Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
File: 0qCc5CgJ9NqdexxEc93y9DalmcQ.mft (raw, json)
Hash identifier: vob4itmFoj41AX/q9T6aegRPv0WEdLXba+BAJdb5OQA=
Subject key identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial: 041D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
Manifest number: 03FC
Signing time: Wed 16 Apr 2025 09:07:56 +0000
Manifest this update: Wed 16 Apr 2025 09:07:56 +0000
Manifest next update: Fri 18 Apr 2025 09:07:56 +0000
Files and hashes: 1: 0OdSpSYJeiaEOW_rz8gN0UrVQFc.roa (hash: HaTMLBq2iToqBAT8fxEB7rmwA7Qe/jbVlmJH4yhTaJ8=)
2: 0qCc5CgJ9NqdexxEc93y9DalmcQ.crl (hash: cg5QnK1/LohEiJ9jRQYlCHdhdOlrnNiQo5XfyhQ3yCE=)
3: UWE6Y-Z-FmnPUHd0TgMgjUf6HCE.roa (hash: xMB587U8kNzkblGnwvJ4ziMyvQIpLmqwOvNgYFgT6rI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Validity
Not Before: Apr 16 09:07:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=356D1D56D2B0912C2D9009BA80830157976AD707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:71:bf:79:31:ed:f4:6e:63:62:3a:5a:3d:
ce:42:9f:26:ff:48:e9:72:2d:c3:6b:6f:c2:14:7e:
f3:05:6d:d5:bc:75:b1:a7:f3:1f:f8:3c:3a:c6:f5:
8f:e9:f8:89:b5:fb:14:bc:09:98:4e:c0:ce:aa:93:
33:37:b7:79:7a:fd:cd:95:1a:cf:d3:01:3f:25:c3:
2f:d9:8a:02:05:81:b8:e9:d5:9a:02:2c:04:02:dc:
cd:a2:71:f7:c9:06:ad:73:dc:2f:0e:de:27:9f:84:
85:ff:0d:a8:b9:94:10:cb:69:e6:f7:48:e7:39:9e:
c6:c0:32:d5:65:98:d4:78:0c:7c:ff:5a:dd:8b:10:
a4:21:28:73:24:15:d6:74:5f:ab:c6:38:20:1a:cb:
bc:a5:21:dc:4e:91:11:d4:8b:9f:16:bf:a7:ad:36:
88:39:95:b2:86:bb:d1:91:80:82:2b:64:11:d2:00:
37:96:c8:3f:7b:dc:db:f4:0d:15:24:5e:21:76:14:
92:6a:c3:fd:94:a1:ce:a5:c4:5a:ee:35:f7:d0:08:
03:9c:b0:1f:14:69:e5:4e:c8:84:11:ac:64:44:32:
4d:32:fb:ae:eb:a8:6c:c2:25:1c:e8:d9:99:4b:59:
31:82:56:09:ce:1a:b1:d2:d4:8e:bd:65:29:7d:bd:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
X509v3 Authority Key Identifier:
keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:3f:a7:a7:15:e8:08:99:0f:81:65:12:5a:e2:57:ab:32:63:
70:0f:f7:b8:61:93:08:a0:dd:72:f3:41:30:19:8f:2a:b3:05:
51:6b:af:8b:2d:1c:3d:ef:70:aa:a5:30:d5:26:bf:a8:a9:4f:
6b:09:38:64:db:6e:2c:c0:26:74:9e:68:68:e9:14:92:8a:88:
a0:95:14:64:bc:3d:db:c8:40:79:43:a9:a5:e0:cf:49:66:bc:
fc:41:d5:d7:75:64:01:a5:2f:62:6e:e5:6c:05:06:a5:c0:c3:
13:67:aa:1e:ea:2f:e6:60:de:5d:f9:ad:d6:4d:a9:ae:43:bb:
83:a1:2f:9d:05:b7:77:5d:94:65:44:88:c6:90:77:b1:53:17:
4e:63:01:af:90:4b:f3:45:a4:9d:12:62:96:c2:7c:42:3d:cf:
79:66:16:4a:d7:77:c9:5d:8c:50:fa:4a:79:7b:54:e0:17:4c:
d5:fe:e7:6e:5e:90:b1:27:5e:d1:ed:f8:c9:69:36:24:86:6d:
ad:3c:e9:df:6f:98:88:0a:5e:ad:66:d5:cd:4d:f6:0f:91:b2:
60:aa:2d:ac:d9:e8:55:d1:cd:aa:97:b6:f4:d2:b1:dc:3f:e1:
05:fa:dc:ff:ba:33:49:9b:b8:cd:eb:af:29:c7:97:0d:45:8e:
0d:3d:4a:f1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB
MDlDRTQyODA5RjREQTlEN0IxQzQ0NzNEREYyRjQzNkE1OTlDNDAeFw0yNTA0MTYw
OTA3NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1NkQxRDU2RDJCMDkx
MkMyRDkwMDlCQTgwODMwMTU3OTc2QUQ3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDanG/eTHt9G5jYjpaPc5Cnyb/SOlyLcNrb8IUfvMFbdW8dbGn
8x/4PDrG9Y/p+Im1+xS8CZhOwM6qkzM3t3l6/c2VGs/TAT8lwy/ZigIFgbjp1ZoC
LAQC3M2icffJBq1z3C8O3iefhIX/Dai5lBDLaeb3SOc5nsbAMtVlmNR4DHz/Wt2L
EKQhKHMkFdZ0X6vGOCAay7ylIdxOkRHUi58Wv6etNog5lbKGu9GRgIIrZBHSADeW
yD973Nv0DRUkXiF2FJJqw/2Uoc6lxFruNffQCAOcsB8UaeVOyIQRrGREMk0y+67r
qGzCJRzo2ZlLWTGCVgnOGrHS1I69ZSl9vcgjAgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUNW0dVtKwkSwtkAm6gIMBV5dq1wcwHwYDVR0jBBgwFoAU0qCc5CgJ9NqdexxE
c93y9DalmcQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVSQ1lD
QVQvMHFDYzVDZ0o5TnFkZXh4RWM5M3k5RGFsbWNRLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS8wcUNjNUNnSjlOcWRleHhFYzkzeTlEYWxtY1EuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRVJDWUNBVC8wcUNjNUNnSjlOcWRl
eHhFYzkzeTlEYWxtY1EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhD+npxXoCJkPgWUSWuJXqzJjcA/3uGGTCKDdcvNBMBmPKrMFUWuviy0cPe9w
qqUw1Sa/qKlPawk4ZNtuLMAmdJ5oaOkUkoqIoJUUZLw928hAeUOppeDPSWa8/EHV
13VkAaUvYm7lbAUGpcDDE2eqHuov5mDeXfmt1k2prkO7g6EvnQW3d12UZUSIxpB3
sVMXTmMBr5BL80WknRJilsJ8Qj3PeWYWStd3yV2MUPpKeXtU4BdM1f7nbl6QsSde
0e34yWk2JIZtrTzp32+YiAperWbVzU32D5GyYKotrNnoVdHNqpe29NKx3D/hBfrc
/7ozSZu4zeuvKceXDUWODT1K8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:19:42 2025 by rpki-client