Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft
File: 3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft (raw, json)
Hash identifier: wih7QsPPd5jqF5ua/AahLIyUPgX085BTeIZabvCURro=
Subject key identifier: C5:F8:D2:DE:44:75:18:16:47:59:D8:47:AF:45:70:F9:D6:22:90:BE
Authority key identifier: DD:87:44:6D:41:50:D1:45:3C:4A:14:2A:49:EB:A1:07:DA:5D:19:99
Certificate issuer: /CN=DD87446D4150D1453C4A142A49EBA107DA5D1999
Certificate serial: 0130
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft
Manifest number: 012E
Signing time: Sat 29 Mar 2025 09:06:01 +0000
Manifest this update: Sat 29 Mar 2025 09:06:01 +0000
Manifest next update: Mon 31 Mar 2025 09:06:01 +0000
Files and hashes: 1: 3YdEbUFQ0UU8ShQqSeuhB9pdGZk.crl (hash: RpUXj7M5I54hemjjp3/HbNraQwu9YW5c3uD52IGL1ok=)
2: 93RD55Q1LunkHOORn6FyvqkZBhU.roa (hash: //NGuXxuMPDrPRTZ5k2lkzoMIFnw8qbaHYQTIpdyYdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD87446D4150D1453C4A142A49EBA107DA5D1999
Validity
Not Before: Mar 29 09:06:01 2025 GMT
Not After : Jan 9 15:30:20 2026 GMT
Subject: CN=C5F8D2DE447518164759D847AF4570F9D62290BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:73:96:ca:2f:0f:76:4b:e2:ba:f7:0b:30:
3b:b8:b0:97:21:cf:80:24:6d:54:3a:e0:3e:98:04:
66:62:70:48:c5:8d:52:7c:b4:db:9f:a9:a1:07:af:
ef:5a:6f:50:b3:54:7d:ee:0f:13:71:b0:dc:a4:bb:
b8:63:33:75:aa:65:62:0a:c0:4c:82:58:9c:2d:8b:
2b:ab:50:67:2b:f5:0d:8c:0e:86:20:bd:17:fc:51:
7b:8b:7b:13:f3:8b:c9:36:b7:4b:db:0f:35:66:41:
68:ca:79:49:b9:46:47:18:fb:fe:12:76:6d:53:13:
a7:0c:11:20:08:25:7f:42:34:d2:08:75:31:27:0f:
8b:1c:25:bd:26:29:c6:21:ed:6b:d9:55:c0:79:e6:
86:f5:6c:c6:ac:e0:92:3f:c9:d2:45:f2:3d:ce:8d:
99:3c:9b:cc:c8:61:58:19:36:fc:9d:38:c5:ee:3e:
cc:0b:6c:50:09:9c:3c:ee:87:73:50:c7:c6:b8:19:
75:4e:dc:d9:65:6f:8b:e5:84:fc:32:e7:8d:58:e7:
b7:8c:fb:2a:55:36:10:a4:a3:fe:c5:32:1d:86:da:
e3:9f:21:0c:3a:8a:65:3f:62:87:44:a6:f4:36:da:
f8:6b:19:c9:ab:98:ee:fb:76:16:4e:0a:dc:63:d5:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:D2:DE:44:75:18:16:47:59:D8:47:AF:45:70:F9:D6:22:90:BE
X509v3 Authority Key Identifier:
keyid:DD:87:44:6D:41:50:D1:45:3C:4A:14:2A:49:EB:A1:07:DA:5D:19:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e3:24:00:fd:8d:59:d1:03:69:ed:08:cc:95:f8:6d:cd:29:
4a:7e:cf:1b:10:d7:3e:d8:16:b5:e3:81:07:7c:31:2f:10:1a:
01:02:69:24:c7:65:6a:eb:74:0f:7c:23:41:1c:b3:0d:33:93:
bc:22:00:00:c8:f5:18:eb:fe:b4:ca:53:e0:0c:2f:e0:ae:b5:
58:e2:48:9e:5b:de:a0:7f:cf:b6:56:5b:c1:52:46:05:09:a9:
3a:42:48:2c:c1:ad:79:47:0c:3a:70:ff:51:1a:56:9d:d5:f2:
fc:b9:0b:de:0e:09:c1:62:a1:76:70:ef:43:0a:33:b1:f1:7c:
87:c3:76:30:47:e4:6c:a4:3c:ca:c6:a7:30:22:b2:da:18:d8:
13:00:bf:b9:72:eb:d2:80:00:6e:84:9b:39:1c:ff:d9:20:f3:
bd:ac:51:38:82:3e:fa:55:25:b0:52:6f:89:e3:4a:cc:d6:1c:
1b:22:37:a8:25:c9:41:f6:aa:73:96:37:51:a3:19:22:45:cd:
40:43:cc:b8:b7:24:08:c5:8e:dd:e3:65:22:69:6a:db:61:d1:
53:10:cd:36:30:d0:1e:7f:49:69:fb:75:12:7c:d7:d0:e6:fc:
c4:b1:33:33:92:e9:7f:a9:2d:ba:1a:55:8a:b8:8a:05:b6:4e:
82:2c:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:59:33 2025 by rpki-client