Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
File: NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft (raw, json)
Hash identifier: q/TdZfNIRM/WvqbPd6KuUplMg0U53iW0U8tGomV8ORk=
Subject key identifier: 45:86:DF:10:0F:31:5E:43:98:B7:E4:CA:F7:57:ED:17:11:00:06:C9
Authority key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
Certificate issuer: /CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
Certificate serial: 01B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
Manifest number: 01AD
Signing time: Sat 29 Mar 2025 09:05:05 +0000
Manifest this update: Sat 29 Mar 2025 09:05:05 +0000
Manifest next update: Mon 31 Mar 2025 09:05:05 +0000
Files and hashes: 1: NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl (hash: TO51oIi1osOO5cmT7/MAyIpwS3JwQD3akSJ0ZInPg80=)
2: Onugl1h3cmlr28nI72zQpvabXUg.roa (hash: 6u484GXhoCbYyLIazk13wwCpvaos5Rfs5cpAL5bUqiw=)
3: W_J2sxTVXyBLDd6WXaWY9NA20ag.roa (hash: XCgZ5HtTo+PbAFOg9yR+TMcHNaLm/CR4sRMKO4Ar+Js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
Validity
Not Before: Mar 29 09:05:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4586DF100F315E4398B7E4CAF757ED17110006C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:4e:ee:c4:93:3f:d5:58:94:41:5b:f1:c0:
46:81:42:12:ea:48:a5:92:92:72:9a:b0:cf:67:c5:
7d:24:7d:d8:32:9a:33:38:18:a3:ee:04:26:ab:59:
7c:18:65:2f:89:a1:41:77:ac:7d:24:73:e4:11:09:
99:c9:25:41:c8:5a:c6:29:b9:64:03:8c:a8:a1:49:
4b:05:7f:a0:03:07:b5:d0:e6:87:6d:ea:49:75:32:
19:73:a7:26:b9:8c:98:8d:bc:34:43:bf:34:19:88:
19:4c:10:53:1c:e6:9a:09:16:4c:69:e2:22:19:81:
8a:12:ee:26:c9:5c:2b:cc:2e:c0:f4:c4:bc:df:26:
8a:4c:f2:7c:33:73:38:b0:06:37:31:79:0e:81:f6:
4a:59:2a:58:48:57:5b:5e:f5:b4:22:9e:db:cb:0a:
c0:87:fa:d8:13:a6:b5:05:31:02:27:20:d0:04:6e:
bf:ad:3e:55:fa:ca:c2:58:2b:80:eb:9b:26:f8:15:
e4:79:ed:54:bd:ac:45:3c:df:d5:54:09:30:ac:24:
a6:d6:bd:f0:ed:df:a7:ed:fd:94:70:97:b3:83:05:
d0:8f:7f:1d:3a:94:2c:3d:6c:00:2c:75:9e:fe:51:
f1:3d:93:06:25:14:6e:73:37:11:c5:48:f1:98:b4:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:DF:10:0F:31:5E:43:98:B7:E4:CA:F7:57:ED:17:11:00:06:C9
X509v3 Authority Key Identifier:
keyid:37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e2:ea:50:9b:47:20:0d:74:47:b1:4c:ba:6e:da:ac:b0:df:
22:3f:5a:ae:9e:5a:73:76:81:3e:75:a5:38:db:36:d2:84:89:
04:ef:cd:f6:58:b8:88:4b:aa:8d:28:75:e4:72:40:0e:e7:53:
d7:3d:41:bf:88:a6:4c:75:32:76:40:13:52:5c:fc:c2:ee:83:
fa:ef:51:db:b2:81:15:d9:a8:48:e6:c0:d1:d1:30:e4:71:9e:
5e:cf:b1:db:44:0e:cf:b3:5c:4e:c8:06:84:82:bc:d6:0d:b9:
cf:a4:1d:88:5b:20:8c:45:68:86:93:43:fb:0a:3e:f2:7d:ca:
51:71:61:c1:e6:0f:32:75:35:76:3e:1d:9b:b2:ff:16:85:8d:
ae:20:52:6e:62:f8:c0:5e:58:eb:0b:0f:b1:8c:c3:50:f6:e9:
75:15:d0:e9:24:32:fd:ab:f3:ad:b9:b0:f5:0c:b5:bb:c9:39:
5c:c0:2c:5f:a2:e5:6f:27:d7:f7:5d:39:97:1b:d9:9e:1c:5e:
87:dd:3f:0c:ab:e2:73:fc:6c:0e:eb:35:8f:54:1b:28:17:28:
2e:0e:c4:b9:8a:82:08:fe:fb:52:e1:ec:f0:74:58:86:4b:cf:
7e:73:cb:15:0a:04:b2:90:52:c7:63:84:e9:8d:af:cf:f2:af:
1f:96:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:36 2025 by rpki-client