Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.mft
File: tWybLjoECHnP0A_nTWl_sEZc8no.mft (raw, json)
Hash identifier: bX6m5vk6Ve3k2QL3KGkBeVbtFwqItp/jWsiyWG436kA=
Subject key identifier: C6:79:61:A3:C2:A4:55:CC:3F:AE:C4:FB:99:46:2F:7C:43:91:8C:7F
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0F31
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.mft
Manifest number: 0F0A
Signing time: Sun 10 Mar 2024 02:50:19 +0000
Manifest this update: Sun 10 Mar 2024 02:50:19 +0000
Manifest next update: Tue 12 Mar 2024 02:50:19 +0000
Files and hashes: 1: 7P7LOaJhW4XlDBNUFDr7IhAZamo.roa (hash: VC5S/17KmA1P79OwvWvQN+iTEnsQW/eltFLlXUEwQfg=)
2: 7z2a7aqIECiHA7k-YrT8JyPXMxY.roa (hash: re6tyISdPS11Q+1ViTE0NmfT8CLqyjcrd8WclDm3ziA=)
3: 9B0Di1WNCAk-n0x_ujtDFiEx64Y.roa (hash: JtJFcB91zyrCc4DTRjnOZj09mdPUBs0SKWq3kVwqv84=)
4: AeQLbHSevRsqiFfnl5jUa6PrjEQ.roa (hash: DQz/vE03ybpeU9dt3kZLYm66opg4dwRwknVzmbdARPI=)
5: OXRCP3Ml5OU2KgMgU-9qBmaIsPw.roa (hash: 50SSk7cNsxKzpVsmhErEY0OcoBWQUPtKJigAoMD5RRc=)
6: tWybLjoECHnP0A_nTWl_sEZc8no.crl (hash: EogcizDXQCgUeEMX5Gzad2B/9D//VcTgFuDnHL8aI9A=)
7: uhPv_ZiUJ2ATpkKOERqUnPE1T98.roa (hash: /2ULdgqY2/dEfi+yCsF9wl+8c0fTPuZDzF3qUUus4YI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3889 (0xf31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Mar 10 02:50:19 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C67961A3C2A455CC3FAEC4FB99462F7C43918C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:db:03:57:08:24:8b:88:13:f9:7e:b6:85:
5f:60:af:e1:61:fd:40:d7:60:3a:62:1a:a3:fc:b0:
12:57:3f:cd:a7:b1:3f:ed:65:1b:68:04:97:95:33:
61:ee:5e:c7:83:ba:d3:be:e9:15:79:b0:c6:c3:fe:
d8:da:86:d6:86:65:9f:40:dd:fa:94:1d:87:fd:5c:
64:56:72:1a:55:0a:fe:ee:3c:ab:6a:69:90:08:bb:
03:f5:5c:0b:27:e3:33:c6:e7:d9:cf:8f:8e:70:a4:
32:22:75:d2:80:8a:a1:d3:46:66:32:56:d5:05:5f:
54:07:b4:51:c4:f4:ba:d2:62:be:6b:aa:2d:42:ca:
3c:9f:fc:93:b4:0c:85:27:88:0b:06:36:1b:2c:be:
a5:ac:09:d1:02:87:99:e2:a1:75:c7:89:44:25:8f:
ad:d6:34:67:25:99:8a:19:75:d9:0c:7f:61:6d:44:
52:ac:f5:4d:45:18:df:c3:55:4f:49:b6:8b:a4:b1:
4b:77:b6:e3:c9:b0:60:d6:58:97:06:4e:24:f0:0f:
20:50:65:ff:65:35:3c:dc:06:cd:9f:1d:e6:a2:9e:
0a:c3:1d:9e:d3:a6:e2:7e:42:ff:72:3b:a8:d2:70:
6f:24:44:13:c3:b2:22:99:10:5d:75:04:dd:69:ae:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:79:61:A3:C2:A4:55:CC:3F:AE:C4:FB:99:46:2F:7C:43:91:8C:7F
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:04:3a:9c:d1:c4:a4:a4:88:e7:ff:ae:f9:75:4a:50:aa:f1:
94:8f:bb:a2:a0:aa:10:97:56:3c:fb:44:99:ad:f4:4b:45:fc:
37:70:7a:dc:3c:99:75:95:40:2c:bb:c6:58:fe:26:14:aa:1e:
f7:82:f1:f3:a7:2e:58:c1:da:70:33:58:3c:f0:48:5e:b9:54:
b3:7f:d6:7b:78:10:42:c3:75:1f:8a:32:47:72:47:32:57:49:
bc:47:0b:b0:1c:36:5b:fd:24:94:6e:58:c2:3c:d8:ce:54:df:
f5:30:9e:e4:34:45:a6:a1:00:7c:dc:cd:45:28:4c:6c:c1:d0:
0a:d4:76:7f:71:e1:70:5f:86:d5:ae:6f:22:27:60:f6:97:3c:
80:89:17:19:9e:4d:23:41:0d:7a:91:0d:d5:79:e7:e2:a4:47:
9e:11:22:26:5c:13:bd:91:39:63:f5:3a:42:79:a9:f7:eb:5d:
a0:0d:69:68:d7:ab:59:f6:6b:8f:dc:d6:ec:c4:03:66:0c:47:
8a:ae:56:bc:0e:8f:77:5c:ff:d4:d4:05:87:2a:e5:1a:a3:de:
1d:2f:28:8a:80:41:f7:94:d8:9f:db:a0:84:84:74:66:4e:fa:
09:61:ea:20:71:c5:ef:07:86:d6:31:e4:a5:53:07:01:6d:c2:
8c:b9:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 11:56:00 2024 by rpki-client on console-fra.rpki-client.org