
Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.mft
File: 2yFBWO5LGnCY21Hjh11M0D1zRjs.mft (raw, json)
Hash identifier: AxKhTdXjQDz4sMlXwU1fDhUVY7oCqyXiCAOkHaX49ro=
Subject key identifier: 3A:4B:E1:27:05:80:6D:55:B1:C2:4A:D1:EF:BE:56:82:3F:3E:C9:49
Authority key identifier: DB:21:41:58:EE:4B:1A:70:98:DB:51:E3:87:5D:4C:D0:3D:73:46:3B
Certificate issuer: /CN=DB214158EE4B1A7098DB51E3875D4CD03D73463B
Certificate serial: 0163
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2yFBWO5LGnCY21Hjh11M0D1zRjs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.mft
Manifest number: 0162
Signing time: Mon 13 Jan 2025 03:03:55 +0000
Manifest this update: Mon 13 Jan 2025 03:03:55 +0000
Manifest next update: Mon 13 Jan 2025 09:03:55 +0000
Files and hashes: 1: 2yFBWO5LGnCY21Hjh11M0D1zRjs.crl (hash: 5rd51W7NuQKE1wICy3zIxDB2wmLpUYegKDwyxey2y7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB214158EE4B1A7098DB51E3875D4CD03D73463B
Validity
Not Before: Jan 13 03:03:55 2025 GMT
Not After : Nov 4 15:30:21 2025 GMT
Subject: CN=3A4BE12705806D55B1C24AD1EFBE56823F3EC949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:a9:a6:d6:08:ab:1d:1a:83:4b:28:0d:87:
f6:31:54:17:f0:0f:2a:41:ca:ed:b1:cd:fa:be:95:
db:84:78:c0:16:17:9a:db:eb:f4:c6:2d:39:a2:cc:
48:c2:c6:ed:67:3c:34:4d:57:a5:bb:41:ad:0a:9f:
b8:cd:17:9c:4b:ea:0e:4d:fd:ce:df:76:81:71:a5:
fe:7c:2f:84:b8:a7:cb:1f:11:e7:9a:2f:f9:68:d2:
45:e3:02:30:81:9d:5d:f7:7a:dc:49:de:4b:69:83:
af:cb:2a:90:7d:6f:3f:d9:41:e9:e3:1b:47:9e:ca:
86:b4:ba:d3:e5:0a:09:12:f2:ed:b6:9b:a0:05:83:
6e:91:30:3c:6e:a6:ab:fd:a8:49:2c:2e:f8:fc:40:
15:76:49:1a:f1:c6:95:d2:7d:c0:47:09:15:dd:63:
7a:3b:b1:d7:eb:b1:cf:40:40:64:e7:53:08:ad:bd:
14:22:7f:e5:66:00:13:2f:82:38:c6:db:e6:77:89:
83:eb:4b:8f:a7:f9:f9:70:4b:0f:f3:1e:ac:0f:e4:
5b:e6:4e:52:99:11:fa:35:4c:29:a2:8c:9c:7b:44:
67:9d:7f:76:6f:57:e2:89:ee:1f:19:98:16:42:3e:
08:b8:18:c1:fb:c0:36:d2:5c:9d:96:4d:d6:ce:24:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:E1:27:05:80:6D:55:B1:C2:4A:D1:EF:BE:56:82:3F:3E:C9:49
X509v3 Authority Key Identifier:
keyid:DB:21:41:58:EE:4B:1A:70:98:DB:51:E3:87:5D:4C:D0:3D:73:46:3B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2yFBWO5LGnCY21Hjh11M0D1zRjs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:34:87:94:69:7b:b5:cf:29:ca:23:bb:87:49:1f:9e:44:15:
52:6f:ec:a2:be:62:e0:51:6e:6d:6c:6a:8f:13:bf:7e:97:eb:
2c:74:ae:89:5c:90:45:c0:32:33:c1:38:3c:04:f8:c0:60:56:
4d:35:92:78:2f:01:15:53:fe:c4:39:85:9b:b3:b6:1f:63:36:
76:24:e8:ce:a4:f6:54:0f:55:28:09:f2:f8:48:be:ff:1c:a8:
1c:03:d3:8b:76:6a:06:82:5e:8c:06:40:59:d7:4d:7a:03:59:
82:d2:a7:31:9c:79:2f:4e:54:f8:6c:4f:41:6d:43:cf:6a:73:
ff:93:96:51:08:19:a9:4f:d9:ab:64:63:a6:44:07:cb:fd:24:
07:6e:33:ca:45:37:21:62:06:0b:40:23:b8:17:2b:c7:e7:a2:
33:79:a2:a5:32:b1:49:cb:03:02:5a:66:9e:4d:d5:8d:9f:02:
26:fe:f7:8c:20:21:32:17:ad:cc:f9:83:09:eb:d9:87:35:eb:
c5:b1:79:0f:7c:b4:8f:73:e3:0d:80:6e:e6:84:54:13:28:7b:
08:81:6b:70:78:a1:1a:46:6f:57:ac:76:88:74:b9:94:9a:98:
66:77:b6:7b:33:2d:e3:9c:4d:72:f1:a3:27:31:1f:59:bb:6f:
37:3f:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:54 2025 by rpki-client