Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft
File: u4ipF4WngsjqPN3tPnwfCdp59kc.mft (raw, json)
Hash identifier: i4dLPm4yGG3KvNuOrp6/fr2gWnMR3JPnkWUsLvRsYX0=
Subject key identifier: 66:39:51:B8:A9:B0:B9:1E:5B:9A:16:A6:74:2C:65:00:14:86:AF:9A
Authority key identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47
Certificate issuer: /CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647
Certificate serial: C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft
Manifest number: C1
Signing time: Sat 29 Mar 2025 08:34:41 +0000
Manifest this update: Sat 29 Mar 2025 08:34:41 +0000
Manifest next update: Mon 31 Mar 2025 08:34:41 +0000
Files and hashes: 1: ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa (hash: si44X6SmEuUTzQeehX8jf9YpHpn97D+69yCXthQn+Fw=)
2: ey7oTunwIFBVd-Ls8FpBo8Xukfs.roa (hash: 7rJMv7PLrwptVxxEzGg8W5N++Sp+Oqfyc+8jxDzM11w=)
3: qCcwn7F0G_g-rmJhggRTuiHlEdE.roa (hash: IekUK/VbTJbKBoeWYcukzZnrb2WE1uOmEcCqUARHkgc=)
4: s1zSHoMw6AQO_C0BNrC-Uq2n7l4.roa (hash: FdYZrMvFt5aC8Ij6ECcznS0oEhnQ9jVj1hBH/UwwkfA=)
5: u4ipF4WngsjqPN3tPnwfCdp59kc.crl (hash: 7iM3FYmYJID81eR1+LNfkpoHHmKexlbThnCXz3OK+N4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647
Validity
Not Before: Mar 29 08:34:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=663951B8A9B0B91E5B9A16A6742C65001486AF9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:bb:13:b7:a6:a6:d3:af:4a:2f:ba:a8:f7:
f3:0e:2f:f2:6f:53:d2:ba:a6:de:4d:ce:97:d5:40:
a9:93:30:0b:1d:05:2d:3c:6e:4f:9a:44:d3:7c:21:
f1:1e:a7:20:1a:2b:19:6e:72:42:35:77:03:6e:79:
ca:32:d5:22:33:4b:3e:d6:87:c8:4e:3d:3d:a2:3a:
b0:46:8e:87:5f:49:03:72:0f:51:48:80:8a:60:33:
55:96:43:01:1a:de:bd:f8:52:90:7f:87:17:d2:bd:
83:12:f9:b5:eb:3d:36:85:30:40:90:df:f5:f7:a8:
50:cb:16:17:bd:47:01:1e:97:20:36:7d:ef:79:07:
d1:4d:63:d4:d3:dc:81:ac:cf:b7:99:dd:c7:5c:f0:
09:1b:8d:cb:62:ca:16:93:a4:58:8c:75:92:b5:1a:
7f:cc:0b:cf:60:df:cc:b5:ee:da:7e:96:3f:1f:83:
40:2a:9f:b8:85:0c:19:da:01:07:97:3e:ad:78:14:
e2:93:e3:3a:9b:81:84:39:b1:5d:4b:00:69:a5:fb:
9e:ee:50:48:4c:3e:f5:f8:77:62:29:b0:bf:4c:ab:
04:f0:3e:b0:60:8f:d8:9e:a3:e3:54:2b:1a:fc:4a:
02:7b:8b:ff:ec:77:aa:0f:2e:4a:3c:c4:b7:2c:29:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:39:51:B8:A9:B0:B9:1E:5B:9A:16:A6:74:2C:65:00:14:86:AF:9A
X509v3 Authority Key Identifier:
keyid:BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:20:a1:cf:89:f7:8b:1c:10:45:58:29:fe:c3:c2:8c:30:71:
68:a5:da:2f:40:68:a7:97:85:6e:57:9e:56:97:0c:45:11:a1:
13:26:82:cd:0f:74:88:83:98:de:66:b3:ec:17:f0:8f:69:4e:
4b:13:5b:59:89:3f:ac:39:01:bc:03:35:d2:fb:3b:9b:d0:cf:
be:01:b4:ec:f5:56:7e:3a:2a:76:2f:45:a7:ff:e7:7e:eb:14:
fc:5b:d6:51:e7:ba:8d:14:8b:77:bf:7f:9a:e4:69:fa:12:83:
1c:e8:40:a5:45:67:d7:8e:3f:b4:de:0a:d2:cf:a2:f4:37:15:
e5:e8:f3:0d:a3:ce:91:69:0b:8f:55:8e:20:f7:8d:0b:14:dd:
19:2e:76:d1:41:4f:9d:91:f5:fa:47:42:b9:c7:7f:e7:ab:93:
5e:33:91:b1:e4:23:8e:bc:e4:b2:00:33:30:3c:a8:04:47:e9:
f6:fe:23:01:0f:bc:0e:20:b2:6b:4c:8a:cd:8e:59:de:ba:d1:
b0:25:c4:28:3b:20:bc:76:0b:32:60:3f:99:64:18:2d:e4:be:
21:bc:5e:a5:ba:37:50:53:3a:11:45:49:03:29:a6:88:b5:9c:
23:bd:bf:83:52:fb:43:ed:40:0f:72:92:de:a4:c6:52:eb:cc:
d5:d2:06:8e
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkI4
OEE5MTc4NUE3ODJDOEVBM0NEREVEM0U3QzFGMDlEQTc5RjY0NzAeFw0yNTAzMjkw
ODM0NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2Mzk1MUI4QTlCMEI5
MUU1QjlBMTZBNjc0MkM2NTAwMTQ4NkFGOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcD7sTt6am069KL7qo9/MOL/JvU9K6pt5NzpfVQKmTMAsdBS08
bk+aRNN8IfEepyAaKxluckI1dwNuecoy1SIzSz7Wh8hOPT2iOrBGjodfSQNyD1FI
gIpgM1WWQwEa3r34UpB/hxfSvYMS+bXrPTaFMECQ3/X3qFDLFhe9RwEelyA2fe95
B9FNY9TT3IGsz7eZ3cdc8AkbjctiyhaTpFiMdZK1Gn/MC89g38y17tp+lj8fg0Aq
n7iFDBnaAQeXPq14FOKT4zqbgYQ5sV1LAGml+57uUEhMPvX4d2IpsL9MqwTwPrBg
j9ieo+NUKxr8SgJ7i//sd6oPLko8xLcsKfjXAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUZjlRuKmwuR5bmhamdCxlABSGr5owHwYDVR0jBBgwFoAUu4ipF4WngsjqPN3t
PnwfCdp59kcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO
L3U0aXBGNFduZ3NqcVBOM3RQbndmQ2RwNTlrYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvdTRpcEY0V25nc2pxUE4zdFBud2ZDZHA1OWtjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL3U0aXBGNFduZ3NqcVBOM3RQ
bndmQ2RwNTlrYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAS
IKHPifeLHBBFWCn+w8KMMHFopdovQGinl4VuV55WlwxFEaETJoLND3SIg5jeZrPs
F/CPaU5LE1tZiT+sOQG8AzXS+zub0M++AbTs9VZ+Oip2L0Wn/+d+6xT8W9ZR57qN
FIt3v3+a5Gn6EoMc6EClRWfXjj+03grSz6L0NxXl6PMNo86RaQuPVY4g940LFN0Z
LnbRQU+dkfX6R0K5x3/nq5NeM5Gx5COOvOSyADMwPKgER+n2/iMBD7wOILJrTIrN
jlneutGwJcQoOyC8dgsyYD+ZZBgt5L4hvF6lujdQUzoRRUkDKaaItZwjvb+DUvtD
7UAPcpLepMZS68zV0gaO
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:30:52 2025 by rpki-client