:31:98:0f:4f:06:6a:f6:db:0a:50:d1:9a:12:ad:f4:38:
fe:e0:71:48:50:e2:e4:ee:00:45:f4:47:5c:92:bf:30:b9:52:
a8:d9:22:6e:e2:37:d1:02:8c:e0:be:84:7d:8e:48:3b:bf:66:
b4:a7:0c:a1:dc:7a:a9:4e:c1:30:45:50:ec:1e:c3:e3:1c:33:
04:08:2f:16:b8:15:87:24:da:11:b1:84:cd:38:39:af:01:ae:
e5:e5:c7:11:6c:22:40:9d:37:0a:61:02:d3:04:dd:d8:91:22:
b8:aa:51:10:fe:a1:e7:41:ab:76:01:5b:f4:e7:ad:c9:f5:34:
3e:85:eb:bb:ea:9d:f5:3c:2f:58:5c:ba:b1:9a:4a:67:1a:2a:
ae:4e:02:44:1d:8d:ea:ab:10:c7:91:a7:e8:5d:dc:7d:c3:84:
20:cc:ef:7d:ca:f8:43:dc:60:24:69:8a:21:4f:4a:8c:bf:10:
86:bb:5f:a6:9d:d0:8d:c9:ba:72:d8:e1:a3:03:7f:da:c7:da:
5a:cc:4f:7a:d5:06:de:d8:65:9f:c4:09:76:b8:b9:7c:16:a9:
42:62:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:44 2025 by rpki-client